Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BD73B/26BDF32C1DAA11E2BE25A6A508B02CD2/REhMnzpz9xlXK4vIoaH9nln6hPY.mft
File:                     REhMnzpz9xlXK4vIoaH9nln6hPY.mft (raw, json)
Hash identifier:          Tl+JkuxizCZo2KupwBG7vOOu4yFC0sZTuge/hX0SbX4=
Subject key identifier:   3C:7F:BA:DF:7F:FE:13:4D:46:96:78:8C:71:33:D8:19:29:9A:A4:F2
Authority key identifier: 44:48:4C:9F:3A:73:F7:19:57:2B:8B:C8:A1:A1:FD:9E:59:FA:84:F6
Certificate issuer:       /CN=A91BD73B/serialNumber=44484C9F3A73F719572B8BC8A1A1FD9E59FA84F6
Certificate serial:       3584
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/REhMnzpz9xlXK4vIoaH9nln6hPY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD73B/26BDF32C1DAA11E2BE25A6A508B02CD2/REhMnzpz9xlXK4vIoaH9nln6hPY.mft
Manifest number:          3584
Signing time:             Tue 06 Oct 2026 15:16:09 +0000
Manifest this update:     Tue 06 Oct 2026 15:16:09 +0000
Manifest next update:     Tue 13 Oct 2026 15:16:09 +0000
Files and hashes:         1: REhMnzpz9xlXK4vIoaH9nln6hPY.crl (hash: AoF0DthU2x7c6V5jd1pP+yxgLBOLCN6Zb8IyL81tdAM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD73B/26BDF32C1DAA11E2BE25A6A508B02CD2/REhMnzpz9xlXK4vIoaH9nln6hPY.crl
                          rsync://rpki.apnic.net/member_repository/A91BD73B/26BDF32C1DAA11E2BE25A6A508B02CD2/REhMnzpz9xlXK4vIoaH9nln6hPY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/REhMnzpz9xlXK4vIoaH9nln6hPY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 15:16:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13700 (0x3584)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD73B, serialNumber=44484C9F3A73F719572B8BC8A1A1FD9E59FA84F6
        Validity
            Not Before: Oct  6 15:16:09 2026 GMT
            Not After : Oct 13 15:16:09 2026 GMT
        Subject: CN=6ac510b9-20a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:65:82:dc:31:c4:80:3c:55:e6:25:6b:38:76:
                    d7:46:13:cb:60:0a:07:37:20:22:c9:9a:c8:6a:bf:
                    8f:2b:9f:bf:02:9f:8d:37:81:4f:12:81:e3:a7:61:
                    09:84:35:cd:40:37:86:cf:09:74:07:a9:c8:a5:0a:
                    e1:37:79:45:99:9e:37:8a:d8:17:a6:a9:7c:9f:7c:
                    e2:c2:ef:09:d5:fe:f6:24:c8:a1:89:b2:e6:cb:01:
                    27:78:45:33:4c:e4:7d:57:6a:de:91:88:a5:04:02:
                    22:99:62:f1:06:fb:a6:81:c1:7a:53:17:57:47:16:
                    62:03:7d:5a:57:60:91:53:10:96:f9:19:56:73:c1:
                    c7:4b:8e:70:3e:6e:39:09:2a:2d:ca:48:59:6b:62:
                    ec:8f:4d:ac:c2:d4:69:58:ff:57:fb:86:01:c7:96:
                    83:e6:40:61:9d:4d:47:3a:c7:7e:90:77:1f:ca:d4:
                    a7:15:c5:ec:77:55:7a:41:9b:8e:24:53:27:03:3d:
                    85:4e:fe:f3:71:62:98:b2:9b:21:8f:ee:20:73:20:
                    e4:7e:b6:d8:f6:f5:11:13:23:0c:49:da:22:72:1a:
                    b3:c2:28:4f:40:80:a3:94:28:0e:a5:f2:ed:f2:49:
                    79:d9:ba:90:35:41:dc:d4:a0:33:6a:35:2e:6a:ba:
                    8d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:7F:BA:DF:7F:FE:13:4D:46:96:78:8C:71:33:D8:19:29:9A:A4:F2
            X509v3 Authority Key Identifier:
                keyid:44:48:4C:9F:3A:73:F7:19:57:2B:8B:C8:A1:A1:FD:9E:59:FA:84:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD73B/26BDF32C1DAA11E2BE25A6A508B02CD2/REhMnzpz9xlXK4vIoaH9nln6hPY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/REhMnzpz9xlXK4vIoaH9nln6hPY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD73B/26BDF32C1DAA11E2BE25A6A508B02CD2/REhMnzpz9xlXK4vIoaH9nln6hPY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:b7:5a:44:84:f8:f9:fc:d5:3c:0f:fc:7b:48:54:9a:c6:71:
         03:ef:d9:64:ae:a7:b1:ae:cf:8a:35:e9:cb:99:10:60:42:fd:
         f3:84:6c:a0:e5:f2:d4:ea:66:32:4a:1a:d2:8a:93:9d:18:df:
         aa:27:56:5b:90:ed:ca:6c:d9:04:dc:65:0f:41:52:c1:f2:09:
         aa:90:4a:42:70:2f:2d:90:f9:d4:d2:a9:45:b9:03:37:10:9c:
         45:8c:16:d6:5d:ca:cf:ec:9c:df:48:33:2f:ad:ad:60:0b:05:
         78:08:a3:67:f5:b2:e1:fb:ff:67:f9:36:af:91:d3:ab:eb:d1:
         ca:80:47:4d:2b:5b:c4:48:1e:92:b8:c2:e3:4c:bb:19:8d:69:
         be:bb:be:e2:a2:ef:49:20:50:77:4d:ed:19:61:bf:b4:fb:24:
         7f:8d:2e:74:92:4e:0c:d4:d3:94:ae:16:19:86:55:77:0b:02:
         97:a7:74:50:4c:50:27:67:44:1c:12:9e:4e:c5:cf:0c:68:33:
         75:41:f5:3f:66:a1:ed:27:6e:06:2c:f5:30:5f:31:41:f6:69:
         7b:b1:d0:88:77:a6:4d:f1:18:cc:66:c3:97:e7:e7:d8:3f:72:
         a5:83:92:3f:ca:2b:b0:e0:f5:79:d2:eb:cc:f8:e8:5d:39:f4:
         26:03:7d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 11:24:12 2026 by rpki-client