Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft
File:                     h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft (raw, json)
Hash identifier:          DI9HNSya/V0aBnhNh52ut4w5mzii1JKY5upVEdppzk8=
Subject key identifier:   D1:DF:ED:85:A4:DE:DA:47:85:90:19:99:D9:0D:70:51:6C:DE:C7:D5
Authority key identifier: 87:90:62:50:3F:D2:08:46:6F:74:EA:9A:F8:76:70:A8:7D:86:A7:36
Certificate issuer:       /CN=A9174880/serialNumber=879062503FD208466F74EA9AF87670A87D86A736
Certificate serial:       3589
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft
Manifest number:          3589
Signing time:             Tue 22 Sep 2026 14:16:54 +0000
Manifest this update:     Tue 22 Sep 2026 14:16:53 +0000
Manifest next update:     Tue 29 Sep 2026 14:16:53 +0000
Files and hashes:         1: h5BiUD_SCEZvdOqa-HZwqH2GpzY.crl (hash: uhzW+uU92hedLt0+Xoul6XmePTqvm0uaHV02ZVggcXE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.crl
                          rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 14:16:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13705 (0x3589)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174880, serialNumber=879062503FD208466F74EA9AF87670A87D86A736
        Validity
            Not Before: Sep 22 14:16:53 2026 GMT
            Not After : Sep 29 14:16:53 2026 GMT
        Subject: CN=6ab28dd6-3c0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:f1:ef:9a:dd:99:29:1b:45:fc:05:f2:de:fa:
                    ec:96:a7:a5:ab:40:c0:8c:fe:86:07:ac:02:f8:c9:
                    97:da:56:23:06:1b:3f:45:6a:9f:00:bc:42:b7:67:
                    98:5f:72:b2:f5:1e:33:98:34:03:03:4b:5e:a7:fa:
                    d6:69:a7:6a:f8:bf:35:0a:38:1b:b5:d7:70:4a:16:
                    f8:71:66:72:c3:1e:16:ea:55:db:70:37:de:df:a1:
                    89:d8:1b:7d:a4:f0:95:d7:43:9e:49:be:88:ae:9d:
                    42:7e:54:c6:38:2d:50:3d:ae:db:b7:58:17:0c:48:
                    8f:e4:27:87:f1:98:18:f6:8a:5d:4f:77:a7:18:26:
                    91:73:80:d3:3f:58:e8:b5:f7:ab:53:1b:b2:30:5f:
                    c9:8f:c3:8d:fb:a7:bd:00:56:72:71:fa:f5:bf:fe:
                    53:88:50:41:b9:c9:a9:23:1f:c9:6f:84:04:9b:55:
                    d8:2a:5a:e6:ab:83:8d:69:54:8e:18:2a:9f:62:f2:
                    51:47:e5:c0:2c:24:04:c1:29:cd:f2:33:a1:fa:29:
                    f5:06:6c:60:50:24:dc:b5:39:37:23:fe:97:66:29:
                    67:33:f4:dd:d9:98:a4:59:4f:bd:e9:31:44:52:43:
                    a8:52:d4:96:97:d7:6f:1f:45:c0:ee:f5:77:56:a7:
                    d0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:DF:ED:85:A4:DE:DA:47:85:90:19:99:D9:0D:70:51:6C:DE:C7:D5
            X509v3 Authority Key Identifier:
                keyid:87:90:62:50:3F:D2:08:46:6F:74:EA:9A:F8:76:70:A8:7D:86:A7:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:d9:fb:3e:eb:9b:e4:9a:26:32:85:24:4a:57:77:f9:0c:3d:
         be:ee:f6:d4:cd:11:eb:93:e3:f9:f9:22:e6:de:3d:44:03:15:
         26:3a:4f:b4:95:c8:c1:a5:9d:9d:5f:32:81:31:59:50:6a:06:
         15:7c:77:e0:15:40:0e:a8:08:16:7e:d3:8d:3a:ab:46:61:66:
         88:27:ec:3a:fa:7d:ea:14:25:06:a4:46:18:c1:ef:ad:e0:a8:
         b4:c0:48:90:1f:f6:26:1b:38:73:41:17:6b:62:6b:cd:4c:c1:
         a6:e2:c7:5d:70:9e:47:29:d6:66:3c:d3:fc:48:56:3c:6b:19:
         ff:79:16:45:77:8b:2b:ab:7e:e7:4d:cd:d0:c5:10:33:41:11:
         0f:6e:fa:4f:4f:3a:2a:37:dc:34:1b:7e:74:e1:79:6b:82:21:
         f4:62:6c:9d:c9:13:b1:37:d9:c1:4a:f6:17:f3:a3:c9:55:6f:
         d1:2c:61:0b:69:e2:b7:aa:d0:d2:e5:5d:44:4a:a3:c4:49:3c:
         94:4a:63:e2:43:73:92:52:39:e2:c3:d1:18:c6:41:25:f7:62:
         6c:5b:57:b8:cc:a5:a0:75:83:24:ba:4a:e5:42:40:1f:bf:da:
         f5:6e:c2:31:4d:f9:51:ec:b2:05:c8:0d:5a:48:71:03:10:70:
         40:d2:71:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:35:06 2026 by rpki-client