Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.mft
File:                     dyPYVuUggiTyvImjgJd39SgzEvw.mft (raw, json)
Hash identifier:          xV1iVkvXsJ0y1/q+LNM8vKwarJRDPZyakGQkktmDRIM=
Subject key identifier:   9B:6F:02:25:6B:CB:06:ED:8A:2D:70:43:CE:74:CB:BD:57:B0:B1:0B
Authority key identifier: 77:23:D8:56:E5:20:82:24:F2:BC:89:A3:80:97:77:F5:28:33:12:FC
Certificate issuer:       /CN=A9163EDF/serialNumber=7723D856E5208224F2BC89A3809777F5283312FC
Certificate serial:       0213
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyPYVuUggiTyvImjgJd39SgzEvw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.mft
Manifest number:          020E
Signing time:             Tue 29 Sep 2026 03:28:19 +0000
Manifest this update:     Tue 29 Sep 2026 03:28:18 +0000
Manifest next update:     Tue 06 Oct 2026 03:28:18 +0000
Files and hashes:         1: dyPYVuUggiTyvImjgJd39SgzEvw.crl (hash: ywOouq/pV7AgKhvFzAILDINJA9qMmcVkoVYkRHJ/rQk=)
                          2: 7FB5CBF097DB11EE8E67BA41C4F9AE02.roa (hash: rxO58g4ckfnjnAl8Td7NyVk2cfGa6poPhda8R1ciKog=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.crl
                          rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyPYVuUggiTyvImjgJd39SgzEvw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 03:28:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 531 (0x213)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163EDF, serialNumber=7723D856E5208224F2BC89A3809777F5283312FC
        Validity
            Not Before: Sep 29 03:28:18 2026 GMT
            Not After : Oct  6 03:28:18 2026 GMT
        Subject: CN=6abb3052-92bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:95:a5:41:54:4a:3e:88:22:3f:be:6f:c1:2e:
                    a1:a9:35:a0:fa:1d:5e:1a:ad:8a:37:55:75:0c:fa:
                    ec:ae:2c:1d:a7:e7:eb:64:fa:3e:2b:a4:9a:77:a1:
                    cb:78:7a:07:fb:3d:f5:b9:1d:3f:7c:2e:dc:13:b5:
                    73:f0:bd:e1:c5:e8:39:72:f8:38:f5:85:f0:da:8f:
                    0f:2d:bf:c5:e4:c6:94:fe:81:a4:2d:a9:9c:55:ee:
                    55:04:d1:a8:ff:86:f0:c9:7a:d6:84:0f:ac:e8:79:
                    03:71:fe:80:5b:cc:ce:95:cd:3c:c2:ad:b1:26:28:
                    8b:6a:90:ce:9d:0e:15:99:f9:35:f1:77:e3:01:f5:
                    fb:7b:02:20:18:c7:ed:45:8f:70:75:d7:71:3d:b9:
                    62:0e:b7:59:e4:c2:c7:9e:ad:3b:7b:24:69:6b:3b:
                    b5:6d:8c:37:d5:47:75:70:81:b5:c9:2f:a0:d8:55:
                    24:0e:23:9d:6b:a9:f9:ac:9e:56:dd:54:d4:d9:c2:
                    db:78:6f:4d:ef:f6:d8:a3:b3:79:c5:76:99:7e:02:
                    26:e7:87:27:f2:f5:38:1c:d5:a3:ef:20:98:73:a9:
                    be:4b:6f:78:28:fc:38:47:4e:4a:49:c9:66:3d:15:
                    dd:9a:69:03:1b:a6:11:46:f6:56:ce:a3:8c:91:5f:
                    c5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:6F:02:25:6B:CB:06:ED:8A:2D:70:43:CE:74:CB:BD:57:B0:B1:0B
            X509v3 Authority Key Identifier:
                keyid:77:23:D8:56:E5:20:82:24:F2:BC:89:A3:80:97:77:F5:28:33:12:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyPYVuUggiTyvImjgJd39SgzEvw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:45:2b:45:46:af:ca:49:47:7a:d3:07:77:ce:ab:88:8e:81:
         8e:14:f6:ce:65:10:65:77:94:bb:4b:32:69:4b:e4:46:39:37:
         92:ca:02:40:be:b1:a7:c4:e5:4e:9e:5d:19:2d:05:92:11:9a:
         2d:f7:8e:17:c0:37:96:3a:e5:bd:1d:88:1d:3a:42:ab:9d:54:
         bf:e7:c2:04:49:cf:af:5d:6f:fc:61:44:d7:a4:ff:25:88:f9:
         d3:b5:ce:2b:ac:3a:a1:0d:a1:50:ff:d2:2e:5a:4f:c6:51:64:
         86:c9:3a:64:25:e8:a0:37:c2:6a:c2:b9:1c:dd:50:b1:90:2e:
         9c:cd:7d:03:e6:bc:69:52:8a:15:90:b3:84:97:89:d8:c8:0f:
         08:3c:a1:b0:a3:4f:4f:4f:13:17:ad:53:87:55:b2:f7:fe:99:
         18:a1:39:03:39:9c:67:58:ac:5f:c0:b7:48:b6:4f:96:a1:6f:
         43:8f:02:1b:f7:2b:0e:46:7a:ea:e9:8b:3d:37:a1:e1:67:3b:
         1f:3b:09:d1:cd:9e:ec:79:af:95:a7:32:0e:dc:d1:5f:cf:7b:
         e0:d2:6e:cf:27:68:80:f2:80:98:1a:7d:f5:ce:a4:b6:46:17:
         8a:ee:37:b7:aa:74:ce:5b:d7:ff:07:d2:64:b8:eb:0d:ad:4b:
         9d:7c:76:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:59:56 2026 by rpki-client