Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft
File:                     DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft (raw, json)
Hash identifier:          l1fPAqaVCcziAwf/J9zHSDnr1ltW6CtDPzCweVYOWt0=
Subject key identifier:   71:E1:4D:44:8A:3F:D8:35:AB:F9:69:35:C3:D7:76:53:42:61:AF:DA
Authority key identifier: 0E:E3:EA:22:2C:39:8C:D7:60:C7:67:56:1D:58:2F:C0:FC:5D:23:FF
Certificate issuer:       /CN=A913F547/serialNumber=0EE3EA222C398CD760C767561D582FC0FC5D23FF
Certificate serial:       153C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DuPqIiw5jNdgx2dWHVgvwPxdI_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft
Manifest number:          151B
Signing time:             Sat 26 Sep 2026 16:52:33 +0000
Manifest this update:     Sat 26 Sep 2026 16:52:32 +0000
Manifest next update:     Sat 03 Oct 2026 16:52:32 +0000
Files and hashes:         1: DuPqIiw5jNdgx2dWHVgvwPxdI_8.crl (hash: yWNmJs56KMmf/kxP9LQvr+h814XHVNf7OdLHdeoQJGI=)
                          2: 5DE0E22C86D611EFBC773E7AC4F9AE02.roa (hash: ArAdPL5/SlWszByBzcRsUxhCmIodCbyw1Zs/9kQ6QAk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.crl
                          rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DuPqIiw5jNdgx2dWHVgvwPxdI_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 16:52:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5436 (0x153c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F547, serialNumber=0EE3EA222C398CD760C767561D582FC0FC5D23FF
        Validity
            Not Before: Sep 26 16:52:32 2026 GMT
            Not After : Oct  3 16:52:32 2026 GMT
        Subject: CN=6ab7f851-f418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:68:8f:bf:24:3a:9e:87:58:16:bc:a1:dc:e7:
                    9c:66:46:32:2d:ac:ec:66:95:5e:b7:3b:4d:73:9a:
                    8e:28:50:3c:8d:74:43:2e:d3:12:f9:98:71:ea:32:
                    bc:a4:0c:23:79:64:f5:e6:87:23:60:77:a6:80:7e:
                    01:33:b2:a1:ad:15:c2:ac:80:a7:4c:bc:0c:73:70:
                    92:f4:cf:d8:f3:4f:59:ee:f4:49:fc:fc:89:62:6f:
                    1c:dc:96:bc:d4:3f:ba:b7:b0:de:35:f0:cc:74:8e:
                    81:51:23:6d:70:0e:14:cb:90:36:14:94:b2:27:92:
                    1f:04:fd:3f:f0:ae:3b:de:c2:12:a7:e4:ad:e2:e2:
                    3d:5c:a1:7e:0c:78:fe:e3:6f:72:55:b3:8d:9d:e0:
                    41:40:7f:db:f0:90:ed:c0:53:b0:a7:70:8d:71:a3:
                    b6:8f:20:bc:bc:3c:bf:67:c8:1f:69:07:26:f7:4d:
                    fe:11:e4:07:a9:1f:1d:d9:d2:f9:9d:8a:75:eb:78:
                    bd:82:8c:3f:62:e2:4e:b5:14:7a:7e:72:78:d7:e2:
                    1d:29:c9:4b:ac:17:75:0f:6a:1e:7d:b2:6b:e1:9e:
                    4f:9f:9d:a4:a3:d0:b1:ea:39:e3:71:72:16:aa:0f:
                    62:c0:0e:c1:21:2a:3d:dc:51:e8:48:ca:e6:d4:96:
                    a8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E1:4D:44:8A:3F:D8:35:AB:F9:69:35:C3:D7:76:53:42:61:AF:DA
