Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.mft
File:                     DlgFGyS9WtsbzJ844tPnN0to23w.mft (raw, json)
Hash identifier:          WFDndG2OvbOi4/yaPjqbHn9oa7nCnV3j336hO4ZrHtY=
Subject key identifier:   7A:3F:E7:4D:8A:D9:1E:06:7A:54:29:9B:7D:4E:28:20:9A:DC:EB:7D
Authority key identifier: 0E:58:05:1B:24:BD:5A:DB:1B:CC:9F:38:E2:D3:E7:37:4B:68:DB:7C
Certificate issuer:       /CN=A91847B9/serialNumber=0E58051B24BD5ADB1BCC9F38E2D3E7374B68DB7C
Certificate serial:       02CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlgFGyS9WtsbzJ844tPnN0to23w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.mft
Manifest number:          02BE
Signing time:             Tue 13 Oct 2026 01:53:22 +0000
Manifest this update:     Tue 13 Oct 2026 01:53:21 +0000
Manifest next update:     Tue 20 Oct 2026 01:53:21 +0000
Files and hashes:         1: DlgFGyS9WtsbzJ844tPnN0to23w.crl (hash: eZXIEhj5ZgpE25Zepb95miz5JZq+kbrAtsdfnmiyyl4=)
                          2: B08DD41EE73E11EDB9372A29C4F9AE02.roa (hash: FUMsjEWis+cH0kT2vFlCLJiFdNfEQlwzcUFGIGoDoIU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.crl
                          rsync://rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlgFGyS9WtsbzJ844tPnN0to23w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 01:53:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 714 (0x2ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91847B9, serialNumber=0E58051B24BD5ADB1BCC9F38E2D3E7374B68DB7C
        Validity
            Not Before: Oct 13 01:53:21 2026 GMT
            Not After : Oct 20 01:53:21 2026 GMT
        Subject: CN=6acd8f12-4d2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:56:45:55:af:a7:86:f3:77:40:f3:ba:e9:4e:
                    be:b2:fe:0a:62:72:58:58:2c:9a:93:dc:27:0e:f5:
                    84:f5:24:71:4e:97:36:85:a0:42:9e:bf:c9:2c:ee:
                    e3:04:d4:40:80:f8:d3:51:68:13:3f:28:b8:55:dc:
                    49:26:6f:05:8e:11:ac:93:74:87:f4:bd:21:60:9e:
                    c0:c7:cd:1d:71:86:39:32:da:9d:46:9a:b2:16:f7:
                    e3:a5:6d:ed:d6:b8:87:67:cb:5f:c4:1e:cc:db:8f:
                    8f:7d:f1:1f:b6:9b:82:d5:7d:e6:9c:70:fe:a2:ed:
                    b7:6e:93:79:db:8b:6f:83:f6:ae:72:d2:09:26:3b:
                    3f:58:31:99:3c:ce:0a:e4:2e:ce:18:c3:48:4c:1b:
                    90:ac:29:15:f6:9d:64:62:14:78:e7:7a:3f:db:6c:
                    49:4a:1d:6b:2a:e3:7a:43:8d:e8:56:5a:d0:0b:4f:
                    db:ac:ca:25:a4:c9:44:5e:34:9a:99:89:fe:0a:96:
                    ed:af:32:c2:43:e2:00:a2:38:87:ca:61:34:c9:90:
                    ee:67:22:8c:ef:61:6c:c0:18:f2:92:31:5f:cd:80:
                    77:c7:c1:8c:cd:cd:cb:79:68:ca:60:c5:84:e7:b3:
                    4b:73:04:ba:5c:e0:1b:d0:2c:3c:d8:9c:41:08:e5:
                    c7:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:3F:E7:4D:8A:D9:1E:06:7A:54:29:9B:7D:4E:28:20:9A:DC:EB:7D
            X509v3 Authority Key Identifier:
                keyid:0E:58:05:1B:24:BD:5A:DB:1B:CC:9F:38:E2:D3:E7:37:4B:68:DB:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlgFGyS9WtsbzJ844tPnN0to23w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:a6:4a:17:12:bc:47:77:53:48:d4:7d:f0:83:65:ef:bd:63:
         39:3e:e2:18:15:cc:20:ae:58:d2:52:07:d5:36:41:c2:43:be:
         00:8d:8a:d5:5f:2d:19:fd:21:9f:9f:3f:4d:d9:d7:c6:5a:dd:
         86:89:a0:5a:75:27:3b:10:af:db:0b:83:d5:e1:ac:d8:12:cf:
         bb:3a:fd:76:5e:6a:d9:b4:db:e3:a3:3a:fd:73:cc:8a:bb:29:
         46:b9:5f:11:fc:40:de:07:ee:2f:bd:d1:4b:3c:01:a6:cc:27:
         07:98:25:e0:e5:36:a2:e7:94:f8:e6:b4:90:ea:a3:82:9d:4e:
         8f:3f:4d:36:cd:f1:48:7f:6e:ba:ee:7b:cf:8f:34:3e:48:75:
         79:89:f7:c6:8d:fc:91:2e:c5:15:d2:50:f3:39:63:9f:2c:c8:
         f7:db:50:40:92:af:74:b7:45:c3:56:54:24:30:31:50:3a:3a:
         f6:94:91:c3:f9:47:c8:21:c0:0f:70:87:ea:80:3e:15:cc:35:
         49:64:54:dd:71:62:fe:b8:b5:d9:12:72:2f:6d:56:32:fb:c3:
         4d:6d:c9:a0:8c:4e:0d:58:76:7e:f4:be:84:17:19:fa:4b:48:
         18:f6:39:81:a9:76:23:97:6e:1f:c9:7d:95:ea:ac:a2:a0:b2:
         fb:45:44:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 14:25:25 2026 by rpki-client