Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.mft
File:                     dYrCvtrcujrXOBafs4nVCLVNdL8.mft (raw, json)
Hash identifier:          LP4f3YS0UuQ/QZOcJLVxtAq4sP3ajQgsKYcmn/LfIBI=
Subject key identifier:   33:D4:08:DB:1C:88:78:CB:7E:80:C9:E0:42:7F:82:C1:72:D3:89:7B
Authority key identifier: 75:8A:C2:BE:DA:DC:BA:3A:D7:38:16:9F:B3:89:D5:08:B5:4D:74:BF
Certificate issuer:       /CN=A915479A/serialNumber=758AC2BEDADCBA3AD738169FB389D508B54D74BF
Certificate serial:       0133
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dYrCvtrcujrXOBafs4nVCLVNdL8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.mft
Manifest number:          0130
Signing time:             Mon 21 Sep 2026 05:36:48 +0000
Manifest this update:     Mon 21 Sep 2026 05:36:47 +0000
Manifest next update:     Mon 28 Sep 2026 05:36:47 +0000
Files and hashes:         1: dYrCvtrcujrXOBafs4nVCLVNdL8.crl (hash: RUPayWWfC/t/iWtmiR8IqDuro7wYFO0kn5WdL9puafU=)
                          2: 88A1F6DEE37B11EFB4D75458C4F9AE02.roa (hash: KUeckJ0OB4byF3En5Bb4XvKyGhsmfpzHrkkfXSO7Ip0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.crl
                          rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dYrCvtrcujrXOBafs4nVCLVNdL8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 05:36:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 307 (0x133)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915479A, serialNumber=758AC2BEDADCBA3AD738169FB389D508B54D74BF
        Validity
            Not Before: Sep 21 05:36:47 2026 GMT
            Not After : Sep 28 05:36:47 2026 GMT
        Subject: CN=6ab0c270-9c14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:33:bd:af:a4:ff:76:bf:d4:14:18:e7:7f:7b:
                    4d:c9:b2:8c:26:2d:38:d5:3c:45:93:b5:65:46:0d:
                    cb:78:5f:0a:b0:f1:64:98:b7:93:f7:9a:96:1d:1b:
                    88:8a:1e:bd:43:82:91:de:eb:2e:74:43:78:63:ce:
                    c4:3e:57:7f:a9:db:15:33:6f:0c:b5:2a:18:4a:41:
                    fa:54:bc:87:3e:5d:13:d9:e3:ef:15:29:02:57:c3:
                    c3:bd:94:5f:3f:66:89:bc:01:70:1a:97:e2:d3:2d:
                    fa:12:f5:f9:3b:2e:b6:8d:10:8d:b4:60:2a:88:d4:
                    7a:c7:8b:56:6c:bf:96:90:59:3a:a0:09:2d:b7:aa:
                    b3:1f:6e:84:d0:bb:74:94:dd:d9:56:16:41:cd:56:
                    e6:c3:f9:1e:b9:01:d0:fd:3e:7b:29:fb:cf:de:03:
                    b5:47:33:dd:24:5f:27:6f:30:2c:0f:7a:42:d2:2d:
                    9a:d4:f5:4f:ac:c2:4b:73:81:30:21:a8:53:0b:ce:
                    ee:b4:c2:fc:32:40:cf:61:76:6a:f5:2b:0e:fa:25:
                    c8:dc:97:ab:0b:55:a5:e6:54:c1:ba:2a:25:1a:93:
                    8d:a8:b7:aa:3a:67:99:33:e0:e6:04:32:8f:50:d9:
                    7a:03:59:8c:c7:74:a1:b1:a2:8a:a0:f6:cf:ec:19:
                    d1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:D4:08:DB:1C:88:78:CB:7E:80:C9:E0:42:7F:82:C1:72:D3:89:7B
            X509v3 Authority Key Identifier:
                keyid:75:8A:C2:BE:DA:DC:BA:3A:D7:38:16:9F:B3:89:D5:08:B5:4D:74:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dYrCvtrcujrXOBafs4nVCLVNdL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         df:44:f7:e9:21:02:f1:d6:1d:14:63:b7:29:43:bf:7e:3b:8e:
         46:74:07:17:38:81:10:42:1a:9f:df:33:15:35:9b:79:3d:8f:
         a2:4f:b1:78:81:32:09:2b:c4:8e:e3:9e:ca:e1:8d:23:fa:e6:
         a4:66:70:ac:1f:11:e0:7d:c0:62:63:af:95:92:32:01:c4:ef:
         d6:ec:af:a3:4e:7c:5a:32:1f:65:35:08:0f:ee:83:2a:72:0a:
         75:89:b9:71:77:dc:b0:2a:4f:eb:58:cb:8d:18:4a:5e:ce:7a:
         3e:c0:cb:47:84:25:56:33:38:b7:a1:26:b6:47:38:9f:ae:c1:
         88:c1:a3:6f:36:9f:ec:31:65:e5:dc:40:bd:fd:15:da:2f:44:
         4d:18:fb:c4:d8:fe:f6:1c:b4:47:03:fd:e6:89:18:46:95:81:
         03:62:70:c8:56:75:28:e5:f2:37:b6:d1:34:24:d3:78:12:2f:
         7d:b2:92:d2:63:19:79:29:6d:30:72:ba:7a:79:47:ac:8b:4e:
         cd:bd:50:a9:04:ab:84:ae:a6:b5:03:be:7c:e2:55:7a:81:c2:
         27:59:b1:e2:05:80:ed:89:13:7a:ec:03:26:b0:9b:16:30:85:
         63:06:ea:47:a2:f1:3b:42:de:c3:6d:9d:a5:1d:0f:49:2a:7e:
         36:8f:df:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:53:37 2026 by rpki-client