Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.mft
File:                     XEzzdpk9EYUoJw3ZUvMCztV18dw.mft (raw, json)
Hash identifier:          8dNx+j8a9qK/gXRLjzthU2VeBd/IvvLCvuiqpHcaM4Y=
Subject key identifier:   10:1E:54:79:3C:BB:0A:A2:AE:FD:1E:3D:3C:B3:A3:BC:0F:2A:50:80
Authority key identifier: 5C:4C:F3:76:99:3D:11:85:28:27:0D:D9:52:F3:02:CE:D5:75:F1:DC
Certificate issuer:       /CN=A91FBD89/serialNumber=5C4CF376993D118528270DD952F302CED575F1DC
Certificate serial:       0607
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEzzdpk9EYUoJw3ZUvMCztV18dw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.mft
Manifest number:          0607
Signing time:             Fri 02 Oct 2026 23:12:04 +0000
Manifest this update:     Fri 02 Oct 2026 23:12:03 +0000
Manifest next update:     Fri 09 Oct 2026 23:12:03 +0000
Files and hashes:         1: XEzzdpk9EYUoJw3ZUvMCztV18dw.crl (hash: 6sx3Ya8ytn93UHkjEOr/+Dxn3FOMF2nkUbuQCH11X3E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.crl
                          rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEzzdpk9EYUoJw3ZUvMCztV18dw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 23:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1543 (0x607)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FBD89, serialNumber=5C4CF376993D118528270DD952F302CED575F1DC
        Validity
            Not Before: Oct  2 23:12:03 2026 GMT
            Not After : Oct  9 23:12:03 2026 GMT
        Subject: CN=6ac03a44-a9c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bd:d5:7e:4c:57:6d:ff:71:27:7a:20:31:7f:
                    48:d0:0a:76:c3:5a:d1:27:2e:b9:4d:a1:ce:27:58:
                    a6:8a:a0:8a:e0:6d:54:19:c4:b2:19:ac:03:f2:3c:
                    c3:76:c7:8c:d1:33:1a:60:e5:03:8b:38:c2:5d:3f:
                    59:0c:05:62:86:ce:90:d2:9f:1f:af:a3:cb:dc:b2:
                    30:19:41:ca:f3:39:6c:f5:0f:fd:fa:8c:1f:c6:5a:
                    ac:aa:d3:16:fb:11:a7:fb:e3:1c:bf:bd:f4:e1:b3:
                    3e:bc:e0:57:d5:b2:28:00:2b:3b:83:36:ad:18:98:
                    97:ce:17:d2:15:c9:39:ef:69:1f:b5:2e:55:65:b9:
                    78:b5:f6:a2:68:17:5b:9a:20:c8:e5:c3:4b:45:c7:
                    f4:50:2e:c4:b3:2f:2c:8b:25:d7:72:b6:ed:36:31:
                    e7:af:b2:ad:5a:52:ab:c7:6a:c9:e6:98:79:ad:54:
                    45:36:0c:df:3a:4c:c8:6e:a5:43:b9:77:21:d6:38:
                    9d:bb:32:7b:d1:0d:4f:86:b2:8d:7f:89:c2:d1:48:
                    a8:35:56:a0:69:33:be:45:5a:c6:6c:fd:f4:fd:5d:
                    03:01:9b:29:6b:be:65:6c:15:0c:38:81:5f:82:9f:
                    2c:9f:d3:cf:0c:b7:3c:cc:2a:45:ce:d6:cd:21:59:
                    26:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:1E:54:79:3C:BB:0A:A2:AE:FD:1E:3D:3C:B3:A3:BC:0F:2A:50:80
            X509v3 Authority Key Identifier:
                keyid:5C:4C:F3:76:99:3D:11:85:28:27:0D:D9:52:F3:02:CE:D5:75:F1:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEzzdpk9EYUoJw3ZUvMCztV18dw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:74:21:e8:c7:58:13:f1:ef:aa:52:54:94:9c:a3:08:bc:c9:
         c5:b8:38:05:12:f5:d2:8f:31:15:06:0b:23:ad:ff:b1:b9:b5:
         0b:bb:2d:73:68:f9:ff:8b:37:0c:a8:d8:42:03:9a:ee:a1:2c:
         c4:5f:53:a5:92:17:2b:a2:e8:23:37:88:19:af:e6:ee:16:ae:
         3d:dc:8b:d7:87:07:0e:21:03:52:91:3a:90:fc:72:ca:31:9b:
         76:44:23:b5:60:92:bd:a0:a1:1b:2c:c1:9e:e4:d5:7e:30:9c:
         4f:b3:a5:56:4e:57:5d:37:5d:db:08:29:7f:0b:7b:dd:3d:d4:
         6c:ce:87:11:b3:3e:86:9d:ea:07:c4:4c:fb:e8:36:78:fe:b2:
         7f:c8:36:52:cd:aa:cc:4c:c4:f0:9d:1c:f0:31:fa:4a:ac:ab:
         8c:bf:af:35:43:1c:b0:1e:37:98:b7:a3:ba:be:45:da:f4:d4:
         19:18:6c:43:3f:ac:57:82:b3:75:b7:e1:a9:04:b3:4f:f5:e1:
         7c:cb:49:a5:71:48:ec:a2:ac:09:20:8f:4c:86:90:3c:9f:fa:
         19:49:b1:1a:b3:29:60:4c:7b:b0:dd:bd:ac:fd:7f:d4:0f:da:
         83:f8:99:e0:d8:63:50:1b:99:34:7f:a9:5e:b5:dc:76:31:d1:
         be:9e:22:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:02:58 2026 by rpki-client