Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.mft
File:                     DS-zVcvfDQGqBVJ7xHEo5QuzWrA.mft (raw, json)
Hash identifier:          PM5DXHFZN9Q4DTlbkujjF56LTESoiQn3or4+Ut6Zs9I=
Subject key identifier:   B4:D2:77:50:5A:53:C4:8E:BC:B7:46:21:6C:CE:F6:C2:C0:DA:73:FB
Authority key identifier: 0D:2F:B3:55:CB:DF:0D:01:AA:05:52:7B:C4:71:28:E5:0B:B3:5A:B0
Certificate issuer:       /CN=A916DD4C/serialNumber=0D2FB355CBDF0D01AA05527BC47128E50BB35AB0
Certificate serial:       4F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.mft
Manifest number:          4E
Signing time:             Tue 13 Oct 2026 09:06:04 +0000
Manifest this update:     Tue 13 Oct 2026 09:06:03 +0000
Manifest next update:     Tue 20 Oct 2026 09:06:03 +0000
Files and hashes:         1: DS-zVcvfDQGqBVJ7xHEo5QuzWrA.crl (hash: +Uqk+N4Z+xhsncJ5vjAVmA1GM+0NMR7Gd5Dv814Mfyo=)
                          2: B542E6104F5111F19B10B1EBBC833773.roa (hash: mP6zUQytayXrN1Je1WI2oXHvaN9oSuIafOIFenUItbk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.crl
                          rsync://rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 09:06:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79 (0x4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DD4C, serialNumber=0D2FB355CBDF0D01AA05527BC47128E50BB35AB0
        Validity
            Not Before: Oct 13 09:06:03 2026 GMT
            Not After : Oct 20 09:06:03 2026 GMT
        Subject: CN=6acdf47c-4330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5e:88:6f:fc:0a:61:67:3d:04:98:52:39:9e:
                    66:3c:49:80:3e:56:8d:b5:c7:d1:07:d1:4f:b8:fd:
                    5b:e7:3f:e1:57:de:a0:86:fe:35:20:17:7d:16:77:
                    2b:83:6f:fa:bd:21:1d:3b:12:ae:6f:66:32:9b:5d:
                    22:d5:98:de:85:4c:71:86:01:b1:d8:ef:2f:97:29:
                    08:5b:07:3a:9b:31:f3:cc:e4:4e:ca:35:7d:d5:65:
                    d6:79:16:ae:43:93:91:10:dd:c3:df:2d:4f:ac:38:
                    06:db:58:4f:be:01:e3:fa:40:11:3e:11:8b:93:9c:
                    d9:3d:47:d6:e2:af:00:b7:86:de:15:1b:14:5f:61:
                    75:a6:02:23:5a:10:41:a7:c2:21:1c:b3:fd:b7:f6:
                    60:f5:57:6e:c2:bd:cf:7c:05:8c:ea:7b:f1:b2:86:
                    be:a2:3c:65:82:fc:6c:ff:13:ab:80:53:bd:57:e0:
                    c3:01:7b:1a:8e:65:eb:35:03:2b:08:58:53:fa:68:
                    9c:e8:3d:4d:ba:3a:1d:c4:75:ea:19:19:67:02:25:
                    88:42:cd:57:fb:0d:b1:23:f5:c7:87:ad:95:1a:70:
                    92:ed:02:b7:24:f0:c8:ae:5c:13:ea:81:ff:cf:c7:
                    03:a9:69:70:2b:36:25:fb:de:c2:c3:3b:c4:ae:4a:
                    10:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:D2:77:50:5A:53:C4:8E:BC:B7:46:21:6C:CE:F6:C2:C0:DA:73:FB
            X509v3 Authority Key Identifier:
                keyid:0D:2F:B3:55:CB:DF:0D:01:AA:05:52:7B:C4:71:28:E5:0B:B3:5A:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:7a:51:fc:36:5a:5b:1c:cd:8f:d0:83:d9:67:b7:4d:23:25:
         50:f9:79:7e:84:67:2b:7d:93:b2:39:a9:52:16:84:13:1a:09:
         2a:47:a7:c0:32:0d:d0:1c:cf:b0:97:d6:e5:75:10:c8:51:47:
         8f:88:b1:2e:69:39:1b:fa:e6:1a:d3:cf:d0:c0:0a:37:bb:a6:
         8d:b9:ae:f7:b2:02:a9:7d:e8:40:f6:e1:aa:93:c9:f0:90:62:
         8e:5f:55:33:47:ba:3b:86:2c:b3:c8:39:03:5b:61:b8:83:1a:
         ae:d1:2d:83:94:01:26:12:6b:9a:82:9b:16:b2:1c:ab:f0:d7:
         3e:77:3d:83:10:4a:c0:91:d4:a5:87:01:04:df:d0:89:0c:1a:
         7f:e4:b9:5f:47:02:3b:ad:25:97:d1:bf:e2:2c:47:46:82:bb:
         90:f4:2b:e7:aa:4c:05:49:9a:d3:4e:0d:e5:df:70:d4:21:fc:
         f6:1b:11:f3:21:d4:6f:b7:86:bf:56:1a:1a:d8:ac:6e:46:02:
         61:d0:44:ac:3c:16:11:3c:43:c6:bb:85:18:8e:1c:56:c5:b4:
         e2:a0:57:4f:60:a2:27:64:1f:5e:8a:1a:22:c1:ba:97:48:0a:
         a7:df:b5:17:d1:57:d1:22:02:3b:95:d4:ff:57:da:41:d5:95:
         c7:e3:47:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 20:21:07 2026 by rpki-client