Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft
File:                     DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft (raw, json)
Hash identifier:          uJed5ps8V/LymsWW21L5RixuScqUXFS0sjpEHR0r6AI=
Subject key identifier:   D5:C1:75:D3:AA:B0:28:7D:BF:BD:F2:4D:C1:55:A6:EA:D0:7C:D4:7D
Authority key identifier: 0C:DD:50:58:32:EA:8C:9A:4D:23:B1:06:37:20:1D:79:42:95:64:C0
Certificate issuer:       /CN=A91AA96A/serialNumber=0CDD505832EA8C9A4D23B10637201D79429564C0
Certificate serial:       01A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft
Manifest number:          0195
Signing time:             Sun 11 Oct 2026 05:05:01 +0000
Manifest this update:     Sun 11 Oct 2026 05:05:00 +0000
Manifest next update:     Sun 18 Oct 2026 05:05:00 +0000
Files and hashes:         1: DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl (hash: zJ+ECswayFWr+owA7g5UrrRJAd+dusYOVsvMrCWkJxQ=)
                          2: 6E7D3C16816811EF99DD7787C4F9AE02.roa (hash: tMsqu6nSNXbRdgdOGNgxf6SRIE8d03QJp/vSSHoCY4U=)
                          3: 2AF8794E3D6C11F19105CB6FB0833773.roa (hash: OB3qLBEa2BUII86QczWvPAVNyrYJB13iZcC7pu2bBbg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl
                          rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 05:05:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 417 (0x1a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AA96A, serialNumber=0CDD505832EA8C9A4D23B10637201D79429564C0
        Validity
            Not Before: Oct 11 05:05:00 2026 GMT
            Not After : Oct 18 05:05:00 2026 GMT
        Subject: CN=6acb18fd-2620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:64:8c:f7:c7:67:0a:2c:53:19:cc:ae:e5:95:
                    4d:16:8b:03:6a:6f:c4:e7:e6:c0:de:ef:78:7b:4c:
                    5c:6a:4d:49:05:d0:08:48:60:49:f2:e2:06:c7:de:
                    21:f4:ad:60:b0:b4:39:93:2b:f8:e1:7b:8d:14:5d:
                    8f:23:bd:22:e1:47:23:2c:20:0b:b8:94:3d:71:2e:
                    e9:02:b5:0d:62:48:d3:53:49:cc:b5:47:45:b8:05:
                    3d:08:b5:69:92:fb:cb:8c:75:c9:e2:f5:63:7a:31:
                    1f:83:97:d6:66:14:20:26:41:f1:ed:02:75:b7:f0:
                    89:7f:08:7a:8e:39:89:50:21:3d:52:f2:2a:36:86:
                    cc:2e:76:bd:97:75:86:e2:05:d8:8b:a7:d6:07:db:
                    24:50:42:c2:79:45:3b:c9:9b:77:b0:88:36:b2:3a:
                    76:8b:b5:fd:aa:2c:b4:85:bd:27:70:d9:f8:da:89:
                    4a:5d:86:28:21:eb:6b:ca:e6:74:65:c9:74:98:6e:
                    c5:07:45:be:df:48:da:6c:f0:58:e7:b4:44:12:30:
                    c2:4c:43:42:90:44:c0:c3:67:22:e9:73:70:b8:ab:
                    61:ec:65:33:02:96:17:cf:b9:26:ee:53:77:18:aa:
                    31:b8:54:84:03:90:c3:ad:35:c2:f8:b0:e9:bd:e5:
                    f7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:C1:75:D3:AA:B0:28:7D:BF:BD:F2:4D:C1:55:A6:EA:D0:7C:D4:7D
            X509v3 Authority Key Identifier:
                keyid:0C:DD:50:58:32:EA:8C:9A:4D:23:B1:06:37:20:1D:79:42:95:64:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:d9:25:c8:ad:13:2c:d7:d7:d2:aa:09:b8:e4:66:54:78:bf:
         ec:cc:fc:b3:98:57:01:4d:b9:ab:99:ff:18:38:b8:98:75:45:
         c8:cf:56:d4:39:bf:ac:af:37:94:32:de:6a:e4:2a:3e:93:11:
         4e:69:31:89:d0:a8:a4:8e:b6:57:3b:c8:a1:c2:ad:52:52:f5:
         ae:54:62:ed:bb:8b:76:41:8b:cf:e4:55:54:e7:a2:6f:ca:6f:
         fe:54:4b:5c:dd:6d:9d:74:cf:b0:16:ee:70:24:f2:8e:d8:fa:
         a2:24:48:f8:89:ff:3a:9d:22:2e:39:b7:0f:a3:69:a9:f8:82:
         92:12:da:11:be:d6:c0:95:3c:37:af:c5:c6:54:ec:18:fa:e6:
         6f:37:21:76:a3:07:4f:3d:11:99:9c:ff:9c:e6:16:b7:c8:ab:
         47:77:43:26:6b:f4:ec:68:44:b7:c3:75:87:62:03:f4:9b:73:
         ae:a1:9f:89:53:43:ce:91:c1:2e:78:82:67:8e:b9:f4:8c:69:
         b1:1e:06:27:56:4c:27:3f:96:3e:bb:46:2e:31:36:dc:13:8b:
         03:13:5c:e7:20:46:f2:15:de:70:6e:52:89:ad:3a:49:7b:d9:
         05:75:26:cc:59:e4:00:54:97:5c:d5:08:a1:b9:23:24:a8:9c:
         aa:53:a8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:59:42 2026 by rpki-client