Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.mft
File:                     dEy0Bnedz3q-afF952ykOS2ebsM.mft (raw, json)
Hash identifier:          sTm8O/RMNhgDb8mE9HLiDj9qQEN0BZagBoDtbpKHUV0=
Subject key identifier:   80:1F:2E:5A:16:D2:31:7F:C6:9B:44:57:FB:AB:29:BF:75:0F:C8:01
Authority key identifier: 74:4C:B4:06:77:9D:CF:7A:BE:69:F1:7D:E7:6C:A4:39:2D:9E:6E:C3
Certificate issuer:       /CN=A911535B/serialNumber=744CB406779DCF7ABE69F17DE76CA4392D9E6EC3
Certificate serial:       3580
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEy0Bnedz3q-afF952ykOS2ebsM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.mft
Manifest number:          3580
Signing time:             Tue 22 Sep 2026 14:53:48 +0000
Manifest this update:     Tue 22 Sep 2026 14:53:47 +0000
Manifest next update:     Tue 29 Sep 2026 14:53:47 +0000
Files and hashes:         1: dEy0Bnedz3q-afF952ykOS2ebsM.crl (hash: MObDlg9KNYMYGhqlzpO+j5WnATwAsFKivoWI9hL8zI4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.crl
                          rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEy0Bnedz3q-afF952ykOS2ebsM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 14:53:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13696 (0x3580)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911535B, serialNumber=744CB406779DCF7ABE69F17DE76CA4392D9E6EC3
        Validity
            Not Before: Sep 22 14:53:47 2026 GMT
            Not After : Sep 29 14:53:47 2026 GMT
        Subject: CN=6ab2967c-9fdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:85:23:d6:21:91:03:a1:1e:99:57:1a:31:b1:
                    2a:10:a5:83:67:15:27:dd:cf:15:05:5a:f2:fa:2c:
                    71:9e:6a:db:5f:b7:f8:09:97:b2:79:2d:f2:af:fd:
                    c4:ac:68:61:61:a8:4c:12:91:57:4d:f7:4a:d1:2c:
                    b5:bc:46:0e:c6:fe:b5:53:9f:a3:95:65:ba:40:0f:
                    e8:12:12:7a:b5:45:5d:11:cf:40:e4:ea:50:5f:1f:
                    91:b1:e5:75:b3:8f:ad:78:e5:ff:8d:5c:8e:29:ed:
                    9d:df:e8:bd:0b:f4:3a:fb:ee:e4:d7:10:90:1f:a6:
                    c4:80:74:0b:4c:10:2d:56:37:7e:15:fa:2f:cc:74:
                    03:28:5a:2f:17:a5:8e:64:bc:e6:57:b0:f9:fe:c8:
                    3d:4c:17:8d:cd:55:2f:53:23:69:fb:d3:80:6c:4f:
                    6f:ae:f1:50:5a:62:ae:91:af:95:2d:50:12:8c:96:
                    f2:64:82:82:1f:97:76:42:fe:88:96:6e:1a:c9:c6:
                    df:29:15:42:dc:89:f5:50:06:12:ef:7e:f1:18:26:
                    c8:d7:77:8d:b7:ce:c1:7c:67:ff:4d:fc:97:80:ea:
                    78:85:f0:77:6b:cb:af:52:7e:85:80:9f:fd:0e:ca:
                    ca:af:3f:ff:83:91:79:e8:c2:92:ee:77:1b:9e:06:
                    a8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:1F:2E:5A:16:D2:31:7F:C6:9B:44:57:FB:AB:29:BF:75:0F:C8:01
            X509v3 Authority Key Identifier:
                keyid:74:4C:B4:06:77:9D:CF:7A:BE:69:F1:7D:E7:6C:A4:39:2D:9E:6E:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEy0Bnedz3q-afF952ykOS2ebsM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:e3:14:55:f3:af:69:14:c6:cd:ba:6c:b3:95:2c:d6:6c:f1:
         c3:bd:31:4a:eb:4d:48:17:3a:6e:b5:94:11:8b:90:9d:4b:01:
         32:82:c1:69:f6:13:fa:86:3c:54:76:e0:02:15:59:39:b9:3c:
         ed:77:71:46:be:98:dd:84:f2:7d:1c:86:63:3d:fb:97:b5:07:
         ba:a9:86:18:1d:db:8d:3f:a2:6f:f7:88:bd:d7:cc:c3:5b:fe:
         4d:ad:b5:87:04:d0:4e:0f:be:5b:44:31:02:80:62:de:33:9a:
         5e:8c:23:78:92:23:2b:d4:be:91:b0:bc:45:2e:fd:c7:e8:0a:
         1c:d6:e2:1c:52:c5:a4:a6:59:04:ad:6b:bd:73:10:13:70:f3:
         24:35:2e:b7:74:8d:52:dd:d1:b8:2b:c1:be:8d:87:78:02:d8:
         5d:1d:f8:b7:40:d6:fb:ba:f2:8d:80:b7:81:71:e8:33:92:88:
         f4:96:1e:37:27:cd:13:27:74:8b:1e:09:d1:72:03:6c:86:c9:
         a4:10:d1:75:10:3d:be:f1:63:59:18:63:a8:89:34:5b:7c:c3:
         14:c0:01:a8:39:84:7c:e0:44:74:fc:a9:08:27:73:10:26:1f:
         ee:f3:d6:7c:99:67:29:51:aa:84:16:fb:f2:10:a2:0a:4a:0c:
         f6:bd:f8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:55:23 2026 by rpki-client