Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B04C/11A2F3DA2C2711F19BAFCA1D9C833773/DSL_1HBKVK6e2tG35aTgNT9F2hc.mft
File:                     DSL_1HBKVK6e2tG35aTgNT9F2hc.mft (raw, json)
Hash identifier:          UenRl6li9v+RaEZdBF0dxZ3TVFjplL85kaztNyy0K+U=
Subject key identifier:   AF:2A:EE:5D:D4:DC:67:2E:B2:49:2C:73:D4:6C:1E:EF:CD:65:66:B7
Authority key identifier: 0D:22:FF:D4:70:4A:54:AE:9E:DA:D1:B7:E5:A4:E0:35:3F:45:DA:17
Certificate issuer:       /CN=A917B04C/serialNumber=0D22FFD4704A54AE9EDAD1B7E5A4E0353F45DA17
Certificate serial:       5C
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DSL_1HBKVK6e2tG35aTgNT9F2hc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B04C/11A2F3DA2C2711F19BAFCA1D9C833773/DSL_1HBKVK6e2tG35aTgNT9F2hc.mft
Manifest number:          5B
Signing time:             Mon 21 Sep 2026 08:10:07 +0000
Manifest this update:     Mon 21 Sep 2026 08:10:06 +0000
Manifest next update:     Mon 28 Sep 2026 08:10:06 +0000
Files and hashes:         1: DSL_1HBKVK6e2tG35aTgNT9F2hc.crl (hash: Zpp34hLN35YHl2LPYTFFxYPIMAyBEPYjSgaOGcMpsoc=)
                          2: 984616082C2A11F1B015EE939D833773.roa (hash: oF4VI5NZfC+UNgW9AHSKJ6DEAMeK3Nd3QJRoxE5Ngzs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B04C/11A2F3DA2C2711F19BAFCA1D9C833773/DSL_1HBKVK6e2tG35aTgNT9F2hc.crl
                          rsync://rpki.apnic.net/member_repository/A917B04C/11A2F3DA2C2711F19BAFCA1D9C833773/DSL_1HBKVK6e2tG35aTgNT9F2hc.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DSL_1HBKVK6e2tG35aTgNT9F2hc.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 08:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B04C, serialNumber=0D22FFD4704A54AE9EDAD1B7E5A4E0353F45DA17
        Validity
            Not Before: Sep 21 08:10:06 2026 GMT
            Not After : Sep 28 08:10:06 2026 GMT
        Subject: CN=6ab0e65f-c4a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2c:84:6e:4f:aa:28:21:9f:45:3c:e0:44:2f:
                    d9:74:5c:78:e5:f3:21:35:11:92:c3:60:77:a6:0d:
                    f7:b6:8c:27:03:c9:2c:53:c3:69:67:b6:c9:c1:92:
                    ae:81:cb:23:8c:d0:a3:6e:af:be:74:9c:b2:e9:12:
                    ad:17:1b:1d:46:3b:a4:2b:67:89:b8:64:e7:48:a4:
                    b9:75:61:c2:5b:0f:86:29:1e:96:96:14:b4:9e:0a:
                    a6:5b:36:e3:a8:b9:fd:1a:b3:f8:c1:94:74:7a:7a:
                    87:5a:60:aa:ab:d6:ee:5a:d5:a1:1a:4a:fb:90:e1:
                    a7:c2:42:03:b2:12:71:53:13:89:99:c1:ef:de:5e:
                    61:50:19:74:ae:9b:a8:bd:48:bc:0f:93:46:0e:91:
                    ab:73:d4:07:01:a6:83:49:d8:cd:bd:94:15:1f:07:
                    f2:5d:62:56:b8:44:cc:12:fa:b9:3d:6a:61:c8:9a:
                    03:f3:59:35:d8:60:df:3c:1a:95:18:95:31:9b:8c:
                    c7:2e:de:60:12:2f:34:cf:3f:7f:ce:76:64:d0:67:
                    60:d9:ad:c5:0e:07:3d:f1:e8:a3:ec:54:e8:de:df:
                    6b:85:c2:a3:91:76:b4:f8:a6:1d:84:4e:d4:51:e3:
                    5b:ef:6b:84:cd:30:3d:25:bb:77:ab:2c:a1:22:b6:
                    81:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:2A:EE:5D:D4:DC:67:2E:B2:49:2C:73:D4:6C:1E:EF:CD:65:66:B7
            X509v3 Authority Key Identifier:
                keyid:0D:22:FF:D4:70:4A:54:AE:9E:DA:D1:B7:E5:A4:E0:35:3F:45:DA:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B04C/11A2F3DA2C2711F19BAFCA1D9C833773/DSL_1HBKVK6e2tG35aTgNT9F2hc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DSL_1HBKVK6e2tG35aTgNT9F2hc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B04C/11A2F3DA2C2711F19BAFCA1D9C833773/DSL_1HBKVK6e2tG35aTgNT9F2hc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:0d:0e:43:15:d4:8b:3f:35:1f:de:50:b2:92:52:3e:47:fc:
         f3:fa:bd:45:3b:b1:c2:0f:c6:d1:21:57:87:07:63:00:87:26:
         b2:e6:3c:7d:2f:86:8a:b0:b7:b5:1f:b7:26:f0:af:3b:70:34:
         08:63:4a:c9:91:0a:cf:49:1e:71:9d:87:bd:54:c4:a0:6c:4a:
         17:fd:a2:f3:6e:e1:7c:ea:74:b6:0d:8d:5f:80:0f:e1:e3:ea:
         2b:dd:00:6d:61:1b:7e:84:5a:e3:53:13:b9:e3:9a:a2:ba:07:
         de:88:99:a7:3d:0e:98:ee:d1:a4:02:fd:7f:72:3c:4f:96:e6:
         af:95:17:94:87:5a:77:73:ae:4a:c9:3b:ed:ee:fb:51:ed:ab:
         c3:9f:db:7c:59:8a:03:f0:f6:96:2e:1f:07:3a:fe:e6:11:32:
         c0:7a:70:42:a2:cf:b3:74:be:fa:79:9a:a3:07:6c:e0:23:fc:
         fc:89:26:4b:dd:3a:b8:11:1f:13:03:98:bc:85:46:98:a1:37:
         cb:35:4e:86:cd:c4:99:82:88:7e:e4:9e:05:bd:eb:6d:20:0a:
         7a:c8:c1:c7:19:a1:16:2d:92:98:59:9a:1a:5f:34:97:4f:ba:
         35:b8:cf:0e:20:da:d7:97:9f:a3:64:19:25:f4:5f:11:b7:d7:
         bf:5c:40:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:28:04 2026 by rpki-client