Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.mft
File:                     dOSCYGNYsugSWKrw2-THyWPYfhw.mft (raw, json)
Hash identifier:          ZdK549a4+vZ6r33Jot3I3ylFrm/w5uOK08U3aOZBlnA=
Subject key identifier:   D0:EC:EA:E8:3D:DA:44:AE:B1:75:EA:9A:08:D0:A9:50:CC:3B:92:85
Authority key identifier: 74:E4:82:60:63:58:B2:E8:12:58:AA:F0:DB:E4:C7:C9:63:D8:7E:1C
Certificate issuer:       /CN=A91D3633/serialNumber=74E482606358B2E81258AAF0DBE4C7C963D87E1C
Certificate serial:       1EB8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOSCYGNYsugSWKrw2-THyWPYfhw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.mft
Manifest number:          1E9C
Signing time:             Tue 22 Sep 2026 16:00:25 +0000
Manifest this update:     Tue 22 Sep 2026 16:00:25 +0000
Manifest next update:     Tue 29 Sep 2026 16:00:25 +0000
Files and hashes:         1: dOSCYGNYsugSWKrw2-THyWPYfhw.crl (hash: r9YRitOtyTmoVFl3fbMPRze23dIwdbxlbUqph1M1NwE=)
                          2: C47CF15486EF11F19E006003A7EE528E.roa (hash: RzDPG9QsjUOtGowh+MQ0k1kpFF4PUc3OuFrwrmQUeJ0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.crl
                          rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOSCYGNYsugSWKrw2-THyWPYfhw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 16:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7864 (0x1eb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D3633, serialNumber=74E482606358B2E81258AAF0DBE4C7C963D87E1C
        Validity
            Not Before: Sep 22 16:00:25 2026 GMT
            Not After : Sep 29 16:00:25 2026 GMT
        Subject: CN=6ab2a619-81be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:36:d2:32:52:13:ae:94:cd:94:73:77:e2:cc:
                    45:ea:01:71:af:14:d1:0a:4a:a2:51:1c:ec:8f:c1:
                    80:cb:d9:ad:67:03:a0:db:11:8a:7d:2c:a3:62:1e:
                    95:45:62:0f:d4:39:22:47:90:25:86:2e:96:17:61:
                    11:4e:10:d7:f5:32:4f:50:61:27:26:de:ee:f3:6e:
                    15:76:83:09:2a:fb:64:6e:d9:54:8e:44:02:5b:72:
                    05:4f:54:df:ed:73:55:13:d4:f3:46:5a:e5:e6:1a:
                    7a:cc:02:25:e9:aa:21:6b:99:46:8c:81:b3:d5:77:
                    19:97:cf:f9:2e:26:19:77:7f:c4:36:3f:87:4d:6f:
                    f3:a2:21:c3:66:47:00:b6:7e:35:2f:fb:79:02:00:
                    c0:c9:1c:25:bd:75:d6:e7:3a:52:8d:df:6e:81:76:
                    4d:0c:68:36:fb:ac:be:0c:4a:91:ff:7a:2f:cf:5f:
                    84:fa:c1:0f:9b:44:4c:14:da:a8:8d:eb:c3:1b:5e:
                    07:f0:37:4e:b5:1f:2c:dc:2c:7c:ee:5d:92:b6:69:
                    36:b5:54:70:c5:65:25:81:18:2b:82:3b:01:4a:30:
                    a7:42:d0:92:2d:07:eb:94:12:cb:b2:e5:14:16:bc:
                    c8:2b:06:b4:49:30:f5:36:9e:26:89:b4:bf:13:5b:
                    40:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:EC:EA:E8:3D:DA:44:AE:B1:75:EA:9A:08:D0:A9:50:CC:3B:92:85
