Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E1C3D/9479C854BAFE11F1AD29EC975D11F970/O3lhBfUQkckLRwQth4bfaJmS6jk.mft
File:                     O3lhBfUQkckLRwQth4bfaJmS6jk.mft (raw, json)
Hash identifier:          pBCS1b5169Xe9bDhPLYrJZuQ++cNiNpnrRcX4d0O7MA=
Subject key identifier:   A8:C5:C6:0C:05:E0:DC:8C:9F:D3:D5:E4:F4:BF:46:D3:04:60:95:47
Authority key identifier: 3B:79:61:05:F5:10:91:C9:0B:47:04:2D:87:86:DF:68:99:92:EA:39
Certificate issuer:       /CN=A91E1C3D/serialNumber=3B796105F51091C90B47042D8786DF689992EA39
Certificate serial:       05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O3lhBfUQkckLRwQth4bfaJmS6jk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1C3D/9479C854BAFE11F1AD29EC975D11F970/O3lhBfUQkckLRwQth4bfaJmS6jk.mft
Manifest number:          05
Signing time:             Sat 03 Oct 2026 10:01:44 +0000
Manifest this update:     Sat 03 Oct 2026 10:01:43 +0000
Manifest next update:     Sat 10 Oct 2026 10:01:43 +0000
Files and hashes:         1: O3lhBfUQkckLRwQth4bfaJmS6jk.crl (hash: 9eGRUmcz4cG0B6Yam4M0eBNLEs/2Z42IqtE6Fuprz4E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1C3D/9479C854BAFE11F1AD29EC975D11F970/O3lhBfUQkckLRwQth4bfaJmS6jk.crl
                          rsync://rpki.apnic.net/member_repository/A91E1C3D/9479C854BAFE11F1AD29EC975D11F970/O3lhBfUQkckLRwQth4bfaJmS6jk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O3lhBfUQkckLRwQth4bfaJmS6jk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 10:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1C3D, serialNumber=3B796105F51091C90B47042D8786DF689992EA39
        Validity
            Not Before: Oct  3 10:01:43 2026 GMT
            Not After : Oct 10 10:01:43 2026 GMT
        Subject: CN=6ac0d287-e0eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1c:8e:af:38:4f:17:e8:4b:83:fd:be:29:d7:
                    92:55:00:dd:f8:21:55:95:e1:cb:30:e6:84:b5:6a:
                    24:1f:b2:9c:cf:2e:ee:69:b4:2a:05:05:43:36:3c:
                    f9:66:7f:15:52:54:dd:8c:c6:1a:9a:62:35:86:3f:
                    ff:58:e8:2b:ed:96:ec:fa:be:db:4f:2e:a0:06:67:
                    93:da:97:75:d7:a7:e1:e9:32:6b:98:23:28:ba:ef:
                    cf:c3:26:7f:09:e1:3c:5b:74:89:19:34:76:e9:1a:
                    9a:63:76:b7:90:59:71:25:72:9f:28:9f:a2:92:8d:
                    4a:bf:34:47:5e:5a:24:da:e5:87:cb:48:b5:24:71:
                    95:e0:a9:29:a7:08:84:98:bc:40:84:1e:a5:4b:74:
                    c5:13:e5:dd:b7:72:79:7f:d8:c1:39:25:2e:6c:cb:
                    01:7a:32:cc:d8:e4:bd:a8:eb:4f:bb:24:1a:bb:b8:
                    81:8d:87:9a:8f:15:fb:dd:f1:5e:4e:d4:1d:a7:5c:
                    52:5f:58:9e:37:ad:42:2d:00:63:e2:b9:b9:a3:22:
                    89:b6:ec:8e:fa:76:73:26:fa:0e:68:8f:73:31:d5:
                    da:b1:4c:ed:31:7f:f6:ab:7e:80:ed:bc:54:e0:1f:
                    84:7c:2c:20:be:04:66:5b:86:54:93:f9:57:4a:c8:
                    b8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:C5:C6:0C:05:E0:DC:8C:9F:D3:D5:E4:F4:BF:46:D3:04:60:95:47
            X509v3 Authority Key Identifier:
                keyid:3B:79:61:05:F5:10:91:C9:0B:47:04:2D:87:86:DF:68:99:92:EA:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1C3D/9479C854BAFE11F1AD29EC975D11F970/O3lhBfUQkckLRwQth4bfaJmS6jk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O3lhBfUQkckLRwQth4bfaJmS6jk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1C3D/9479C854BAFE11F1AD29EC975D11F970/O3lhBfUQkckLRwQth4bfaJmS6jk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:28:ba:c5:c3:49:65:51:d0:ad:f6:b6:5d:7a:7e:fb:7b:9d:
         37:d1:2e:5c:cd:54:b6:77:46:ca:e5:00:aa:e8:d7:b0:03:57:
         f0:e3:c8:78:0f:38:c2:9e:0d:08:44:58:99:90:30:ab:1d:b5:
         0e:8b:52:81:97:11:59:b2:2d:56:d8:5e:33:20:43:13:08:1a:
         39:88:22:23:8b:44:af:e0:c0:45:c5:cb:0c:8a:9a:a0:8e:10:
         69:75:97:79:36:7a:18:df:e4:d4:dc:f0:57:2b:74:19:a8:3b:
         81:32:ea:16:8b:d5:d3:98:b8:9b:49:7f:da:64:c4:2e:31:8d:
         33:9f:9e:c9:0d:0b:51:99:89:4c:ed:ec:55:5e:f2:e4:c2:55:
         65:64:02:75:45:14:cf:b9:ec:eb:f3:70:17:81:2e:a7:b3:e6:
         70:c8:4e:39:81:4d:0e:35:8c:f2:2f:94:ea:85:ce:7b:57:ac:
         50:b4:89:be:9a:43:cb:68:6b:8c:37:ae:a6:7b:b6:f2:56:4a:
         2b:26:55:1f:98:2f:98:2b:db:18:30:d3:b7:4b:f2:f8:2c:46:
         dc:fd:3a:90:9f:6c:ec:bb:1f:8a:c7:75:75:54:2d:e7:f5:c2:
         21:d7:c8:c4:f2:f1:ab:74:51:89:29:40:86:92:80:c9:9d:d1:
         a6:c7:a3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:32:26 2026 by rpki-client