Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft
File:                     dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft (raw, json)
Hash identifier:          4TMHj+jfk8RooOb+yusGlKlc1RCWtsTGYSHXBulWcno=
Subject key identifier:   44:86:BE:18:3D:F2:2C:5D:A0:55:3A:47:B0:B1:46:D9:AF:1E:01:FF
Authority key identifier: 75:11:CB:31:3E:B8:3F:1C:39:02:AA:63:C4:3B:7A:03:6A:CC:63:17
Certificate issuer:       /CN=A91273B6/serialNumber=7511CB313EB83F1C3902AA63C43B7A036ACC6317
Certificate serial:       D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRHLMT64Pxw5AqpjxDt6A2rMYxc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft
Manifest number:          CD
Signing time:             Mon 21 Sep 2026 06:44:57 +0000
Manifest this update:     Mon 21 Sep 2026 06:44:57 +0000
Manifest next update:     Mon 28 Sep 2026 06:44:57 +0000
Files and hashes:         1: dRHLMT64Pxw5AqpjxDt6A2rMYxc.crl (hash: DjJePkUiKiLsjGsO1ZYbMe0dYu4qU3RMeIuVfC5LcJM=)
                          2: A7FC3D6C041F11F1A6FA4A091E3D8C67.roa (hash: ylWIppRfoSczR+iYCPUGFki8XOe7Epeyq7vnffvpZ6w=)
                          3: 90034B4C041F11F1953EEBDB1D3D8C67.roa (hash: cGlSTDJBs7ggiw8P/P0gjYbp64oLSYqlIubdlATuF4s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.crl
                          rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRHLMT64Pxw5AqpjxDt6A2rMYxc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 06:44:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 212 (0xd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91273B6, serialNumber=7511CB313EB83F1C3902AA63C43B7A036ACC6317
        Validity
            Not Before: Sep 21 06:44:57 2026 GMT
            Not After : Sep 28 06:44:57 2026 GMT
        Subject: CN=6ab0d269-c2b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a6:2b:39:b6:77:a3:d3:5d:a5:e1:26:a9:00:
                    01:73:16:ac:15:6e:76:f0:32:5b:bc:fa:2a:eb:70:
                    fb:0d:a1:13:7b:bc:5c:1f:7e:96:34:ac:60:ea:39:
                    96:96:7d:dc:4d:ef:c5:39:ae:61:98:ee:11:8b:64:
                    43:de:e7:12:54:cb:5a:96:13:9b:11:aa:78:35:1d:
                    16:41:dc:2c:58:7b:8c:e6:5b:8d:97:95:ab:72:29:
                    81:49:4d:9d:14:0b:a0:cd:95:2e:40:fe:e6:c2:43:
                    2a:61:f1:0e:7a:a7:2f:fd:33:61:c4:5e:0e:23:12:
                    31:09:9c:81:c1:73:31:d2:11:07:7d:5c:82:5b:76:
                    ae:73:12:6a:54:f2:a2:88:2b:ae:a6:10:24:7f:a9:
                    d6:85:a9:3e:e6:26:55:44:31:ad:94:31:e1:72:84:
                    17:16:bc:a1:2e:1d:bf:7d:3f:11:df:21:d4:64:69:
                    c1:01:7d:d9:73:f6:ff:cc:ae:b9:81:b9:d0:f5:5c:
                    09:84:22:35:45:de:88:66:af:ab:31:e2:fb:37:6a:
                    fe:34:d0:e0:b6:19:f9:04:52:bb:b7:23:ff:a9:96:
                    30:d4:48:66:97:a4:b2:ea:42:88:1a:3b:2a:83:f9:
                    b2:e1:fb:40:33:87:49:c3:c7:33:7a:db:61:9c:4c:
                    37:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:86:BE:18:3D:F2:2C:5D:A0:55:3A:47:B0:B1:46:D9:AF:1E:01:FF
            X509v3 Authority Key Identifier:
                keyid:75:11:CB:31:3E:B8:3F:1C:39:02:AA:63:C4:3B:7A:03:6A:CC:63:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRHLMT64Pxw5AqpjxDt6A2rMYxc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:66:65:fe:13:f1:bc:b9:45:20:77:57:49:1f:ec:b2:0d:a3:
         83:80:cd:c0:01:63:8b:28:21:f0:03:2e:68:ed:c8:ee:ee:e7:
         17:17:35:df:ab:13:e1:93:9c:df:f8:16:ee:b8:5a:08:f2:64:
         38:c2:2e:1e:cb:99:50:41:c3:cf:12:91:4b:5a:3c:a1:5e:e5:
         b0:7e:bc:4a:a1:71:99:3b:d0:c6:2e:9c:b1:00:ce:e9:d8:db:
         fc:86:89:2c:26:a8:d9:c0:7e:cf:ec:e6:be:0d:19:93:ef:de:
         ce:18:60:00:22:44:93:c6:d7:68:69:f7:8e:ee:5d:81:47:fb:
         8a:28:68:ce:98:7e:0f:a1:e2:1a:f7:ca:2b:10:8e:fb:49:e4:
         0a:23:17:48:17:3f:7c:60:15:0e:f6:45:2b:e1:f5:eb:ad:9e:
         e9:95:05:c1:7c:63:12:4e:c6:01:64:0f:76:fa:c1:38:d7:65:
         77:be:85:b7:55:95:89:63:1d:e0:af:8f:bb:5b:5d:62:49:97:
         6a:db:7f:b9:05:b4:78:ee:d4:d8:3c:65:25:27:50:39:88:7c:
         e1:d3:1a:1e:49:2b:08:3c:65:f6:31:29:95:c1:b2:9d:de:b3:
         59:c0:ee:45:66:7c:86:fa:de:5c:99:93:98:26:4d:5e:d9:29:
         5d:25:18:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 06:46:05 2026 by rpki-client