Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.mft
File:                     PDWH3Dry6Tfs22WoOJJ1mkHIhQs.mft (raw, json)
Hash identifier:          wePd6eRU1j32QV8FFkqDTD+iMdg1aWDYynT0q2WI2b4=
Subject key identifier:   AE:40:E6:76:E8:EB:D5:92:21:24:C8:95:B4:EC:D8:66:43:C9:44:A2
Authority key identifier: 3C:35:87:DC:3A:F2:E9:37:EC:DB:65:A8:38:92:75:9A:41:C8:85:0B
Certificate issuer:       /CN=A9134B4A/serialNumber=3C3587DC3AF2E937ECDB65A83892759A41C8850B
Certificate serial:       01D2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.mft
Manifest number:          01C0
Signing time:             Sun 11 Oct 2026 04:34:19 +0000
Manifest this update:     Sun 11 Oct 2026 04:34:18 +0000
Manifest next update:     Sun 18 Oct 2026 04:34:18 +0000
Files and hashes:         1: PDWH3Dry6Tfs22WoOJJ1mkHIhQs.crl (hash: fbbvaOTkMutV5KTKtrN30rPHd7L8+/CKptMEAEd3b1Q=)
                          2: A63B6120238711F08D2B4460C4F9AE02.roa (hash: CSNhoZkKt729AJAsDVCNWknT1CnJ47gjrYdcuOI20TM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.crl
                          rsync://rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 466 (0x1d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134B4A, serialNumber=3C3587DC3AF2E937ECDB65A83892759A41C8850B
        Validity
            Not Before: Oct 11 04:34:18 2026 GMT
            Not After : Oct 18 04:34:18 2026 GMT
        Subject: CN=6acb11ca-f2d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2f:e4:d5:6f:62:9e:ba:5f:36:26:d7:e0:6b:
                    d4:27:69:d7:25:fa:7e:0b:f1:5f:a3:49:05:8d:51:
                    d0:48:d3:b4:a1:39:79:58:7d:4a:04:61:41:f4:d5:
                    97:95:da:9d:ea:23:69:42:d1:de:61:22:db:19:71:
                    3e:2f:47:7e:cf:65:f9:da:d1:69:7d:31:b7:16:20:
                    bb:f6:bd:26:9c:7b:ea:d4:1e:23:34:de:8d:ad:ce:
                    4d:20:0d:55:a0:05:b7:94:10:22:8f:92:93:96:2b:
                    eb:40:97:53:3d:bd:f0:62:0a:08:58:0c:7f:c7:d4:
                    0b:e5:5f:d0:80:33:33:10:0e:52:ae:6c:8b:82:82:
                    80:0f:fe:d9:b1:90:5f:ea:18:2d:da:bb:53:bb:f4:
                    d9:fa:c7:9c:46:56:21:32:68:59:88:d7:5f:43:86:
                    6f:84:5a:4f:fa:4d:b3:49:fa:a0:d3:0f:c1:26:38:
                    0f:7e:71:56:2d:25:cd:53:e5:d0:87:bb:42:94:6b:
                    bb:5b:d6:23:3c:8b:8d:ff:31:2f:30:63:f1:08:ef:
                    1f:c6:cd:a7:05:ca:da:6b:8e:95:ee:7d:46:d1:62:
                    62:12:b7:68:27:c9:32:54:79:75:06:35:5c:43:c9:
                    64:f8:14:d8:b2:7d:a3:11:08:89:25:6f:37:0f:61:
                    eb:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:40:E6:76:E8:EB:D5:92:21:24:C8:95:B4:EC:D8:66:43:C9:44:A2
            X509v3 Authority Key Identifier:
                keyid:3C:35:87:DC:3A:F2:E9:37:EC:DB:65:A8:38:92:75:9A:41:C8:85:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:d2:46:4f:f4:58:97:df:41:a2:1f:e1:95:53:4c:be:aa:f5:
         79:b5:ec:bd:f3:f7:46:fe:0e:a0:74:c0:2a:e4:dc:76:ff:ba:
         16:f9:77:ba:f6:53:b6:be:46:b7:75:4e:37:d6:0d:b8:b4:fd:
         83:da:48:7d:43:2a:93:a0:1b:ca:45:be:cc:ca:f0:18:6c:85:
         c8:2e:20:4e:7a:02:9b:53:f3:2c:eb:dd:a5:58:8f:71:a4:d7:
         64:ef:ed:68:a0:9b:c6:fb:3b:94:c8:93:f5:de:17:fe:3d:cb:
         62:2a:7b:dd:47:92:b5:33:73:0b:65:30:db:34:5c:d9:19:cc:
         5d:dc:ad:d1:3e:b3:25:e4:bb:f8:bb:3e:8f:bc:50:ae:24:77:
         f3:ea:4b:8c:6b:15:d8:71:46:d8:9b:65:ff:89:f6:01:64:27:
         cd:d4:aa:6d:84:67:e9:c0:94:7f:f9:64:a7:46:4d:67:29:81:
         d2:5c:31:46:0c:8d:0f:92:9b:9c:3b:30:19:97:4c:96:7a:7e:
         56:e0:a3:0f:dd:7b:65:d6:87:ad:d9:90:ad:37:f8:b2:5e:f2:
         a0:74:b1:53:2e:dc:af:cf:6e:b9:11:74:ae:31:e8:03:9a:ff:
         c7:8e:3b:e0:51:5f:da:3f:65:89:4f:c7:b4:35:3e:50:74:34:
         8a:de:60:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 15:05:04 2026 by rpki-client