Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F67F/91B983C81D8A11E2B0E494E408B02CD2/5k3PxJR4oTweMa6HKi-sEL-4lTE.mft
File:                     5k3PxJR4oTweMa6HKi-sEL-4lTE.mft (raw, json)
Hash identifier:          ytvoFd7yIaIhkPszjqq+T4EkUIsOEzWe1nFXNdjjSbI=
Subject key identifier:   F6:0A:BE:8F:90:99:91:35:5C:90:EC:4C:78:90:FE:F6:FF:3D:E5:62
Authority key identifier: E6:4D:CF:C4:94:78:A1:3C:1E:31:AE:87:2A:2F:AC:10:BF:B8:95:31
Certificate issuer:       /CN=A915F67F/serialNumber=E64DCFC49478A13C1E31AE872A2FAC10BFB89531
Certificate serial:       3560
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5k3PxJR4oTweMa6HKi-sEL-4lTE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F67F/91B983C81D8A11E2B0E494E408B02CD2/5k3PxJR4oTweMa6HKi-sEL-4lTE.mft
Manifest number:          3560
Signing time:             Wed 22 Jul 2026 14:34:28 +0000
Manifest this update:     Wed 22 Jul 2026 14:34:27 +0000
Manifest next update:     Wed 29 Jul 2026 14:34:27 +0000
Files and hashes:         1: 5k3PxJR4oTweMa6HKi-sEL-4lTE.crl (hash: 96YjU4PVOcv+lz8IE8SFbOkCgVKcJt8b6N7mG7h3yWw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F67F/91B983C81D8A11E2B0E494E408B02CD2/5k3PxJR4oTweMa6HKi-sEL-4lTE.crl
                          rsync://rpki.apnic.net/member_repository/A915F67F/91B983C81D8A11E2B0E494E408B02CD2/5k3PxJR4oTweMa6HKi-sEL-4lTE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5k3PxJR4oTweMa6HKi-sEL-4lTE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 14:34:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13664 (0x3560)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F67F, serialNumber=E64DCFC49478A13C1E31AE872A2FAC10BFB89531
        Validity
            Not Before: Jul 22 14:34:27 2026 GMT
            Not After : Jul 29 14:34:27 2026 GMT
        Subject: CN=6a60d4f3-7723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e6:25:50:f7:4f:32:2a:d5:67:5f:51:48:c4:
                    8f:90:b2:95:6e:15:c5:f1:14:03:58:34:04:98:e6:
                    d1:ee:2d:79:b9:c3:17:31:ba:2d:09:bd:b1:b2:ef:
                    c3:45:82:ef:55:85:24:25:33:7c:4a:7a:23:9d:f2:
                    7b:a2:dc:dc:45:5e:bd:3d:37:08:c4:22:a3:9b:69:
                    8c:10:88:0a:5f:92:98:58:10:8b:5c:7b:af:f9:a9:
                    ea:5f:40:97:a2:6e:41:02:63:05:c4:5e:fa:bc:4c:
                    da:8b:6f:3a:cd:57:e9:ca:78:fb:b4:5f:cd:d3:5f:
                    69:15:11:c2:50:e8:b8:15:31:a7:91:65:66:24:5e:
                    21:7c:5d:f1:50:8c:de:74:14:55:f2:f8:96:37:b0:
                    f7:24:2b:4a:cc:be:b8:0c:b4:0a:89:3a:2d:5e:7d:
                    a8:57:b8:2e:5c:2c:13:1b:fc:d0:39:f8:54:a4:19:
                    ac:f5:6f:ce:49:2b:ab:76:94:6c:ca:a4:a5:b8:c9:
                    0d:be:98:f3:d4:74:32:0d:19:4c:21:de:50:7d:ef:
                    d5:da:e1:cc:75:fb:f9:fc:0a:b1:2f:13:a4:24:04:
                    3b:8d:62:21:0b:f9:bb:3c:bb:21:59:07:65:dd:9d:
                    bd:13:76:45:29:18:45:dd:6d:d8:30:28:7b:9a:8e:
                    cd:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:0A:BE:8F:90:99:91:35:5C:90:EC:4C:78:90:FE:F6:FF:3D:E5:62
            X509v3 Authority Key Identifier:
                keyid:E6:4D:CF:C4:94:78:A1:3C:1E:31:AE:87:2A:2F:AC:10:BF:B8:95:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F67F/91B983C81D8A11E2B0E494E408B02CD2/5k3PxJR4oTweMa6HKi-sEL-4lTE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5k3PxJR4oTweMa6HKi-sEL-4lTE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F67F/91B983C81D8A11E2B0E494E408B02CD2/5k3PxJR4oTweMa6HKi-sEL-4lTE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:e1:d8:fe:71:18:76:a0:9f:f5:42:d5:12:d7:3d:79:e0:7a:
         9f:5c:de:63:79:35:75:67:6f:db:b9:73:c3:7d:97:f1:86:36:
         fa:71:1c:e0:50:0a:d7:07:f6:41:f1:26:10:39:6b:db:50:b5:
         d9:fe:50:4a:b7:91:c8:6c:73:d5:84:ff:7b:2f:b5:ae:cb:17:
         45:a8:8a:40:8e:9f:0a:ca:4e:60:53:b4:dd:f6:49:cb:c9:4c:
         4f:e0:3c:d2:cc:2e:15:04:e0:41:d3:2b:0d:ba:ea:95:ce:0d:
         5f:fa:ea:44:69:29:b4:c3:48:aa:44:70:e0:d5:ae:07:79:2f:
         da:7b:60:a6:ff:4c:ed:5f:60:80:a3:ab:64:4f:1e:fe:0d:7a:
         d2:d4:7a:90:29:fe:9e:7a:2f:22:81:ad:4a:11:09:ab:ff:33:
         bd:ef:b2:6a:53:cf:e3:a5:71:84:19:05:e9:17:61:21:4c:a9:
         ee:5f:66:07:52:dd:66:f8:8a:ba:ec:fb:6a:41:ee:1c:ef:4f:
         89:8d:ed:b2:ca:11:07:f9:95:b6:70:58:66:bc:03:92:4c:76:
         ff:c9:c6:55:a8:f3:fd:26:4e:d6:cb:01:36:e4:f3:b7:be:50:
         a0:5a:57:29:df:f3:4c:98:70:d7:40:8a:56:0a:10:e6:9e:08:
         d9:94:27:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:29:03 2026 by rpki-client