Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/DGhYIowwF0gr3H85geiYuVbaoCk.mft
File:                     DGhYIowwF0gr3H85geiYuVbaoCk.mft (raw, json)
Hash identifier:          /VYw45g68n0mrBEXJSwie/7+eOzTKiJyeW7HoYH7PUQ=
Subject key identifier:   24:BB:49:39:36:68:14:21:9D:E9:66:86:F6:6D:CC:B7:7F:40:3C:AA
Authority key identifier: 0C:68:58:22:8C:30:17:48:2B:DC:7F:39:81:E8:98:B9:56:DA:A0:29
Certificate issuer:       /CN=A9170975/serialNumber=0C6858228C3017482BDC7F3981E898B956DAA029
Certificate serial:       0100
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGhYIowwF0gr3H85geiYuVbaoCk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/DGhYIowwF0gr3H85geiYuVbaoCk.mft
Manifest number:          FC
Signing time:             Wed 23 Sep 2026 06:02:55 +0000
Manifest this update:     Wed 23 Sep 2026 06:02:55 +0000
Manifest next update:     Wed 30 Sep 2026 06:02:55 +0000
Files and hashes:         1: DGhYIowwF0gr3H85geiYuVbaoCk.crl (hash: gU7WbldO70y6tb7WAtsq5uLbNI2FCwBb1s0PRU11gXQ=)
                          2: B12A39803A2A11F09E37DB48C4F9AE02.roa (hash: CoN2ChPQA1qn/Xvwh+q1CXaNL7awqOvoz+KnawFyjQE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/DGhYIowwF0gr3H85geiYuVbaoCk.crl
                          rsync://rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/DGhYIowwF0gr3H85geiYuVbaoCk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGhYIowwF0gr3H85geiYuVbaoCk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 06:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 256 (0x100)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170975, serialNumber=0C6858228C3017482BDC7F3981E898B956DAA029
        Validity
            Not Before: Sep 23 06:02:55 2026 GMT
            Not After : Sep 30 06:02:55 2026 GMT
        Subject: CN=6ab36b8f-37c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:a5:1f:bb:10:80:dd:95:fb:82:3a:a3:55:4d:
                    0e:47:f6:ba:5a:5b:c3:5d:6f:01:a9:3f:a6:0f:7d:
                    6a:2e:7a:e1:bd:97:31:bf:28:f4:a7:b7:59:64:9d:
                    4e:65:2c:25:4d:68:12:c9:5b:10:7a:a3:3f:07:18:
                    60:4e:8e:66:e7:f5:b1:80:09:36:8c:23:f8:fd:82:
                    d9:b0:69:a4:00:1a:bf:aa:c2:27:72:c0:a5:bb:d7:
                    b3:87:46:e7:39:5b:7c:a1:36:f3:24:f3:b1:38:b9:
                    f3:ac:89:0f:27:42:f4:d4:10:97:36:40:fe:f7:38:
                    8b:35:9a:39:7c:2e:96:33:8d:21:59:24:de:12:ee:
                    ea:d2:48:36:5e:32:a5:e3:7a:cf:bc:5a:0a:91:f0:
                    72:99:c8:f8:f0:83:84:3f:05:71:d1:f4:13:41:7b:
                    fa:19:3d:a0:f8:c5:72:f0:d7:2e:92:fc:83:63:10:
                    dd:18:e2:fc:9c:de:62:d3:df:5a:51:77:71:96:e2:
                    2b:af:ee:63:8e:a0:93:dc:2c:8d:50:0d:9f:63:38:
                    13:ea:50:95:0d:e2:6e:25:79:6c:e3:a0:df:3b:8f:
                    3d:bf:92:ed:76:f0:85:61:bb:cf:b9:34:57:57:c7:
                    b1:c0:44:af:ee:9a:b3:6b:4f:64:4a:fb:3a:96:0c:
                    a2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:BB:49:39:36:68:14:21:9D:E9:66:86:F6:6D:CC:B7:7F:40:3C:AA
            X509v3 Authority Key Identifier:
                keyid:0C:68:58:22:8C:30:17:48:2B:DC:7F:39:81:E8:98:B9:56:DA:A0:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/DGhYIowwF0gr3H85geiYuVbaoCk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGhYIowwF0gr3H85geiYuVbaoCk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/DGhYIowwF0gr3H85geiYuVbaoCk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:32:92:77:a6:aa:08:ee:30:09:c3:6f:36:38:12:f0:81:82:
         f7:ba:a5:86:70:5a:00:0c:9d:e1:91:ab:5e:8f:da:67:30:e8:
         57:6f:3b:12:e8:16:e9:31:ae:29:57:03:ae:9e:3d:c0:b7:d7:
         11:7a:6d:c9:e7:cf:06:1c:42:74:95:21:e4:f3:73:d9:90:97:
         f0:06:ed:2e:d5:9f:cf:ef:36:21:cd:6a:be:a3:fe:66:b9:e8:
         8d:6d:0c:52:d9:ae:e3:2d:bb:63:c5:39:43:ca:5a:be:15:d8:
         7f:35:20:2d:bc:fd:2f:5e:34:8a:c8:80:1b:e4:19:dd:78:5a:
         54:dd:ba:f6:1c:29:d8:8a:5f:1a:03:42:c0:d4:40:0c:37:6a:
         06:d4:ed:e9:7c:a4:7d:e5:b8:d5:77:d8:20:16:69:01:57:7a:
         a4:c3:ff:c4:b1:8f:82:19:f6:75:6e:43:bb:f4:ad:96:71:1b:
         19:d2:22:9a:54:f3:ed:57:8c:2f:42:15:36:8a:9f:51:db:0e:
         30:f7:7e:55:15:82:3d:f2:5a:11:f7:f6:31:b0:5b:d0:e4:63:
         78:95:5e:13:ef:28:79:38:d8:0a:76:c2:60:b3:20:0e:98:cc:
         ec:fe:49:3a:ae:f2:be:c4:3c:0a:54:c5:73:fc:d2:41:2b:bc:
         a5:d5:ca:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:55:22 2026 by rpki-client