Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9164F00/21671AC2CC1C11F1B91B4C35F865CEF9/t1DR-R6CgJimwcvVd3eVbHdQuCw.mft
File:                     t1DR-R6CgJimwcvVd3eVbHdQuCw.mft (raw, json)
Hash identifier:          zybEN5REa0d7E/xHcsaUSKiBXmjBivX/nzGvh4UVMKc=
Subject key identifier:   BE:F3:B7:CC:00:59:94:E3:81:15:67:F6:72:EB:96:0D:B7:5E:75:AD
Authority key identifier: B7:50:D1:F9:1E:82:80:98:A6:C1:CB:D5:77:77:95:6C:77:50:B8:2C
Certificate issuer:       /CN=A9164F00/serialNumber=B750D1F91E828098A6C1CBD57777956C7750B82C
Certificate serial:       0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1DR-R6CgJimwcvVd3eVbHdQuCw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164F00/21671AC2CC1C11F1B91B4C35F865CEF9/t1DR-R6CgJimwcvVd3eVbHdQuCw.mft
Manifest number:          0B
Signing time:             Thu 05 Nov 2026 10:10:10 +0000
Manifest this update:     Thu 05 Nov 2026 10:10:10 +0000
Manifest next update:     Thu 12 Nov 2026 10:10:10 +0000
Files and hashes:         1: t1DR-R6CgJimwcvVd3eVbHdQuCw.crl (hash: chnYzei8x94ux8kK1P8fb4e7/P4lpFmvtpV2YMJAHEo=)
                          2: 5068CECECC1C11F1AB40D406F965CEF9.roa (hash: ESZj9FPS/zQAEnhfkQtfgc0Ts0uucZlBzOk+1jtfsiQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164F00/21671AC2CC1C11F1B91B4C35F865CEF9/t1DR-R6CgJimwcvVd3eVbHdQuCw.crl
                          rsync://rpki.apnic.net/member_repository/A9164F00/21671AC2CC1C11F1B91B4C35F865CEF9/t1DR-R6CgJimwcvVd3eVbHdQuCw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1DR-R6CgJimwcvVd3eVbHdQuCw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Nov 2026 10:10:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164F00, serialNumber=B750D1F91E828098A6C1CBD57777956C7750B82C
        Validity
            Not Before: Nov  5 10:10:10 2026 GMT
            Not After : Nov 12 10:10:10 2026 GMT
        Subject: CN=6aec5602-0e37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:ab:43:0c:39:69:9d:e8:09:ae:c9:19:cc:8c:
                    22:a6:1a:68:ba:7f:01:f9:2c:1a:29:96:7f:ee:0a:
                    13:ab:03:ea:9f:1a:5d:f6:a1:3a:64:3f:e3:04:8e:
                    b6:1a:90:41:ce:e4:fb:8e:b1:e3:d1:6a:70:24:8c:
                    21:de:0e:1f:d7:21:6d:9f:19:9a:51:ae:28:29:ad:
                    68:91:e7:ad:6a:e7:35:b7:51:4e:05:46:8e:4e:23:
                    7e:ad:5f:5d:5f:03:e9:f1:b5:a4:51:2b:30:ba:eb:
                    fa:f9:57:b6:e7:45:1d:d3:6e:7a:02:f4:2b:86:f8:
                    44:e3:e4:1b:b2:78:71:cc:7e:4a:30:7a:43:3a:c9:
                    2c:6d:81:75:70:ba:99:58:42:ab:48:8e:1f:69:76:
                    56:55:e6:6e:e8:92:de:5c:c7:70:03:61:ff:05:95:
                    46:64:f8:5d:40:d3:02:49:00:56:e4:a0:1a:61:3d:
                    be:df:99:b6:f7:fa:b7:a4:c4:17:a2:8c:1d:2d:52:
                    61:64:e7:9c:31:b6:0c:6b:6d:d2:2d:73:b7:aa:0b:
                    a8:a0:3a:d6:9e:8c:2c:00:85:31:53:88:b7:f7:ca:
                    09:03:10:e6:16:96:06:1e:a2:6f:e1:f7:cb:04:ab:
                    e5:3f:90:3f:cb:ff:29:93:72:54:c2:71:c5:b7:cf:
