Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft
File:                     dK-15U8HPzwgdjJdKsf3AA4uaoY.mft (raw, json)
Hash identifier:          la6dXsDgygCm7cdebiA7Ky7xZfbaIgdI2bXAKS5Y8CY=
Subject key identifier:   1F:EA:E4:71:43:B9:73:53:5C:23:51:50:29:15:A7:81:31:C9:36:F7
Authority key identifier: 74:AF:B5:E5:4F:07:3F:3C:20:76:32:5D:2A:C7:F7:00:0E:2E:6A:86
Certificate issuer:       /CN=A916EDC2/serialNumber=74AFB5E54F073F3C2076325D2AC7F7000E2E6A86
Certificate serial:       0438
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft
Manifest number:          0431
Signing time:             Sun 27 Sep 2026 00:18:13 +0000
Manifest this update:     Sun 27 Sep 2026 00:18:13 +0000
Manifest next update:     Sun 04 Oct 2026 00:18:13 +0000
Files and hashes:         1: dK-15U8HPzwgdjJdKsf3AA4uaoY.crl (hash: jU8zH1oBqBkEvYCiscjgaxyNkpng3UFAeIV5AKRERmY=)
                          2: 5E8E08E8C26211ECBFC22B20C4F9AE02.roa (hash: C2lCkbVI1XaonZAwyhCohh9dLONbvb2hit8qWW3O4Ec=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.crl
                          rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 00:18:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1080 (0x438)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916EDC2, serialNumber=74AFB5E54F073F3C2076325D2AC7F7000E2E6A86
        Validity
            Not Before: Sep 27 00:18:13 2026 GMT
            Not After : Oct  4 00:18:13 2026 GMT
        Subject: CN=6ab860c5-11d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c7:fb:db:bb:91:52:d5:b2:f5:19:46:9b:80:
                    da:18:94:f7:24:32:3a:22:05:90:62:3c:8f:1e:21:
                    84:5f:f2:3a:3c:49:ca:a2:e0:c7:49:e2:a7:63:d9:
                    61:50:73:1f:22:7d:3d:31:9d:30:90:ed:5e:81:94:
                    8e:1d:88:de:15:48:de:4c:a7:05:48:02:52:72:19:
                    0e:45:19:92:57:02:86:42:ff:04:3f:dd:32:78:86:
                    5f:8c:3e:9c:75:bc:04:3a:5f:20:f5:5a:b4:42:1e:
                    28:06:07:c8:bf:e2:a4:24:1a:94:ea:fb:c5:29:fe:
                    9e:27:c3:04:ad:8b:61:05:53:61:d4:b5:40:41:3b:
                    00:63:9b:e8:54:83:eb:a1:79:d4:38:8b:0f:b5:09:
                    21:0f:2a:bd:f5:7d:d1:61:22:e1:eb:81:5f:99:0a:
                    7c:be:ad:2f:85:21:de:c5:75:52:09:d1:97:65:84:
                    b9:7c:46:c6:14:1e:21:15:74:de:e3:e1:2b:1e:60:
                    7e:ad:c9:e7:4e:ee:e2:b3:20:dc:db:d8:ba:ff:96:
                    d1:7e:4b:b3:ad:6e:13:1c:17:ee:5c:7c:63:b2:e1:
                    b8:eb:db:9a:5b:9a:9d:70:71:b0:48:fe:52:b4:69:
                    e8:f4:b8:9f:73:82:c1:b1:08:3d:a3:d8:f1:b9:03:
                    9d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:EA:E4:71:43:B9:73:53:5C:23:51:50:29:15:A7:81:31:C9:36:F7
            X509v3 Authority Key Identifier:
                keyid:74:AF:B5:E5:4F:07:3F:3C:20:76:32:5D:2A:C7:F7:00:0E:2E:6A:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:20:b7:85:7a:63:4d:ec:68:aa:90:77:5a:c2:4f:75:0e:d4:
         ed:7a:16:cb:82:a8:a4:6d:46:db:5d:12:52:7d:c6:fe:7a:20:
         8b:6a:40:65:fc:4c:5d:59:f1:36:94:98:7f:78:6f:69:e3:48:
         ae:af:76:47:f8:f4:39:cd:a5:e1:2c:00:16:5c:36:9f:da:17:
         27:db:23:c6:b9:c9:99:2e:58:b1:8c:91:13:c1:fc:b8:52:c5:
         85:3f:0a:5c:12:76:c1:10:5a:81:ee:b2:3b:98:9a:38:b9:cf:
         e1:42:8d:cd:54:ce:92:de:a7:16:84:fb:c4:a0:3a:a5:dd:70:
         84:0e:20:e7:c7:a6:19:cf:e5:7a:74:f9:56:9b:2a:af:80:7a:
         a9:b7:4e:6c:83:f0:66:da:e6:36:22:1e:27:1a:7d:31:c2:5e:
         a3:35:42:fc:0a:ed:42:c4:d2:aa:6f:4a:c1:bc:ca:f6:c4:e0:
         de:56:2d:b2:03:93:44:aa:3b:80:02:66:6d:ff:41:38:f5:ea:
         2e:8f:6c:3c:37:d1:0f:d5:14:51:47:7a:51:7d:67:65:61:80:
         94:a1:4b:54:1a:5f:52:56:fc:6c:d6:51:42:ee:3e:0b:9b:cc:
         fe:09:73:27:89:80:57:5f:62:1e:02:69:f3:c0:89:0e:92:7e:
         07:76:2e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:52:17 2026 by rpki-client