Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91968B6/9439B9AEFB2711F093045E073B6F56BC/dDFnWL6MokPEalI5oF7P8EkIOTc.mft
File:                     dDFnWL6MokPEalI5oF7P8EkIOTc.mft (raw, json)
Hash identifier:          INRsNIZ8L/9S1x81eAMhjV/Q2fTB1/jbP71NLzFYOd0=
Subject key identifier:   86:37:B5:EA:F9:1F:DA:05:67:03:E4:26:33:99:D3:A7:F0:97:E6:6B
Authority key identifier: 74:31:67:58:BE:8C:A2:43:C4:6A:52:39:A0:5E:CF:F0:49:08:39:37
Certificate issuer:       /CN=A91968B6/serialNumber=74316758BE8CA243C46A5239A05ECFF049083937
Certificate serial:       81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dDFnWL6MokPEalI5oF7P8EkIOTc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91968B6/9439B9AEFB2711F093045E073B6F56BC/dDFnWL6MokPEalI5oF7P8EkIOTc.mft
Manifest number:          81
Signing time:             Fri 25 Sep 2026 07:49:56 +0000
Manifest this update:     Fri 25 Sep 2026 07:49:56 +0000
Manifest next update:     Fri 02 Oct 2026 07:49:56 +0000
Files and hashes:         1: dDFnWL6MokPEalI5oF7P8EkIOTc.crl (hash: lqxiq8x9E+eRqRUE5LX01GBD6zdwx4kur5b9R2RENQM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91968B6/9439B9AEFB2711F093045E073B6F56BC/dDFnWL6MokPEalI5oF7P8EkIOTc.crl
                          rsync://rpki.apnic.net/member_repository/A91968B6/9439B9AEFB2711F093045E073B6F56BC/dDFnWL6MokPEalI5oF7P8EkIOTc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dDFnWL6MokPEalI5oF7P8EkIOTc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 07:49:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129 (0x81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91968B6, serialNumber=74316758BE8CA243C46A5239A05ECFF049083937
        Validity
            Not Before: Sep 25 07:49:56 2026 GMT
            Not After : Oct  2 07:49:56 2026 GMT
        Subject: CN=6ab627a4-18b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f1:da:70:44:55:68:91:f4:fd:6b:ab:60:a9:
                    17:12:3b:62:24:8e:cc:5f:62:e1:a5:22:31:39:e7:
                    aa:50:39:cb:e6:75:f6:3e:4e:92:95:ce:9e:09:64:
                    93:b4:ad:95:f9:8a:16:c6:8a:a2:db:12:e9:1b:20:
                    e9:e2:9d:7a:ac:f8:08:2b:cd:a3:74:14:6f:2b:25:
                    39:ae:e1:4c:e6:2c:74:06:e2:4c:e4:88:f5:b2:5d:
                    8b:93:a2:cb:b0:fa:7c:d1:71:f8:a7:77:f3:99:52:
                    b2:42:5a:18:a7:be:0c:f7:23:d9:10:56:7b:54:49:
                    5b:5b:bd:e3:36:45:72:9f:ff:17:5f:2a:0f:3b:af:
                    3e:c3:18:ec:3d:f5:46:8e:de:b1:ba:2f:30:5c:e7:
                    74:b2:cd:3c:7b:d2:3c:7c:90:f9:14:6c:8c:74:26:
                    f2:4b:5c:70:12:37:8d:cc:45:86:6a:4d:1a:54:59:
                    de:ea:43:d4:db:30:8b:53:16:a3:c3:18:3b:ab:09:
                    f5:33:56:0b:b7:32:38:7b:9f:40:22:7a:58:b2:71:
                    ce:92:1e:1a:41:0e:92:33:63:0e:e9:28:42:df:17:
                    51:8c:da:61:b4:d8:54:3d:94:aa:1c:2f:d4:73:3c:
                    b6:bc:3b:55:c9:a0:f2:35:61:ee:f0:fb:31:0f:5c:
                    dd:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:37:B5:EA:F9:1F:DA:05:67:03:E4:26:33:99:D3:A7:F0:97:E6:6B
            X509v3 Authority Key Identifier:
                keyid:74:31:67:58:BE:8C:A2:43:C4:6A:52:39:A0:5E:CF:F0:49:08:39:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91968B6/9439B9AEFB2711F093045E073B6F56BC/dDFnWL6MokPEalI5oF7P8EkIOTc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dDFnWL6MokPEalI5oF7P8EkIOTc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91968B6/9439B9AEFB2711F093045E073B6F56BC/dDFnWL6MokPEalI5oF7P8EkIOTc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:88:9b:02:b0:7d:fc:07:af:59:be:bc:70:02:b1:32:96:54:
         a1:6f:5a:46:15:08:4e:b0:db:fa:46:36:e4:b0:75:4d:e3:ef:
         64:75:c4:c8:24:43:39:41:be:78:77:7c:0d:d6:bd:2b:65:2f:
         54:a9:52:32:72:88:c9:38:d8:52:8f:ab:bd:95:8b:0f:fe:d5:
         26:0f:75:a5:92:ca:78:17:91:3e:2e:97:71:00:cb:30:c5:a6:
         e2:bc:df:f8:72:82:5a:3d:14:69:6f:29:c0:30:18:aa:d8:2e:
         fc:1b:b8:ed:07:b5:f2:f3:ae:fe:4d:0b:51:39:e8:7e:0b:5a:
         5e:01:6c:3d:40:73:6d:34:4e:a6:e2:cc:1d:06:6a:24:be:48:
         42:55:4f:77:47:34:27:2f:a7:80:54:a1:14:0d:33:40:5f:33:
         90:72:8a:71:be:b5:fa:66:4c:97:a6:8f:ad:7b:c4:d5:eb:09:
         1a:6d:79:59:1c:2a:13:6f:0e:b2:ed:18:7e:ff:2e:89:39:ef:
         63:92:62:65:a3:29:39:f8:09:69:e6:f7:2d:c7:0d:b3:f1:58:
         25:c8:7f:c0:3c:1f:44:1c:57:22:ad:60:22:75:77:33:35:98:
         f4:f0:df:1f:67:cd:46:8c:ea:95:39:c1:fe:0b:69:4a:7c:c2:
         79:65:24:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:05:26 2026 by rpki-client