Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft
File:                     -Dcw_Tkbb492_vMXbtufxvVUHkA.mft (raw, json)
Hash identifier:          4m8e0nFJkIf+VqcRFvHbkHL56SQGX5VhC5UuvSgfJ+0=
Subject key identifier:   D3:48:72:D2:0D:86:2D:FA:DB:E6:9D:07:0B:0F:83:1B:EC:D2:B8:5E
Authority key identifier: F8:37:30:FD:39:1B:6F:8F:76:FE:F3:17:6E:DB:9F:C6:F5:54:1E:40
Certificate issuer:       /CN=A913621A/serialNumber=F83730FD391B6F8F76FEF3176EDB9FC6F5541E40
Certificate serial:       35FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft
Manifest number:          35C9
Signing time:             Thu 08 Oct 2026 14:17:48 +0000
Manifest this update:     Thu 08 Oct 2026 14:17:47 +0000
Manifest next update:     Thu 15 Oct 2026 14:17:47 +0000
Files and hashes:         1: -Dcw_Tkbb492_vMXbtufxvVUHkA.crl (hash: bVY8iaiTgizf3tUqauiVxauyNckfVjSOtEFfVfKec0M=)
                          2: 7369CB76E42F11E9B6290B4EC4F9AE02.roa (hash: hFcT6GGoZtfB5obxWLs1zq4yzpXCoVBcNvn/SUcTV4s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.crl
                          rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 14:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13823 (0x35ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913621A, serialNumber=F83730FD391B6F8F76FEF3176EDB9FC6F5541E40
        Validity
            Not Before: Oct  8 14:17:47 2026 GMT
            Not After : Oct 15 14:17:47 2026 GMT
        Subject: CN=6ac7a60c-c1cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a7:a8:e1:12:c2:9e:59:87:38:23:51:b8:57:
                    25:8d:1a:08:b1:0f:62:23:6f:04:90:a6:27:77:ea:
                    b2:58:6c:e9:ee:31:71:12:2f:b6:c8:53:36:2c:a2:
                    71:f2:80:ff:42:42:ae:47:40:d7:bb:8d:45:ff:13:
                    a1:b3:66:2f:2c:b3:e6:4a:74:75:68:63:9d:88:9d:
                    36:3d:56:6a:ba:54:bf:77:c0:03:66:e2:41:29:45:
                    b5:f0:26:fd:35:4e:ff:32:57:79:2a:c8:30:b5:07:
                    47:d8:da:c9:fc:d0:d6:ae:41:1d:45:8b:a1:ab:b7:
                    e0:01:2c:29:1f:93:90:54:cb:a4:e3:f9:ea:e5:c7:
                    5a:a7:f8:e4:72:a7:0b:95:c8:af:30:5b:db:09:39:
                    17:56:ef:eb:0b:56:82:13:ec:fd:f2:1e:ab:31:a6:
                    ab:0b:1e:ae:4c:3c:ed:a9:d7:81:24:19:0e:2b:b1:
                    fe:40:83:0a:41:92:33:c1:39:79:fc:0d:98:fe:79:
                    bf:69:12:48:56:ee:b7:24:b5:21:c4:99:22:05:95:
                    19:70:d1:d8:d7:97:15:bc:fe:57:06:b9:51:56:3b:
                    42:18:c3:32:85:c5:df:18:77:29:93:43:3c:0d:9e:
                    7e:71:40:2f:46:0e:e5:83:cf:57:c0:08:d2:ab:c8:
                    63:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:48:72:D2:0D:86:2D:FA:DB:E6:9D:07:0B:0F:83:1B:EC:D2:B8:5E
            X509v3 Authority Key Identifier:
                keyid:F8:37:30:FD:39:1B:6F:8F:76:FE:F3:17:6E:DB:9F:C6:F5:54:1E:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:05:e8:40:f3:6f:07:25:27:90:b2:77:8a:98:fe:5a:fb:82:
         ef:b1:0a:c9:a2:94:a0:f4:15:2b:e3:d1:4c:16:56:c7:43:5e:
         76:fe:d5:03:98:ae:87:96:06:a6:5f:e0:dd:54:82:a6:ee:a4:
         ff:4b:d7:d2:38:f4:97:8e:eb:1a:dc:16:8f:c2:53:2a:3e:96:
         98:e4:70:45:e2:9e:4f:bf:75:bd:19:db:82:29:70:f9:c4:4c:
         61:bd:5f:10:37:58:78:84:9a:65:ca:87:1d:7f:68:80:78:1e:
         1f:ed:8f:18:e5:67:7c:1e:cb:ea:78:7a:36:77:cd:4e:29:b0:
         ec:c2:95:25:07:cc:c5:e7:15:16:4f:3c:83:3c:49:11:c6:32:
         f1:ec:fd:6c:0c:e6:4f:7e:32:7a:40:04:da:93:85:f3:c8:23:
         ee:db:66:e1:73:ac:5f:39:9b:6c:bc:c7:ae:99:8f:bb:28:af:
         11:38:37:65:5c:b0:01:60:e5:b2:cf:cd:fa:99:d1:fd:3a:3c:
         56:80:3a:b8:2b:36:2b:ef:44:67:0e:5f:5f:33:74:ad:67:0b:
         89:19:a9:52:67:94:18:ef:6d:56:df:36:9b:3f:9d:02:06:6a:
         1a:df:9b:b5:69:fd:a1:dc:6d:af:6a:ff:fc:48:92:aa:37:11:
         2e:7f:4b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 12:39:21 2026 by rpki-client