Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft
File:                     5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft (raw, json)
Hash identifier:          Vv7VagQht4VNQgrE6OmB7xe18is8CVm4md0Lvo7DNJM=
Subject key identifier:   D7:3D:D3:12:9B:8B:BD:C6:68:8C:7A:91:59:8E:6F:9A:EA:D8:58:DE
Authority key identifier: E6:1F:A1:24:A6:18:E2:56:67:CC:31:CC:FC:49:16:CE:07:6F:DA:57
Certificate issuer:       /CN=A91F35BB/serialNumber=E61FA124A618E25667CC31CCFC4916CE076FDA57
Certificate serial:       05BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5h-hJKYY4lZnzDHM_EkWzgdv2lc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft
Manifest number:          05BD
Signing time:             Thu 08 Oct 2026 23:13:58 +0000
Manifest this update:     Thu 08 Oct 2026 23:13:57 +0000
Manifest next update:     Thu 15 Oct 2026 23:13:57 +0000
Files and hashes:         1: 5h-hJKYY4lZnzDHM_EkWzgdv2lc.crl (hash: b/sGr5uvg0qeBLMziXb8J1rPkpB2GNZACp4RgeSUaGc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.crl
                          rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5h-hJKYY4lZnzDHM_EkWzgdv2lc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 23:13:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1469 (0x5bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F35BB, serialNumber=E61FA124A618E25667CC31CCFC4916CE076FDA57
        Validity
            Not Before: Oct  8 23:13:57 2026 GMT
            Not After : Oct 15 23:13:57 2026 GMT
        Subject: CN=6ac823b5-bd5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c6:98:fa:ec:d6:23:1b:ac:aa:f5:2b:87:c3:
                    d9:31:54:e4:da:8f:85:34:58:02:4a:a0:da:0d:ac:
                    2b:b2:4a:82:67:0d:e7:25:43:f3:c2:30:05:82:9c:
                    6a:37:71:44:95:86:f7:80:f0:9d:6b:e4:32:c6:87:
                    00:46:a2:66:c2:64:5c:e5:65:96:17:f5:c6:50:22:
                    91:aa:c6:71:71:a8:ec:8d:a3:27:81:5a:fe:cb:36:
                    b7:b6:2c:28:af:9a:c5:4a:fe:43:e4:75:07:d4:35:
                    2e:9b:2c:73:82:8b:80:6a:db:1d:2a:f6:a3:85:4b:
                    af:47:01:73:4f:c3:9d:7e:a7:b4:25:e8:30:6b:11:
                    7e:8f:95:8d:06:62:70:05:05:c4:9c:a0:31:1f:44:
                    bf:d5:86:73:5d:ac:77:76:25:65:86:0f:64:79:20:
                    18:50:4c:a7:14:af:a6:11:ea:81:09:e9:89:38:06:
                    e5:7e:e0:77:24:ab:21:be:5c:8c:a4:c1:41:b6:c7:
                    c3:f6:f2:9e:49:3d:78:df:36:39:4b:31:e1:06:bb:
                    d9:cc:0a:63:84:5e:c8:5a:5c:eb:30:ca:99:76:1f:
                    94:07:00:91:2f:00:97:0b:cb:74:3c:47:19:06:ad:
                    d7:ad:53:e1:db:5f:9f:cf:26:9e:e8:74:ae:a3:73:
                    f5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:3D:D3:12:9B:8B:BD:C6:68:8C:7A:91:59:8E:6F:9A:EA:D8:58:DE
            X509v3 Authority Key Identifier:
                keyid:E6:1F:A1:24:A6:18:E2:56:67:CC:31:CC:FC:49:16:CE:07:6F:DA:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5h-hJKYY4lZnzDHM_EkWzgdv2lc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:fd:2d:b7:04:28:e1:c9:f0:d8:85:75:c5:69:cb:69:06:21:
         89:9d:6d:32:ce:46:7b:86:62:dd:35:03:7e:40:05:68:05:a3:
         40:3d:63:5a:79:5c:63:00:a4:cd:1b:13:dc:d8:ae:21:51:30:
         e4:c2:34:be:47:26:64:54:cd:dc:16:03:45:1a:a6:c4:ff:7e:
         df:50:5b:10:73:67:92:84:e9:e3:6d:55:b0:5f:f1:23:36:99:
         74:6c:e2:e8:f7:d9:6a:c1:36:d7:35:6c:47:74:b9:eb:d6:e6:
         84:e9:72:24:b0:db:e6:dc:f4:58:ca:f3:d5:11:99:01:49:8e:
         11:fc:cb:88:e1:e0:10:a4:39:e1:e6:3f:47:6b:c1:9e:aa:37:
         4d:f8:c1:31:7d:08:ca:19:e7:f0:e1:95:ed:83:ca:91:0d:c4:
         b3:98:5e:1d:57:48:b5:bd:e4:2a:53:1c:d9:9a:79:29:48:2f:
         26:54:b1:39:8c:aa:3b:31:c8:c8:24:a8:82:0f:61:85:bc:15:
         11:71:8b:27:f2:aa:c6:64:69:2e:8f:65:3b:c9:d5:43:4a:a6:
         d2:ab:dd:a5:4f:11:9e:0e:9e:70:35:0a:8b:b2:72:f3:58:c6:
         84:86:ab:b4:12:af:22:73:df:95:59:2c:c6:c8:e1:68:d2:02:
         37:07:c0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 15:39:31 2026 by rpki-client