Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft
File:                     DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft (raw, json)
Hash identifier:          ZZafxfsY8NioWsiVDsQd2Fzd2v5gTALiAliRvB3FNOg=
Subject key identifier:   FE:AF:9F:F5:A9:9D:91:66:56:CB:C1:88:EF:2D:DA:AF:07:8B:37:8B
Authority key identifier: 0C:20:42:E5:FC:33:61:FF:73:56:93:6D:09:7E:12:44:AF:C6:26:CE
Certificate issuer:       /CN=A9143078/serialNumber=0C2042E5FC3361FF7356936D097E1244AFC626CE
Certificate serial:       0489
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DCBC5fwzYf9zVpNtCX4SRK_GJs4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft
Manifest number:          0478
Signing time:             Sun 20 Sep 2026 23:55:53 +0000
Manifest this update:     Sun 20 Sep 2026 23:55:52 +0000
Manifest next update:     Sun 27 Sep 2026 23:55:52 +0000
Files and hashes:         1: DCBC5fwzYf9zVpNtCX4SRK_GJs4.crl (hash: uwF1MCc9nmLiA1Z2kZs864iaRR5IPxS8IiYE/cbV/Wc=)
                          2: 1332B7BCEC7211EFBA9EF77FC4F9AE02.roa (hash: Zn+KKaOspwLG/OsARZzD4AsnmpmtXqkaBz98c1ApCRs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.crl
                          rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DCBC5fwzYf9zVpNtCX4SRK_GJs4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 23:55:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1161 (0x489)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143078, serialNumber=0C2042E5FC3361FF7356936D097E1244AFC626CE
        Validity
            Not Before: Sep 20 23:55:52 2026 GMT
            Not After : Sep 27 23:55:52 2026 GMT
        Subject: CN=6ab07288-11f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:92:95:bf:5a:87:33:d4:02:4b:fa:a9:de:3e:
                    1f:d1:1d:d5:c7:68:d2:c9:55:5d:d8:4f:2e:1c:44:
                    c4:db:e7:1f:17:9b:16:0f:ac:d8:2e:e9:78:df:cf:
                    bc:18:08:5d:e8:40:d6:29:f0:3f:cb:24:8d:14:22:
                    ee:fd:af:41:96:6f:a4:b5:2d:85:7a:3b:34:dc:70:
                    93:82:9c:7f:fb:5b:f1:c9:3a:e1:cb:89:cb:64:f9:
                    2b:60:c7:43:5e:98:4a:69:b2:e1:74:22:02:52:a5:
                    e3:d7:a4:12:06:5d:5e:27:a6:2f:77:e3:d6:6c:6a:
                    ed:d9:23:50:a8:19:24:36:5c:80:8e:89:d2:7b:a1:
                    c5:a9:b8:20:d3:21:b0:2b:4b:ef:0b:1f:52:1a:76:
                    04:bb:de:f4:58:75:ab:65:cc:09:70:04:05:20:f2:
                    b0:f3:5c:59:17:61:1a:84:0b:20:f6:a5:cc:6e:84:
                    b6:91:dc:53:e6:de:8b:cf:c8:ab:1c:d8:9f:f6:5d:
                    97:3a:76:fb:7c:5b:c5:5e:26:5c:0c:01:05:db:54:
                    ea:de:82:c9:51:54:b7:fb:a7:25:14:41:f8:49:68:
                    8c:63:91:80:a1:bd:64:c6:2c:56:c0:ea:3e:91:0c:
                    77:70:d3:fc:3c:c5:92:b8:37:80:98:41:20:69:dc:
                    cd:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:AF:9F:F5:A9:9D:91:66:56:CB:C1:88:EF:2D:DA:AF:07:8B:37:8B
            X509v3 Authority Key Identifier:
                keyid:0C:20:42:E5:FC:33:61:FF:73:56:93:6D:09:7E:12:44:AF:C6:26:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DCBC5fwzYf9zVpNtCX4SRK_GJs4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:7e:40:44:80:e7:9e:98:6a:eb:56:59:d0:c9:aa:ff:7b:cf:
         34:6c:f4:7d:36:d7:e8:bb:c9:48:40:a1:ed:1c:95:84:6f:06:
         46:71:29:f5:1b:d6:26:3c:89:6b:68:9b:c6:08:db:97:d2:b8:
         d5:6a:4b:18:76:bf:25:2c:00:db:94:dd:cf:30:d8:06:04:f5:
         5b:bf:c7:59:32:9f:29:f3:1e:d0:6a:71:71:ae:21:72:45:45:
         cc:8f:17:12:5e:52:ab:fe:90:51:5d:27:1f:fc:34:64:00:87:
         0d:b4:19:de:e0:e7:ca:bd:42:79:8b:6b:d3:4f:f5:2a:f6:0e:
         19:bb:33:56:05:13:eb:3a:e7:c1:a5:64:5c:2e:51:34:3d:f1:
         92:24:9f:00:3f:ff:a5:62:ce:94:67:0b:dd:d8:ab:d3:3e:41:
         d8:54:19:15:26:5e:97:c0:f1:e0:11:ec:30:8b:15:f1:85:86:
         50:be:20:28:49:6b:ef:0b:2f:bd:82:1d:e1:6b:37:c3:4e:2a:
         19:fd:f0:7c:24:85:50:da:09:9e:e7:d9:4c:9e:97:a0:1a:22:
         fe:c7:26:bd:c8:f2:e4:7a:ad:90:f6:df:b2:f9:eb:9d:dc:41:
         03:14:56:5e:44:37:19:73:7e:47:b7:58:2d:5a:19:66:34:5e:
         87:aa:ea:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:55:04 2026 by rpki-client