                    47:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F3:B7:CC:00:59:94:E3:81:15:67:F6:72:EB:96:0D:B7:5E:75:AD
            X509v3 Authority Key Identifier:
                keyid:B7:50:D1:F9:1E:82:80:98:A6:C1:CB:D5:77:77:95:6C:77:50:B8:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164F00/21671AC2CC1C11F1B91B4C35F865CEF9/t1DR-R6CgJimwcvVd3eVbHdQuCw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1DR-R6CgJimwcvVd3eVbHdQuCw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164F00/21671AC2CC1C11F1B91B4C35F865CEF9/t1DR-R6CgJimwcvVd3eVbHdQuCw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:2b:bf:c4:d6:62:5e:5b:71:98:a7:ee:6a:09:e9:b3:4d:13:
         fe:86:af:5e:be:3a:9a:9a:88:31:7f:12:51:cc:0c:eb:98:25:
         c3:b4:00:ad:df:55:3b:f1:da:91:22:4d:1e:ca:9a:4d:1d:c6:
         e3:05:1b:06:84:af:b1:4f:46:04:d2:c3:bb:bc:58:88:b3:97:
         15:72:24:01:29:ad:c5:29:09:77:26:33:58:56:ce:d4:d3:13:
         b1:af:bd:70:3d:0f:80:05:ab:30:92:f6:7d:1f:ff:26:35:ff:
         7a:fa:42:dd:33:b2:b0:65:5b:40:5d:e6:b1:5b:00:e7:3e:c3:
         2b:cd:09:a9:54:25:f9:ed:8b:aa:4c:da:a3:bc:54:35:6f:77:
         f5:6a:6d:a0:48:aa:50:cf:1b:00:df:40:4f:b7:c1:67:05:46:
         ea:90:57:81:f3:38:0b:2f:f6:04:91:6f:ec:88:30:4b:ef:bb:
         7c:7c:bb:bd:e6:f1:36:ad:91:7a:e8:9f:bf:41:83:9e:ab:62:
         07:00:02:c0:56:bf:88:96:da:cf:f9:32:3d:3a:dc:54:01:1b:
         f5:0d:85:0a:f0:67:4c:94:23:99:ea:d3:de:a8:6b:44:ad:66:
         60:b6:59:cb:27:01:5b:c1:80:3e:39:83:92:58:79:d1:11:43:
         57:96:54:f4
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
NEYwMDExMC8GA1UEBRMoQjc1MEQxRjkxRTgyODA5OEE2QzFDQkQ1Nzc3Nzk1NkM3
NzUwQjgyQzAeFw0yNjExMDUxMDEwMTBaFw0yNjExMTIxMDEwMTBaMBgxFjAUBgNV
BAMTDTZhZWM1NjAyLTBlMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDvq0MMOWmd6AmuyRnMjCKmGmi6fwH5LBopln/uChOrA+qfGl32oTpkP+MEjrYa
kEHO5PuOsePRanAkjCHeDh/XIW2fGZpRrigprWiR561q5zW3UU4FRo5OI36tX11f
A+nxtaRRKzC66/r5V7bnRR3TbnoC9CuG+ETj5BuyeHHMfkowekM6ySxtgXVwuplY
QqtIjh9pdlZV5m7okt5cx3ADYf8FlUZk+F1A0wJJAFbkoBphPb7fmbb3+rekxBei
jB0tUmFk55wxtgxrbdItc7eqC6igOtaejCwAhTFTiLf3ygkDEOYWlgYeom/h98sE
q+U/kD/L/ymTclTCccW3z0cbAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUvvO3zABZ
lOOBFWf2cuuWDbdeda0wHwYDVR0jBBgwFoAUt1DR+R6CgJimwcvVd3eVbHdQuCww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0RjAwLzIxNjcxQUMyQ0Mx
QzExRjFCOTFCNEMzNUY4NjVDRUY5L3QxRFItUjZDZ0ppbXdjdlZkM2VWYkhkUXVD
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvdDFEUi1SNkNnSmltd2N2VmQzZVZiSGRRdUN3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0
RjAwLzIxNjcxQUMyQ0MxQzExRjFCOTFCNEMzNUY4NjVDRUY5L3QxRFItUjZDZ0pp
bXdjdlZkM2VWYkhkUXVDdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBTK7/E1mJeW3GYp+5qCemzTRP+hq9evjqamogxfxJRzAzrmCXDtACt31U78dqR
Ik0eyppNHcbjBRsGhK+xT0YE0sO7vFiIs5cVciQBKa3FKQl3JjNYVs7U0xOxr71w
PQ+ABaswkvZ9H/8mNf96+kLdM7KwZVtAXeaxWwDnPsMrzQmpVCX57YuqTNqjvFQ1
b3f1am2gSKpQzxsA30BPt8FnBUbqkFeB8zgLL/YEkW/siDBL77t8fLu95vE2rZF6
6J+/QYOeq2IHAALAVr+IltrP+TI9OtxUARv1DYUK8GdMlCOZ6tPeqGtErWZgtlnL
JwFbwYA+OYOSWHnREUNXllT0
-----END CERTIFICATE-----
Generated at Thu Nov 5 14:09:36 2026 by rpki-client