            X509v3 Authority Key Identifier:
                keyid:74:E4:82:60:63:58:B2:E8:12:58:AA:F0:DB:E4:C7:C9:63:D8:7E:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOSCYGNYsugSWKrw2-THyWPYfhw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:d5:ba:cd:31:03:ca:d9:83:53:1c:c4:0a:f1:7c:85:36:c5:
         e8:0a:7e:c2:47:40:c3:73:fc:32:ab:6c:e4:f7:6b:a5:a4:38:
         d8:49:c2:27:09:e0:4b:5a:87:26:ee:46:4e:19:c4:c2:bb:ea:
         3f:ef:14:95:6a:ef:24:3f:ec:ee:82:88:ba:c0:57:64:57:64:
         03:ed:5e:3e:52:f3:41:dc:98:c6:13:fa:cb:81:2f:61:0b:55:
         52:f6:4b:fd:7f:5f:45:d7:be:cc:8d:34:10:53:bf:40:fd:9b:
         dd:1a:d6:87:dd:f6:01:82:87:21:58:7f:45:dd:b1:11:36:e8:
         bb:00:1d:71:d9:68:4d:c4:51:50:07:a3:95:4b:cb:61:84:99:
         3e:ed:35:c3:42:d4:73:d9:06:ff:5b:75:dc:c3:02:62:49:b0:
         06:ea:09:a7:fc:75:45:25:4b:d2:e7:09:44:2b:39:0c:c9:83:
         c1:ee:01:3e:5e:82:99:d2:0e:09:7e:40:d2:59:c7:df:a4:5c:
         bc:3e:cc:cf:6f:50:57:1c:2c:76:c6:99:3b:29:c2:33:e5:1f:
         06:19:41:03:5f:64:57:84:8d:dd:42:4b:3d:f8:2a:31:04:62:
         11:fd:b6:cb:f1:bf:38:49:2d:69:31:58:36:83:e0:72:48:69:
         7a:f3:0c:a3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHrgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDM2MzMxMTAvBgNVBAUTKDc0RTQ4MjYwNjM1OEIyRTgxMjU4QUFGMERCRTRDN0M5
NjNEODdFMUMwHhcNMjYwOTIyMTYwMDI1WhcNMjYwOTI5MTYwMDI1WjAYMRYwFAYD
VQQDEw02YWIyYTYxOS04MWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2zbSMlITrpTNlHN34sxF6gFxrxTRCkqiURzsj8GAy9mtZwOg2xGKfSyjYh6V
RWIP1DkiR5Alhi6WF2ERThDX9TJPUGEnJt7u824VdoMJKvtkbtlUjkQCW3IFT1Tf
7XNVE9TzRlrl5hp6zAIl6aoha5lGjIGz1XcZl8/5LiYZd3/ENj+HTW/zoiHDZkcA
tn41L/t5AgDAyRwlvXXW5zpSjd9ugXZNDGg2+6y+DEqR/3ovz1+E+sEPm0RMFNqo
jevDG14H8DdOtR8s3Cx87l2Stmk2tVRwxWUlgRgrgjsBSjCnQtCSLQfrlBLLsuUU
FrzIKwa0STD1Np4mibS/E1tAvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNDs6ug9
2kSusXXqmgjQqVDMO5KFMB8GA1UdIwQYMBaAFHTkgmBjWLLoEliq8Nvkx8lj2H4c
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzYzMy82MjkwOUYzOEEy
NDExMUU2QkNBOEQwNzhDNEY5QUUwMi9kT1NDWUdOWXN1Z1NXS3J3Mi1USHlXUFlm
aHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RPU0NZR05Zc3VnU1dLcncyLVRIeVdQWWZody5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MzYzMy82MjkwOUYzOEEyNDExMUU2QkNBOEQwNzhDNEY5QUUwMi9kT1NDWUdOWXN1
Z1NXS3J3Mi1USHlXUFlmaHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcNW6zTEDytmDUxzECvF8hTbF6Ap+wkdAw3P8Mqts5PdrpaQ42EnCJwngS1qH
Ju5GThnEwrvqP+8UlWrvJD/s7oKIusBXZFdkA+1ePlLzQdyYxhP6y4EvYQtVUvZL
/X9fRde+zI00EFO/QP2b3RrWh932AYKHIVh/Rd2xETbouwAdcdloTcRRUAejlUvL
YYSZPu01w0LUc9kG/1t13MMCYkmwBuoJp/x1RSVL0ucJRCs5DMmDwe4BPl6CmdIO
CX5A0lnH36RcvD7Mz29QVxwsdsaZOynCM+UfBhlBA19kV4SN3UJLPfgqMQRiEf22
y/G/OEktaTFYNoPgckhpevMMow==
-----END CERTIFICATE-----
Generated at Wed Sep 23 02:57:54 2026 by rpki-client