            X509v3 Authority Key Identifier:
                keyid:0E:E3:EA:22:2C:39:8C:D7:60:C7:67:56:1D:58:2F:C0:FC:5D:23:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DuPqIiw5jNdgx2dWHVgvwPxdI_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:67:04:e7:75:ca:6c:96:c8:32:6f:ad:36:ed:a6:81:cb:82:
         d0:16:7d:63:31:71:0d:dd:a0:24:ec:1c:bf:38:e3:58:ab:c5:
         91:65:a8:74:21:ac:d8:37:ac:c9:2c:5b:cc:95:44:43:a2:b9:
         7d:ab:13:cf:a3:64:8c:fa:af:6b:53:92:00:fb:45:0d:6d:14:
         fe:e8:86:4d:c5:1b:ce:81:75:52:47:55:a4:3d:b2:3e:b2:5a:
         94:7c:5b:c7:4c:73:17:80:20:4f:82:90:4d:ea:f5:60:c2:7a:
         a0:2d:22:99:cc:31:69:d1:16:dd:27:5a:04:44:9d:27:f7:bb:
         96:80:b7:fd:1b:7e:c3:14:ac:7e:d2:fd:c6:ca:ef:c5:93:3e:
         ae:61:96:af:42:ce:61:24:f2:83:b6:2d:58:06:ec:78:36:78:
         99:cc:c4:56:81:ff:30:1b:51:59:c2:ad:95:24:c3:1f:70:56:
         f8:48:96:ea:01:1f:c2:ad:19:e5:1a:a3:cd:bd:d8:4d:d9:b2:
         28:45:7a:31:22:29:a4:2f:62:05:fd:1e:95:6c:6f:2d:a2:18:
         23:c4:40:03:00:18:ff:cf:a5:d0:28:88:ab:98:eb:f8:50:ee:
         39:e1:2f:63:fa:55:18:ae:06:7f:ef:09:fe:75:77:09:2f:fb:
         a1:f6:2e:cc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFTwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0Y1NDcxMTAvBgNVBAUTKDBFRTNFQTIyMkMzOThDRDc2MEM3Njc1NjFENTgyRkMw
RkM1RDIzRkYwHhcNMjYwOTI2MTY1MjMyWhcNMjYxMDAzMTY1MjMyWjAYMRYwFAYD
VQQDEw02YWI3Zjg1MS1mNDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx2iPvyQ6nodYFryh3OecZkYyLazsZpVetztNc5qOKFA8jXRDLtMS+Zhx6jK8
pAwjeWT15ocjYHemgH4BM7KhrRXCrICnTLwMc3CS9M/Y809Z7vRJ/PyJYm8c3Ja8
1D+6t7DeNfDMdI6BUSNtcA4Uy5A2FJSyJ5IfBP0/8K473sISp+St4uI9XKF+DHj+
429yVbONneBBQH/b8JDtwFOwp3CNcaO2jyC8vDy/Z8gfaQcm903+EeQHqR8d2dL5
nYp163i9gow/YuJOtRR6fnJ41+IdKclLrBd1D2oefbJr4Z5Pn52ko9Cx6jnjcXIW
qg9iwA7BISo93FHoSMrm1JaoXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHHhTUSK
P9g1q/lpNcPXdlNCYa/aMB8GA1UdIwQYMBaAFA7j6iIsOYzXYMdnVh1YL8D8XSP/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjU0Ny80QTgyRjEyNDgw
NTMxMUU4QjcyN0YxNTZDNEY5QUUwMi9EdVBxSWl3NWpOZGd4MmRXSFZndndQeGRJ
XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0R1UHFJaXc1ak5kZ3gyZFdIVmd2d1B4ZElfOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RjU0Ny80QTgyRjEyNDgwNTMxMUU4QjcyN0YxNTZDNEY5QUUwMi9EdVBxSWl3NWpO
ZGd4MmRXSFZndndQeGRJXzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAp2cE53XKbJbIMm+tNu2mgcuC0BZ9YzFxDd2gJOwcvzjjWKvFkWWodCGs2Des
ySxbzJVEQ6K5fasTz6NkjPqva1OSAPtFDW0U/uiGTcUbzoF1UkdVpD2yPrJalHxb
x0xzF4AgT4KQTer1YMJ6oC0imcwxadEW3SdaBESdJ/e7loC3/Rt+wxSsftL9xsrv
xZM+rmGWr0LOYSTyg7YtWAbseDZ4mczEVoH/MBtRWcKtlSTDH3BW+EiW6gEfwq0Z
5Rqjzb3YTdmyKEV6MSIppC9iBf0elWxvLaIYI8RAAwAY/8+l0CiIq5jr+FDuOeEv
Y/pVGK4Gf+8J/nV3CS/7ofYuzA==
-----END CERTIFICATE-----
Generated at Sun Sep 27 22:10:24 2026 by rpki-client