Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.mft
File:                     pDc5u18gwUzF_EnjdVh9s7ciN68.mft (raw, json)
Hash identifier:          O7v7APkEbpiPgNSzQHuHMHyItz5bNjl0a+T288hU3oY=
Subject key identifier:   08:DD:EA:07:2D:92:7C:72:CA:8F:5A:C9:C4:96:07:CB:A3:61:2A:62
Authority key identifier: A4:37:39:BB:5F:20:C1:4C:C5:FC:49:E3:75:58:7D:B3:B7:22:37:AF
Certificate issuer:       /CN=A9172B7E/serialNumber=A43739BB5F20C14CC5FC49E375587DB3B72237AF
Certificate serial:       0264
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDc5u18gwUzF_EnjdVh9s7ciN68.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.mft
Manifest number:          0256
Signing time:             Sun 11 Oct 2026 02:52:54 +0000
Manifest this update:     Sun 11 Oct 2026 02:52:53 +0000
Manifest next update:     Sun 18 Oct 2026 02:52:53 +0000
Files and hashes:         1: pDc5u18gwUzF_EnjdVh9s7ciN68.crl (hash: jB2lb2lfUOu0Db6GSRNVGj0HLJ27iKtLTbhKkRVdsvw=)
                          2: BF341AF869A911EE8CB76452C4F9AE02.roa (hash: SGEw+Wke9h17PBLbOBO5SyI9VOxovY3gn1ceeJEPhms=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.crl
                          rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDc5u18gwUzF_EnjdVh9s7ciN68.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 02:52:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 612 (0x264)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172B7E, serialNumber=A43739BB5F20C14CC5FC49E375587DB3B72237AF
        Validity
            Not Before: Oct 11 02:52:53 2026 GMT
            Not After : Oct 18 02:52:53 2026 GMT
        Subject: CN=6acafa05-f532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:68:c6:75:25:0e:48:a2:27:1a:8d:71:97:56:
                    5b:88:0b:46:3f:f2:36:6d:a6:66:a3:19:7a:1b:6d:
                    a1:38:5c:27:a3:e4:6d:62:1a:90:bb:f8:9e:18:86:
                    07:59:68:b9:73:68:62:9f:6e:af:15:1d:6f:78:af:
                    8f:a7:a8:fe:9a:56:bd:93:51:7f:b9:dc:fc:a4:aa:
                    ab:e6:56:b4:a0:e0:ea:8b:b2:a2:b6:50:b5:e1:17:
                    d9:b1:e2:ed:e2:a9:51:7e:9d:fb:08:86:08:90:05:
                    a4:b6:4b:9f:0b:d3:e7:11:a6:6d:12:ac:3a:a1:ed:
                    05:14:42:55:eb:bc:87:74:69:a0:93:7d:56:37:fe:
                    02:f9:b6:9b:8a:23:18:7c:6c:80:53:b7:b6:2e:0a:
                    08:f6:eb:6f:22:3d:95:15:33:d6:54:a9:96:3f:8e:
                    94:82:ff:57:68:fa:2e:1a:6b:ad:de:ae:32:e9:6e:
                    fa:67:7a:1d:3d:50:64:81:da:85:d8:b7:06:f9:26:
                    f8:01:f2:b4:85:7a:1c:61:c4:e4:2a:44:3d:b1:de:
                    86:2c:c7:53:ed:42:bb:27:7d:4a:ea:9c:41:4c:1b:
                    05:e7:4a:ea:db:8c:f6:bf:c0:5f:f3:ca:41:8b:16:
                    1e:08:f2:c1:11:4f:c8:40:10:40:e7:2f:a1:9e:2a:
                    24:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:DD:EA:07:2D:92:7C:72:CA:8F:5A:C9:C4:96:07:CB:A3:61:2A:62
            X509v3 Authority Key Identifier:
                keyid:A4:37:39:BB:5F:20:C1:4C:C5:FC:49:E3:75:58:7D:B3:B7:22:37:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDc5u18gwUzF_EnjdVh9s7ciN68.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:ae:b4:c1:cf:b7:1c:54:30:bf:57:f3:59:86:c0:f9:22:5c:
         e8:27:ed:d9:1b:db:fc:49:22:7a:ff:e9:27:e9:30:1d:65:90:
         9d:10:eb:bb:bd:75:c3:6e:24:d9:59:67:ea:e7:60:0d:b5:57:
         16:e2:cf:5b:99:21:b3:e1:aa:60:e2:d5:93:a6:0b:42:b4:b4:
         09:f7:10:05:28:45:b2:24:9d:8d:c5:5a:66:9a:af:63:34:94:
         ca:40:7c:24:89:4a:f4:77:59:e1:a9:d0:4f:32:e8:2f:07:59:
         f5:58:f4:87:4a:25:ca:1c:59:57:ad:86:1a:39:0b:e7:a4:7b:
         8b:77:70:b9:bb:43:16:d5:3a:dd:d4:f5:ed:b6:5a:5c:bd:df:
         96:67:f1:cf:34:51:3a:cb:55:f8:c4:1d:94:00:30:50:39:3d:
         df:2e:78:a8:ab:d8:fc:44:b4:48:62:d4:5f:68:0f:f5:21:49:
         92:9e:f0:17:85:b2:8f:15:c1:88:f6:85:5e:51:91:f4:a1:b2:
         d3:a6:6b:23:74:c9:ac:b0:d2:0c:f2:22:3f:23:59:4c:14:9a:
         be:c2:83:eb:4a:e2:65:84:d7:86:b9:44:09:5b:0e:ff:6a:b4:
         84:d4:6e:47:5d:68:22:59:ac:b9:cf:41:37:c6:5e:27:32:24:
         67:f9:f4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:37:24 2026 by rpki-client