Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915F67F/91B983C81D8A11E2B0E494E408B02CD2/5k3PxJR4oTweMa6HKi-sEL-4lTE.mft
File:                     5k3PxJR4oTweMa6HKi-sEL-4lTE.mft (raw, json)
Hash identifier:          /bgcbltvmK+hwTLQdIO0wwQ/E7S+noU8LfT38V5RPik=
Subject key identifier:   3E:9C:0D:C9:00:3D:C8:BD:04:A0:6B:B5:1E:E1:D0:E9:58:60:21:6C
Authority key identifier: E6:4D:CF:C4:94:78:A1:3C:1E:31:AE:87:2A:2F:AC:10:BF:B8:95:31
Certificate issuer:       /CN=A915F67F/serialNumber=E64DCFC49478A13C1E31AE872A2FAC10BFB89531
Certificate serial:       3586
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5k3PxJR4oTweMa6HKi-sEL-4lTE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F67F/91B983C81D8A11E2B0E494E408B02CD2/5k3PxJR4oTweMa6HKi-sEL-4lTE.mft
Manifest number:          3586
Signing time:             Sun 04 Oct 2026 14:33:15 +0000
Manifest this update:     Sun 04 Oct 2026 14:33:14 +0000
Manifest next update:     Sun 11 Oct 2026 14:33:14 +0000
Files and hashes:         1: 5k3PxJR4oTweMa6HKi-sEL-4lTE.crl (hash: y4G7mZPL/45QHc//IFRfER8PNeb6w23ewwyfpMQInu4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F67F/91B983C81D8A11E2B0E494E408B02CD2/5k3PxJR4oTweMa6HKi-sEL-4lTE.crl
                          rsync://rpki.apnic.net/member_repository/A915F67F/91B983C81D8A11E2B0E494E408B02CD2/5k3PxJR4oTweMa6HKi-sEL-4lTE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5k3PxJR4oTweMa6HKi-sEL-4lTE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 14:33:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13702 (0x3586)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F67F, serialNumber=E64DCFC49478A13C1E31AE872A2FAC10BFB89531
        Validity
            Not Before: Oct  4 14:33:14 2026 GMT
            Not After : Oct 11 14:33:14 2026 GMT
        Subject: CN=6ac263ab-43d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:3e:1c:28:89:f0:4e:d2:1f:72:e3:13:8c:ca:
                    ee:27:b5:cb:a2:6c:98:32:2c:24:99:4d:a8:9a:d6:
                    6b:45:cb:f8:6b:ef:74:6d:42:36:1a:49:2d:41:b1:
                    1a:da:4e:ee:ba:59:ab:7f:d7:ad:03:9b:9f:12:5f:
                    e4:a0:72:f3:90:32:c8:17:19:23:42:b4:10:3f:4e:
                    88:59:17:a0:bf:3c:8c:27:67:c2:d2:61:db:5b:bb:
                    90:15:ba:18:f5:e9:df:d0:02:ea:72:33:5a:ed:51:
                    e7:42:3a:2b:98:9c:89:07:09:f4:4c:04:79:2b:8a:
                    04:2f:e9:01:d9:9a:d7:5b:5a:35:2b:9c:e5:c9:e4:
                    01:76:7c:3e:22:ae:c3:87:63:ce:56:66:49:f4:c4:
                    a9:f4:00:7a:6c:15:80:c0:60:ab:f1:45:10:e0:cf:
                    2e:4c:5d:3c:e0:40:7e:3d:84:0d:7a:b0:ac:69:be:
                    88:f4:c5:51:68:73:d5:58:e6:7a:22:39:1e:f6:52:
                    bb:e1:9e:e1:ae:61:20:c2:fc:92:f1:2a:e7:91:eb:
                    28:b7:1e:e0:c5:ee:74:60:c3:eb:68:49:57:b2:03:
                    40:b3:d6:5c:5f:17:4f:51:0d:64:d3:ae:f3:6f:0a:
                    63:1b:d2:f9:cc:cb:23:05:6d:a4:0b:f2:b6:46:c5:
                    11:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:9C:0D:C9:00:3D:C8:BD:04:A0:6B:B5:1E:E1:D0:E9:58:60:21:6C
            X509v3 Authority Key Identifier:
                keyid:E6:4D:CF:C4:94:78:A1:3C:1E:31:AE:87:2A:2F:AC:10:BF:B8:95:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F67F/91B983C81D8A11E2B0E494E408B02CD2/5k3PxJR4oTweMa6HKi-sEL-4lTE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5k3PxJR4oTweMa6HKi-sEL-4lTE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F67F/91B983C81D8A11E2B0E494E408B02CD2/5k3PxJR4oTweMa6HKi-sEL-4lTE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:a6:f6:c1:6e:48:1d:bf:b6:1d:03:b3:ca:74:22:5a:fb:9a:
         44:be:af:92:85:5f:ef:83:0d:70:d3:fc:6f:97:ed:48:54:b1:
         bf:60:c3:5b:f7:2d:d8:fd:7a:b0:c7:d3:7b:e3:ff:43:14:1f:
         31:06:17:00:04:d4:b1:8a:b6:42:85:e2:78:86:76:23:18:6c:
         70:24:31:59:97:db:f1:98:57:3d:58:33:60:91:ea:cb:21:1a:
         d0:c5:d6:90:dd:3a:5e:86:15:4c:84:d8:6d:7b:28:7a:9d:d1:
         69:de:5a:4b:f3:93:9e:b9:bf:4f:40:59:5b:7f:b9:cf:a8:12:
         29:e3:26:b5:b1:c0:89:f9:77:b1:75:08:0f:a1:22:b6:6e:ae:
         8a:e4:95:fe:b6:60:53:d3:a8:27:12:3e:be:ca:64:e0:1e:44:
         3f:9f:4d:68:d3:11:2c:5c:aa:01:5c:de:58:96:a8:58:b2:30:
         d2:17:ab:08:31:fc:97:2c:58:0d:3b:12:bb:23:ef:74:69:10:
         d2:1a:e7:f7:91:af:89:39:c4:fb:23:30:f9:46:32:63:87:df:
         cc:a0:52:b5:1b:49:4f:e7:31:48:ce:ce:b0:77:d7:7a:96:57:
         f0:6d:cf:13:94:81:42:10:d8:db:76:fb:98:46:cb:8d:a0:4a:
         2c:53:0e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 05:23:49 2026 by rpki-client