Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft
File:                     DfYzARXsRfUx_1YTHrhFWq-3dsw.mft (raw, json)
Hash identifier:          TdJunOocfV1H++yNSclQI/09vuUr8Mtj+HJcwsadR6A=
Subject key identifier:   D4:51:DE:86:76:0D:10:0E:2A:7E:CB:D8:72:10:25:6D:AA:0F:33:50
Authority key identifier: 0D:F6:33:01:15:EC:45:F5:31:FF:56:13:1E:B8:45:5A:AF:B7:76:CC
Certificate issuer:       /CN=A91192A0/serialNumber=0DF6330115EC45F531FF56131EB8455AAFB776CC
Certificate serial:       0D23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfYzARXsRfUx_1YTHrhFWq-3dsw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft
Manifest number:          0D0F
Signing time:             Mon 12 Oct 2026 18:30:19 +0000
Manifest this update:     Mon 12 Oct 2026 18:30:18 +0000
Manifest next update:     Mon 19 Oct 2026 18:30:18 +0000
Files and hashes:         1: DfYzARXsRfUx_1YTHrhFWq-3dsw.crl (hash: G+/6vkLIXS4a40DXesY0tOqAbTNqVt9xIURnbaDx0ig=)
                          2: 38FA1FDE135711EAACF3565BC4F9AE02.roa (hash: PYg8vYLqddzplZL7Imsshpo8zF5g3CAK9J3XuN6h1WU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.crl
                          rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfYzARXsRfUx_1YTHrhFWq-3dsw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 16:59:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3363 (0xd23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91192A0, serialNumber=0DF6330115EC45F531FF56131EB8455AAFB776CC
        Validity
            Not Before: Oct 12 18:30:18 2026 GMT
            Not After : Oct 19 18:30:18 2026 GMT
        Subject: CN=6acd273b-85b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:84:d1:19:68:f0:da:d2:de:fe:22:d6:e8:05:
                    1d:cc:ff:00:55:64:5a:f2:9b:84:f8:5c:82:4c:3a:
                    68:d2:ac:d1:e0:e9:4e:3a:f5:94:d5:60:3f:3b:d6:
                    ce:1a:c9:45:ad:ec:25:e3:73:77:cb:cb:d6:4f:6c:
                    7c:df:97:e7:a9:a9:a5:96:4a:8d:2e:da:b4:c7:14:
                    05:02:85:1f:f1:eb:1a:99:1d:50:27:f7:68:e0:b4:
                    ee:ed:47:65:98:1b:50:6d:68:ef:a7:f0:60:bd:32:
                    aa:c1:c5:02:71:70:4c:7c:93:76:05:cc:51:fd:06:
                    7c:59:45:1f:5f:1c:cb:8f:95:10:d7:6b:01:43:95:
                    ed:12:c1:cd:ee:97:7f:8a:89:8d:ad:ab:0c:27:b5:
                    48:25:5a:24:6e:2a:7c:41:9e:f3:05:43:81:23:79:
                    c5:21:6c:4d:e0:e0:f2:9c:97:df:0e:8e:d9:60:ed:
                    87:7b:9c:dd:f0:8e:ff:ab:7f:1d:77:3c:15:6b:e4:
                    1b:89:dc:b3:8c:f8:1a:16:18:21:47:c0:0f:3b:97:
                    48:8a:c4:b0:11:ea:2a:51:92:f6:97:c6:9c:54:e5:
                    f1:82:36:b6:e8:88:5b:dc:c2:2a:5b:51:82:84:2e:
                    2c:09:20:a3:a2:bf:a2:12:e4:8a:12:ca:eb:0e:bc:
                    8d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:51:DE:86:76:0D:10:0E:2A:7E:CB:D8:72:10:25:6D:AA:0F:33:50
            X509v3 Authority Key Identifier:
                keyid:0D:F6:33:01:15:EC:45:F5:31:FF:56:13:1E:B8:45:5A:AF:B7:76:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfYzARXsRfUx_1YTHrhFWq-3dsw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:1d:65:86:4c:9f:14:8c:42:e3:bf:8a:13:45:2d:5c:6a:2c:
         65:5b:a1:05:96:63:ca:18:ee:03:5d:4c:27:19:35:ea:d6:0b:
         4b:c7:bf:73:e5:03:bc:a7:a1:11:de:e4:55:1a:ac:dc:7d:91:
         58:1a:fe:5b:b8:0f:51:d9:43:e0:43:98:4b:12:f0:9c:4e:fc:
         3c:70:62:06:58:f3:b9:04:d6:56:d3:6a:ed:3c:ca:07:57:fd:
         4f:16:8e:24:da:97:fd:82:5c:e0:2d:eb:fe:e9:98:e1:06:8e:
         a3:fd:ab:e3:f0:7e:10:c9:74:e3:2f:86:33:26:0d:65:5e:d9:
         3e:fd:60:94:05:77:15:bd:f0:86:12:ff:08:f6:2f:c0:0a:d8:
         25:4d:fc:28:a8:e9:63:8a:41:4e:d1:2a:70:0d:7d:91:1b:a0:
         8e:7e:2c:a7:e3:bc:fd:0f:f3:27:aa:57:b0:8e:eb:20:44:92:
         44:2f:99:2d:75:23:cf:5c:34:ca:21:d3:8e:fe:11:5e:dd:88:
         f3:f9:ad:53:83:07:31:74:c4:c2:09:46:5d:2e:98:3f:3c:ab:
         43:90:ef:00:40:5d:aa:28:d2:6f:57:2f:ff:db:ad:d7:e4:44:
         d8:54:36:70:51:52:69:84:b3:12:50:23:c5:56:51:e6:5c:fc:
         75:9e:8b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 05:42:37 2026 by rpki-client