Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft
File:                     dKGUOXIqgzAE05VKV4ToXm6ZvME.mft (raw, json)
Hash identifier:          +JLeu735eXWpRF2OLvnMxJcR1iwvDwiNJXw7kI6Jnto=
Subject key identifier:   89:DA:EC:7E:2E:FF:51:94:FD:63:57:2D:28:43:26:56:0B:99:D3:89
Authority key identifier: 74:A1:94:39:72:2A:83:30:04:D3:95:4A:57:84:E8:5E:6E:99:BC:C1
Certificate issuer:       /CN=A914454E/serialNumber=74A19439722A833004D3954A5784E85E6E99BCC1
Certificate serial:       095A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dKGUOXIqgzAE05VKV4ToXm6ZvME.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft
Manifest number:          095A
Signing time:             Sun 20 Sep 2026 20:01:51 +0000
Manifest this update:     Sun 20 Sep 2026 20:01:50 +0000
Manifest next update:     Sun 27 Sep 2026 20:01:50 +0000
Files and hashes:         1: dKGUOXIqgzAE05VKV4ToXm6ZvME.crl (hash: RPwkWaPKKKIybLQ+y6ZbvDflzDdbP7hJdIcbjXz+6iM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.crl
                          rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dKGUOXIqgzAE05VKV4ToXm6ZvME.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 20:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2394 (0x95a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914454E, serialNumber=74A19439722A833004D3954A5784E85E6E99BCC1
        Validity
            Not Before: Sep 20 20:01:50 2026 GMT
            Not After : Sep 27 20:01:50 2026 GMT
        Subject: CN=6ab03bae-4c68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:64:91:e8:9a:38:b2:56:94:50:bd:6c:0c:c4:
                    6d:5a:ac:be:6e:a0:7c:fe:bb:f3:74:41:7a:e5:28:
                    7e:6e:ad:73:df:a7:45:e2:c0:63:59:23:69:b4:3c:
                    34:8a:40:3f:d3:f5:2c:ae:00:04:5a:6f:0f:ac:4a:
                    8a:b7:ec:92:98:ae:9c:98:9a:83:98:15:d9:b1:2f:
                    a4:04:dc:56:66:cb:bb:53:c6:1e:b8:8e:d2:45:4e:
                    b3:44:b8:8a:06:cb:b2:3d:c8:b2:a5:b3:11:10:54:
                    7c:54:82:10:84:65:a3:10:44:7c:b5:ac:d7:3a:74:
                    50:2a:1c:fd:24:8e:f2:47:a9:b0:d3:9a:f3:0a:09:
                    6d:b8:63:88:a0:a2:fa:ce:9c:c3:93:f7:aa:d9:c9:
                    70:f7:93:4b:89:86:f5:c2:0e:46:5b:76:f8:00:4d:
                    25:26:c4:99:bf:c2:52:60:32:14:5e:a9:a1:6f:ee:
                    dd:be:4e:65:83:88:e2:9f:b5:fa:62:4e:e0:2d:4c:
                    39:32:61:f6:88:0a:ce:f2:1f:49:3b:a8:09:d3:82:
                    c1:df:77:bb:af:93:33:1f:5c:c6:5f:41:ec:b9:f5:
                    39:dc:bb:7a:64:c1:6f:c9:77:9b:b6:76:93:fe:04:
                    82:b5:8b:4a:38:3e:99:8a:97:f1:31:a7:e0:98:58:
                    c8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:DA:EC:7E:2E:FF:51:94:FD:63:57:2D:28:43:26:56:0B:99:D3:89
