Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/57DhU8QU0ThUitp16M0FzWk2cgY.mft
File:                     57DhU8QU0ThUitp16M0FzWk2cgY.mft (raw, json)
Hash identifier:          NnAXQBu1Vt1nfkT3ygPIoVSmnap/jUo+bW506qUfvuc=
Subject key identifier:   D2:80:12:F6:54:68:69:B2:E5:22:B2:2E:A9:D3:D9:51:C3:C5:E9:8D
Authority key identifier: E7:B0:E1:53:C4:14:D1:38:54:8A:DA:75:E8:CD:05:CD:69:36:72:06
Certificate issuer:       /CN=A91B42CA/serialNumber=E7B0E153C414D138548ADA75E8CD05CD69367206
Certificate serial:       3582
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57DhU8QU0ThUitp16M0FzWk2cgY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/57DhU8QU0ThUitp16M0FzWk2cgY.mft
Manifest number:          5577
Signing time:             Tue 22 Sep 2026 15:01:44 +0000
Manifest this update:     Tue 22 Sep 2026 15:01:44 +0000
Manifest next update:     Tue 29 Sep 2026 15:01:44 +0000
Files and hashes:         1: 57DhU8QU0ThUitp16M0FzWk2cgY.crl (hash: AyQJdk3ax/LdUgtQuthKoWDkiCR1MW+ZAO+4Am2Di8Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/57DhU8QU0ThUitp16M0FzWk2cgY.crl
                          rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/57DhU8QU0ThUitp16M0FzWk2cgY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57DhU8QU0ThUitp16M0FzWk2cgY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 15:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13698 (0x3582)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B42CA, serialNumber=E7B0E153C414D138548ADA75E8CD05CD69367206
        Validity
            Not Before: Sep 22 15:01:44 2026 GMT
            Not After : Sep 29 15:01:44 2026 GMT
        Subject: CN=6ab29858-c7cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:53:28:61:9c:c0:de:54:a0:4e:eb:09:51:01:
                    b7:4e:da:cb:53:5a:bb:e9:ac:2c:fa:ae:66:5a:51:
                    57:af:b1:00:52:75:b9:8f:a8:df:7d:20:6a:8c:06:
                    37:1c:ab:92:b2:69:c9:e6:ea:00:ca:d6:8c:5c:ae:
                    15:78:ba:88:a2:85:78:14:94:18:f4:f6:44:f9:a4:
                    a0:98:d4:8e:dd:69:7d:e3:2f:9f:b0:21:a4:22:0f:
                    0e:9f:59:11:53:b9:37:ac:2d:82:08:de:d6:d9:77:
                    39:3a:bc:0d:d8:70:ae:4e:cf:1d:23:d1:59:5c:72:
                    3c:ed:87:6f:51:36:85:74:9b:74:86:df:24:cf:e6:
                    f2:35:ee:85:90:08:a3:ea:7a:0f:cc:f6:b0:3e:72:
                    45:0b:9c:ac:c0:7e:7c:9b:72:a9:81:0d:a2:83:ec:
                    73:58:5e:7b:b7:b6:e6:2c:35:ff:7e:11:41:b7:81:
                    ee:50:41:0e:65:ea:c1:9f:c6:64:ea:39:53:96:ee:
                    94:f8:a5:58:52:87:96:c4:4f:e6:55:11:ac:e5:36:
                    ff:df:84:fe:75:52:76:ba:a1:a8:72:cd:a9:d1:6f:
                    e2:02:0e:70:03:e0:49:39:8d:26:ab:40:f8:79:26:
                    88:7d:2e:bd:83:17:1c:bc:a0:a0:50:15:d9:d3:fa:
                    f4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:80:12:F6:54:68:69:B2:E5:22:B2:2E:A9:D3:D9:51:C3:C5:E9:8D
            X509v3 Authority Key Identifier:
                keyid:E7:B0:E1:53:C4:14:D1:38:54:8A:DA:75:E8:CD:05:CD:69:36:72:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/57DhU8QU0ThUitp16M0FzWk2cgY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57DhU8QU0ThUitp16M0FzWk2cgY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/57DhU8QU0ThUitp16M0FzWk2cgY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:5d:b0:fe:26:9e:d4:0e:17:f9:b6:1c:d7:75:9b:d3:49:8d:
         92:17:f4:51:e1:f0:a9:cd:ea:90:0c:3a:1e:09:6e:ce:b6:4b:
         32:01:c4:06:c3:81:c8:82:c3:f0:58:fa:30:4f:56:ba:a8:68:
         e7:1c:2a:1c:58:ec:a6:88:ff:58:68:ac:05:5e:de:ac:fb:59:
         ec:27:84:16:5b:03:28:3b:83:a9:0b:c3:fc:e3:95:08:6a:f3:
         21:f0:22:e7:70:13:6a:a3:4b:06:dc:14:cd:04:cf:7d:f0:92:
         41:d9:87:da:7e:bc:33:25:5d:86:60:d3:01:1e:d4:c6:ba:38:
         c2:90:d0:c7:cb:f4:18:98:92:ba:d9:eb:e4:04:c8:18:73:cc:
         78:26:52:68:52:62:65:fc:3e:78:51:6c:c2:fa:b0:66:b5:d6:
         69:89:1c:ea:f7:c7:fc:87:74:d3:a8:28:9c:92:81:1c:f5:ae:
         88:90:d4:f7:46:f6:ad:8f:fa:b5:0e:2b:70:66:75:12:33:d1:
         b9:d2:f2:62:43:47:69:17:26:0a:04:c1:9d:b8:02:e9:3b:01:
         b3:58:eb:6b:a4:e7:cd:e6:ff:b7:8b:b6:3a:8e:8c:65:86:40:
         f7:cb:0d:0a:2d:24:b2:b7:dd:22:d9:af:78:1b:60:41:6b:b6:
         0c:d0:2b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 15:19:38 2026 by rpki-client