Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft
File:                     DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft (raw, json)
Hash identifier:          LBSEn8gAnwP4iV2VlGDmA4+4AWGy7TA9vpfvEL/CoZ8=
Subject key identifier:   F9:52:D6:65:2B:76:02:5C:93:97:D6:AC:97:9A:59:2B:D2:73:5A:3C
Authority key identifier: 0C:CA:B9:44:7A:17:AC:3C:8A:78:7B:E9:47:EC:5D:6F:4A:89:5C:E9
Certificate issuer:       /CN=A91A6EA0/serialNumber=0CCAB9447A17AC3C8A787BE947EC5D6F4A895CE9
Certificate serial:       02CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft
Manifest number:          02C3
Signing time:             Fri 09 Oct 2026 01:46:39 +0000
Manifest this update:     Fri 09 Oct 2026 01:46:38 +0000
Manifest next update:     Fri 16 Oct 2026 01:46:38 +0000
Files and hashes:         1: DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl (hash: M4qcMB4mV4sD1ot1Hmx6xQ+T4z9R5PaBvKi/QILbdrU=)
                          2: 35CFAB068C4111ED8E01DF60C4F9AE02.roa (hash: 0qYn7E3SIHbzT9yJTx6pS9lXwvNIUC0KNk60lEWDjkU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl
                          rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 01:46:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 715 (0x2cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6EA0, serialNumber=0CCAB9447A17AC3C8A787BE947EC5D6F4A895CE9
        Validity
            Not Before: Oct  9 01:46:38 2026 GMT
            Not After : Oct 16 01:46:38 2026 GMT
        Subject: CN=6ac8477e-4f9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:50:f9:a8:8a:d1:b1:c6:a9:b9:4b:84:0a:7f:
                    63:09:d1:8d:4f:cf:15:4f:8b:9a:8e:bb:95:57:81:
                    e5:4c:41:56:74:17:44:ca:77:87:6c:4e:63:31:4c:
                    e1:40:d8:43:1e:39:a9:f8:78:dc:24:0a:dd:d3:94:
                    95:37:e9:6e:11:47:1b:11:fa:fc:f6:d1:3f:a3:9a:
                    bf:0a:db:9d:c9:5e:3e:12:41:3b:1e:fa:3f:6d:15:
                    5c:f5:67:c4:73:7d:e1:7d:23:ee:92:aa:9f:c9:c2:
                    0d:b2:45:1b:5e:5c:af:a2:98:fa:87:40:fe:17:37:
                    da:8b:8d:cd:11:a2:a2:eb:2d:86:2d:9b:78:3e:39:
                    41:c7:ba:5a:8d:af:b6:f2:c6:2f:c9:d7:29:c5:53:
                    d4:80:01:ae:ac:ff:a6:f3:7e:2f:78:30:df:14:a4:
                    36:44:88:da:39:f3:f6:c1:f5:cf:8a:75:9f:54:88:
                    cd:77:ef:44:7c:8b:01:2e:33:ff:1b:f0:6e:ed:34:
                    77:97:b1:05:17:fe:99:c5:67:5a:5c:60:58:b6:6e:
                    c5:76:18:5c:e4:ef:9e:04:c2:cb:12:11:69:b5:bb:
                    79:37:37:dc:52:18:ac:22:4a:be:c2:fe:45:44:f7:
                    4e:73:2a:d3:2c:63:96:17:cb:85:a4:31:9e:e3:16:
                    69:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:52:D6:65:2B:76:02:5C:93:97:D6:AC:97:9A:59:2B:D2:73:5A:3C
            X509v3 Authority Key Identifier:
                keyid:0C:CA:B9:44:7A:17:AC:3C:8A:78:7B:E9:47:EC:5D:6F:4A:89:5C:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:1d:05:04:c0:ee:13:29:91:da:43:7a:d1:7b:25:0e:eb:f8:
         85:cf:8f:87:0e:0e:e7:4d:7b:aa:85:d7:50:69:64:c4:fb:d2:
         b8:e0:7c:e6:b8:7b:3d:0a:dd:56:0f:81:b8:22:67:cb:43:1e:
         fe:8a:72:23:76:6b:4e:6e:6d:8f:61:5e:94:d7:7a:f0:91:a0:
         5e:2d:35:87:19:4a:be:4d:f9:73:da:66:f4:78:dd:25:48:5a:
         4e:17:17:bf:b3:f2:bc:22:9a:ef:10:70:71:da:62:80:76:ab:
         5b:23:4d:da:98:3b:f1:50:e5:96:cf:f4:1f:3f:e1:42:74:c2:
         d0:0d:26:20:93:50:ba:ee:bc:e9:9c:8c:3b:da:bf:f6:9a:0c:
         83:40:69:55:3a:7f:ed:40:40:98:89:1a:5c:4f:a7:76:33:0c:
         f7:9b:ef:02:aa:f1:21:68:51:a2:91:3f:05:b2:f8:4d:bc:2d:
         f8:8d:42:f4:b0:a0:9d:4e:70:ce:6f:2e:57:a2:8f:b6:3d:79:
         48:ea:f5:67:fa:f9:6f:e0:a9:82:59:88:4f:e2:45:42:a9:dd:
         6c:66:ac:19:88:94:5f:0c:ad:be:e7:ab:b2:21:ec:68:ef:f2:
         99:53:82:65:96:0f:16:f5:10:b9:77:75:04:46:37:b4:97:b2:
         bc:06:de:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:49:48 2026 by rpki-client