Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.mft
File:                     DGlwyrnfjpvRDhw-kYkaCafojCA.mft (raw, json)
Hash identifier:          rlGAKzY+qG/prUl7YIZqfSrluIknDv4XBPrtTduWrys=
Subject key identifier:   44:0F:D5:E7:8D:A6:8E:0B:AB:9C:DF:C5:89:A9:80:2F:C1:91:5B:5B
Authority key identifier: 0C:69:70:CA:B9:DF:8E:9B:D1:0E:1C:3E:91:89:1A:09:A7:E8:8C:20
Certificate issuer:       /CN=A9179672/serialNumber=0C6970CAB9DF8E9BD10E1C3E91891A09A7E88C20
Certificate serial:       0155
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGlwyrnfjpvRDhw-kYkaCafojCA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.mft
Manifest number:          014D
Signing time:             Fri 09 Oct 2026 05:00:19 +0000
Manifest this update:     Fri 09 Oct 2026 05:00:19 +0000
Manifest next update:     Fri 16 Oct 2026 05:00:19 +0000
Files and hashes:         1: DGlwyrnfjpvRDhw-kYkaCafojCA.crl (hash: aTRfDY3hvoDZYPnGbAVGXFgSD+x0bq0qqfYrOPXObmE=)
                          2: D1C1AFB2135511F0976BA50CC4F9AE02.roa (hash: cXnna13A37da56cbsTCo0fbmD5n4hI69trG/+73mamk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.crl
                          rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGlwyrnfjpvRDhw-kYkaCafojCA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 05:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 341 (0x155)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179672, serialNumber=0C6970CAB9DF8E9BD10E1C3E91891A09A7E88C20
        Validity
            Not Before: Oct  9 05:00:19 2026 GMT
            Not After : Oct 16 05:00:19 2026 GMT
        Subject: CN=6ac874e3-41b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c5:4c:ea:9e:bd:30:ea:f0:fd:2c:2d:ba:bd:
                    33:21:4c:c9:a1:6d:51:aa:ee:11:61:dd:1f:e3:06:
                    e0:7d:c5:9c:43:ea:b3:85:99:12:a4:f2:9b:d4:ab:
                    3b:0f:e8:0a:27:25:73:df:c7:01:51:93:9d:b6:53:
                    92:32:22:b7:a9:05:d1:f6:bb:dc:59:56:c2:e1:76:
                    4f:9a:60:1d:bf:73:5e:c8:6a:f8:29:54:92:fa:24:
                    48:4e:92:e0:99:6e:c5:76:dc:f7:38:a5:f7:18:10:
                    30:cc:83:d6:7a:d9:e0:c7:b7:3d:15:96:c1:a5:a7:
                    1e:ca:3f:e1:0f:cc:d1:35:39:ae:bb:0c:33:e9:a3:
                    6a:6d:f7:e4:63:7e:25:77:0a:cf:7b:19:f2:8d:58:
                    70:6e:d9:6f:0a:e5:5c:bc:bf:1c:78:fd:18:8f:a5:
                    2a:af:13:3b:26:04:a8:98:3c:24:61:fd:94:d9:4b:
                    eb:90:ad:9d:b2:8a:65:9a:62:94:f1:41:a3:87:b0:
                    83:be:82:84:47:45:5d:0f:60:e9:28:fb:df:7c:fb:
                    72:f6:0e:54:9f:52:5b:63:4c:ce:54:6e:6d:13:a5:
                    84:e3:96:dc:2d:80:c7:e4:67:0a:ce:f9:36:ea:50:
                    22:81:fa:83:b6:b2:39:71:ca:e1:fe:02:37:1e:4d:
                    e8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:0F:D5:E7:8D:A6:8E:0B:AB:9C:DF:C5:89:A9:80:2F:C1:91:5B:5B
            X509v3 Authority Key Identifier:
                keyid:0C:69:70:CA:B9:DF:8E:9B:D1:0E:1C:3E:91:89:1A:09:A7:E8:8C:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGlwyrnfjpvRDhw-kYkaCafojCA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:8a:7a:f2:fb:f9:ce:27:97:fe:9b:be:93:ab:42:ad:04:cb:
         69:63:46:10:ce:2f:89:dd:88:1e:77:55:c3:3b:fd:d8:5f:5e:
         12:3c:b8:c8:bd:aa:54:2f:de:69:66:ef:73:76:14:78:ee:0a:
         84:7c:e0:f6:1b:a7:32:12:e5:63:a2:de:4f:24:bb:71:74:7c:
         cc:aa:7a:bf:09:ac:d8:de:b5:1f:29:7e:41:44:27:ed:fb:c6:
         2a:61:de:72:57:4e:1e:f0:92:b5:1c:5c:72:95:e7:6c:a1:ea:
         83:1a:73:d5:8f:98:ad:01:d6:1a:ff:af:0e:a1:27:87:5b:0d:
         a8:ff:2f:23:6f:b3:8d:ae:1a:8f:1f:e0:80:43:c7:d0:21:29:
         92:99:0d:c8:b4:c1:e1:93:63:72:d8:3b:e0:44:88:96:29:67:
         ca:7b:b7:25:19:99:54:3f:f8:0d:bd:8b:c8:fa:ca:34:82:71:
         b0:8f:ef:ee:1a:2a:9a:88:7b:4f:05:51:bf:7a:60:98:a4:5a:
         96:5c:d8:20:3d:e5:9b:e2:fd:e5:ee:eb:dd:d5:1b:2f:45:5b:
         46:fb:9e:30:d0:4d:78:01:18:d9:27:38:47:97:65:83:26:8a:
         41:e7:8a:69:21:b6:18:84:4c:09:76:23:4b:1b:08:54:30:1d:
         cd:0f:68:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 00:25:16 2026 by rpki-client