Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A2FF9/80F6C1AA42DC11F1A82C4355CB833773/4t6aQTS6L8Qq1Kk8OimO02G_DPE.mft
File:                     4t6aQTS6L8Qq1Kk8OimO02G_DPE.mft (raw, json)
Hash identifier:          x1+zWTDqK6WLlsdDWE1knW3Y2UE1jENPDuWJuYxVDQ4=
Subject key identifier:   DF:3A:05:18:0D:2B:BD:FF:6A:BD:6E:48:BC:76:F4:07:BB:75:28:07
Authority key identifier: E2:DE:9A:41:34:BA:2F:C4:2A:D4:A9:3C:3A:29:8E:D3:61:BF:0C:F1
Certificate issuer:       /CN=A91A2FF9/serialNumber=E2DE9A4134BA2FC42AD4A93C3A298ED361BF0CF1
Certificate serial:       4E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4t6aQTS6L8Qq1Kk8OimO02G_DPE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2FF9/80F6C1AA42DC11F1A82C4355CB833773/4t6aQTS6L8Qq1Kk8OimO02G_DPE.mft
Manifest number:          4D
Signing time:             Fri 25 Sep 2026 08:26:31 +0000
Manifest this update:     Fri 25 Sep 2026 08:26:31 +0000
Manifest next update:     Fri 02 Oct 2026 08:26:31 +0000
Files and hashes:         1: 4t6aQTS6L8Qq1Kk8OimO02G_DPE.crl (hash: OpYI5FurFujcyxmYo1t84rg+52XAE2UbwHJMUue+DDQ=)
                          2: D898F57242DC11F1862EFB92CB833773.roa (hash: NhBu2Z3OF4VzcUnX2RhgJnVsv8Gh1MRdgOtdbwjJcZw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2FF9/80F6C1AA42DC11F1A82C4355CB833773/4t6aQTS6L8Qq1Kk8OimO02G_DPE.crl
                          rsync://rpki.apnic.net/member_repository/A91A2FF9/80F6C1AA42DC11F1A82C4355CB833773/4t6aQTS6L8Qq1Kk8OimO02G_DPE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4t6aQTS6L8Qq1Kk8OimO02G_DPE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 08:26:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2FF9, serialNumber=E2DE9A4134BA2FC42AD4A93C3A298ED361BF0CF1
        Validity
            Not Before: Sep 25 08:26:31 2026 GMT
            Not After : Oct  2 08:26:31 2026 GMT
        Subject: CN=6ab63037-29f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:54:2c:34:64:6a:fe:7b:5d:5f:e5:36:ff:2d:
                    41:ae:c8:d0:a3:21:97:40:1a:1d:a7:22:81:c3:10:
                    ef:d8:ad:41:e4:c1:f9:91:cc:ae:cd:a7:5c:20:68:
                    34:8c:ff:1e:59:79:65:1a:46:f7:61:3a:6b:82:cc:
                    9b:4e:83:83:3a:dc:b7:6f:09:e0:36:84:b9:66:61:
                    6b:ca:64:78:3f:fc:bc:5f:0d:e0:9a:00:8b:2c:40:
                    87:f5:d9:a7:f3:be:1c:5e:3c:59:8e:25:9d:df:18:
                    e7:86:3c:7b:05:f1:5b:6c:69:97:ca:6c:7c:cf:ac:
                    70:11:7b:4e:c0:33:fd:95:81:23:1d:7c:67:01:87:
                    c0:6a:14:ca:43:6f:ea:64:b8:22:59:63:6e:0c:1d:
                    79:2a:1b:bb:b1:08:3d:97:ea:d5:0a:e1:e0:94:ab:
                    03:73:2c:97:8b:02:8d:83:3f:45:d2:b9:5b:c2:e1:
                    59:b2:e5:61:ce:a3:7c:19:99:9b:43:7b:7a:b7:07:
                    1c:b8:ab:dc:f8:2f:43:89:70:a6:b0:72:37:45:c2:
                    f3:79:7d:1f:b8:49:82:9d:ac:8a:ff:53:7d:f4:6e:
                    07:52:45:2e:01:31:d1:39:d8:13:9e:ef:df:37:e3:
                    28:e2:17:0e:a7:a6:58:fb:77:13:38:b4:e9:91:b2:
                    13:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:3A:05:18:0D:2B:BD:FF:6A:BD:6E:48:BC:76:F4:07:BB:75:28:07
            X509v3 Authority Key Identifier:
                keyid:E2:DE:9A:41:34:BA:2F:C4:2A:D4:A9:3C:3A:29:8E:D3:61:BF:0C:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2FF9/80F6C1AA42DC11F1A82C4355CB833773/4t6aQTS6L8Qq1Kk8OimO02G_DPE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4t6aQTS6L8Qq1Kk8OimO02G_DPE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2FF9/80F6C1AA42DC11F1A82C4355CB833773/4t6aQTS6L8Qq1Kk8OimO02G_DPE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:3f:7b:d3:94:57:aa:f4:d7:a5:a7:4f:f3:19:dd:3c:77:7d:
         74:5f:71:22:b6:89:13:df:15:21:c9:ff:53:01:69:b6:28:4d:
         5e:e8:68:16:4d:0f:87:38:3f:f0:2e:9e:f9:95:a5:04:fb:7a:
         0b:63:05:4f:ae:0b:48:e6:1a:84:e4:b9:57:ef:d9:6b:42:a9:
         9b:8b:f1:88:3c:d5:9d:df:9b:18:4a:9c:15:cc:59:d1:6b:ce:
         ed:87:cd:0a:d8:a3:ea:06:ea:23:19:f9:b4:70:f5:e9:7e:75:
         12:85:b8:76:a9:b3:7d:90:de:e7:21:fe:93:84:69:ac:2b:21:
         01:6a:06:ec:c0:56:63:6a:76:95:71:8b:62:50:6f:08:16:5f:
         6b:7a:00:c0:b6:0c:78:13:e0:91:ef:6c:e1:07:5f:e1:8c:9b:
         c3:e3:15:99:3d:93:9b:74:5f:8c:f6:f0:eb:7a:30:ae:ea:cf:
         cb:23:60:24:5b:6a:e0:5e:f1:8a:28:2b:46:c0:9a:9a:5b:df:
         88:25:7d:86:d9:ac:c5:ff:24:30:63:74:aa:5b:f9:57:a0:41:
         4f:2e:4e:42:e3:ca:f6:a8:77:2b:22:98:86:65:f7:c0:a3:5f:
         fd:da:ea:75:a0:39:29:3b:0a:fb:2c:e5:b8:57:d4:26:fc:b8:
         5f:9f:52:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:15:54 2026 by rpki-client