            X509v3 Authority Key Identifier:
                keyid:74:A1:94:39:72:2A:83:30:04:D3:95:4A:57:84:E8:5E:6E:99:BC:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dKGUOXIqgzAE05VKV4ToXm6ZvME.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:85:28:b2:27:f1:4a:a4:08:ee:8e:bd:68:88:e1:2b:76:de:
         cb:a0:57:55:d4:d9:2b:2b:52:fc:14:1c:bd:e2:cf:0e:38:df:
         94:46:34:16:06:f2:2c:41:14:1d:5e:95:f8:cc:8a:83:f4:ee:
         45:4b:d6:2d:9d:1c:71:35:64:06:78:e8:a5:03:e9:be:2a:61:
         18:c8:ad:d5:31:7a:f1:6e:a0:56:2e:35:a9:28:e3:51:fe:91:
         d2:44:8d:8f:62:d5:e4:b6:6d:4f:86:21:db:d2:7a:1a:65:09:
         8a:37:58:20:0e:a4:c1:3f:f8:ae:35:16:93:f8:af:ad:52:6c:
         b5:a0:b3:50:01:77:95:f1:80:01:6a:4c:57:9e:82:ea:3c:55:
         88:78:b0:ed:6b:e7:c6:cd:cf:f9:1c:0e:ba:10:ec:aa:47:d4:
         ec:bb:ec:74:2e:b7:6a:4b:7f:fd:a7:1b:cb:c0:3f:b1:69:0f:
         c9:19:69:e1:a3:91:53:59:3c:bd:8f:e5:b7:6b:33:a3:5f:9a:
         2a:6b:d4:da:18:26:6a:64:b0:1c:51:70:af:a3:f2:ef:43:56:
         6a:45:f5:2a:f3:72:01:9a:31:d9:fb:fa:30:63:fb:a6:25:cc:
         38:84:7d:36:e0:ae:d5:e2:08:2e:b1:41:ec:6b:3f:0e:c9:58:
         77:31:69:42
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDQ1NEUxMTAvBgNVBAUTKDc0QTE5NDM5NzIyQTgzMzAwNEQzOTU0QTU3ODRFODVF
NkU5OUJDQzEwHhcNMjYwOTIwMjAwMTUwWhcNMjYwOTI3MjAwMTUwWjAYMRYwFAYD
VQQDEw02YWIwM2JhZS00YzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAumSR6Jo4slaUUL1sDMRtWqy+bqB8/rvzdEF65Sh+bq1z36dF4sBjWSNptDw0
ikA/0/UsrgAEWm8PrEqKt+ySmK6cmJqDmBXZsS+kBNxWZsu7U8YeuI7SRU6zRLiK
BsuyPciypbMREFR8VIIQhGWjEER8tazXOnRQKhz9JI7yR6mw05rzCgltuGOIoKL6
zpzDk/eq2clw95NLiYb1wg5GW3b4AE0lJsSZv8JSYDIUXqmhb+7dvk5lg4jin7X6
Yk7gLUw5MmH2iArO8h9JO6gJ04LB33e7r5MzH1zGX0HsufU53Lt6ZMFvyXebtnaT
/gSCtYtKOD6ZipfxMafgmFjIRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIna7H4u
/1GU/WNXLShDJlYLmdOJMB8GA1UdIwQYMBaAFHShlDlyKoMwBNOVSleE6F5umbzB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDU0RS8yQUY5REJCMEM0
RDUxMUVBODAyMUE3MThDNEY5QUUwMi9kS0dVT1hJcWd6QUUwNVZLVjRUb1htNlp2
TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RLR1VPWElxZ3pBRTA1VktWNFRvWG02WnZNRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NDU0RS8yQUY5REJCMEM0RDUxMUVBODAyMUE3MThDNEY5QUUwMi9kS0dVT1hJcWd6
QUUwNVZLVjRUb1htNlp2TUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnYUosifxSqQI7o69aIjhK3bey6BXVdTZKytS/BQcveLPDjjflEY0FgbyLEEU
HV6V+MyKg/TuRUvWLZ0ccTVkBnjopQPpviphGMit1TF68W6gVi41qSjjUf6R0kSN
j2LV5LZtT4Yh29J6GmUJijdYIA6kwT/4rjUWk/ivrVJstaCzUAF3lfGAAWpMV56C
6jxViHiw7Wvnxs3P+RwOuhDsqkfU7LvsdC63akt//acby8A/sWkPyRlp4aORU1k8
vY/lt2szo1+aKmvU2hgmamSwHFFwr6Py70NWakX1KvNyAZox2fv6MGP7piXMOIR9
NuCu1eIILrFB7Gs/DslYdzFpQg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 19:43:54 2026 by rpki-client