Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D7B93/E6B912C4A5D111F1A2E8764E3411F970/dp5BfpwYtVbAVK2cANsDne-LgmQ.mft
File:                     dp5BfpwYtVbAVK2cANsDne-LgmQ.mft (raw, json)
Hash identifier:          WKlV/hjOLFxCRpf2cLkXWcKPwMjs5RnqCOHwvYggmcI=
Subject key identifier:   3E:CE:90:5D:38:EC:2B:8B:EE:42:52:8E:D8:D2:BE:8B:39:DB:84:CF
Authority key identifier: 76:9E:41:7E:9C:18:B5:56:C0:54:AD:9C:00:DB:03:9D:EF:8B:82:64
Certificate issuer:       /CN=A91D7B93/serialNumber=769E417E9C18B556C054AD9C00DB039DEF8B8264
Certificate serial:       0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dp5BfpwYtVbAVK2cANsDne-LgmQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D7B93/E6B912C4A5D111F1A2E8764E3411F970/dp5BfpwYtVbAVK2cANsDne-LgmQ.mft
Manifest number:          0C
Signing time:             Mon 21 Sep 2026 09:08:04 +0000
Manifest this update:     Mon 21 Sep 2026 09:08:03 +0000
Manifest next update:     Mon 28 Sep 2026 09:08:03 +0000
Files and hashes:         1: dp5BfpwYtVbAVK2cANsDne-LgmQ.crl (hash: WBysZRxgFMYCy+tWU+swBFZhNA3PB3FbA2iU9vbsuIc=)
                          2: 9B9231EAA5D611F1A425A8EE3511F970.roa (hash: DdRr2cpwN1Z60kmM3n3zX6qDz037pRRi3PajRxVZO2k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D7B93/E6B912C4A5D111F1A2E8764E3411F970/dp5BfpwYtVbAVK2cANsDne-LgmQ.crl
                          rsync://rpki.apnic.net/member_repository/A91D7B93/E6B912C4A5D111F1A2E8764E3411F970/dp5BfpwYtVbAVK2cANsDne-LgmQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dp5BfpwYtVbAVK2cANsDne-LgmQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 09:08:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D7B93, serialNumber=769E417E9C18B556C054AD9C00DB039DEF8B8264
        Validity
            Not Before: Sep 21 09:08:03 2026 GMT
            Not After : Sep 28 09:08:03 2026 GMT
        Subject: CN=6ab0f3f3-6d28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b0:16:88:0a:e2:4d:9d:c1:12:21:26:3e:75:
                    8c:44:f7:99:0f:7b:95:1c:63:59:0d:9b:6b:d8:4a:
                    7f:24:46:92:52:83:e9:23:c4:f5:6b:5c:f7:e6:44:
                    72:c5:fe:87:a4:3e:34:c6:5a:95:94:3e:61:4e:b3:
                    97:b0:90:7e:76:ba:dd:36:cb:89:65:bc:7c:83:0f:
                    2b:df:45:46:76:e4:60:cb:1d:45:e1:7f:c2:c3:64:
                    b6:00:00:86:69:52:fe:20:c3:8e:56:2c:83:52:cb:
                    84:c5:18:ff:b8:39:6f:dc:c7:c2:4c:98:23:87:ac:
                    4a:10:0f:4d:2f:e8:0e:2d:59:a0:df:7b:e4:6d:31:
                    25:4c:92:d6:f7:9f:64:c0:10:64:12:55:9b:d9:2f:
                    8a:82:97:f1:95:81:86:41:b4:89:95:d2:48:64:cd:
                    2c:d2:b8:b0:e1:0d:87:ec:41:f3:76:05:43:f0:d3:
                    d9:1c:9d:14:1e:e3:9e:8f:4a:2a:d2:dd:89:7b:fc:
                    a3:a7:04:ac:7d:1f:b9:89:df:e3:cb:31:f0:61:1b:
                    89:2d:2f:58:e7:fc:e7:8a:54:b2:7f:c7:65:be:53:
                    54:60:d6:3a:12:7f:03:24:08:a0:09:ef:2e:e4:2f:
                    88:d1:d4:4a:e9:db:a8:5d:7b:97:df:53:bd:65:4f:
                    fd:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:CE:90:5D:38:EC:2B:8B:EE:42:52:8E:D8:D2:BE:8B:39:DB:84:CF
            X509v3 Authority Key Identifier:
                keyid:76:9E:41:7E:9C:18:B5:56:C0:54:AD:9C:00:DB:03:9D:EF:8B:82:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D7B93/E6B912C4A5D111F1A2E8764E3411F970/dp5BfpwYtVbAVK2cANsDne-LgmQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dp5BfpwYtVbAVK2cANsDne-LgmQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7B93/E6B912C4A5D111F1A2E8764E3411F970/dp5BfpwYtVbAVK2cANsDne-LgmQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:e5:d6:7c:eb:7b:68:77:e0:fd:8c:e5:93:10:df:19:fb:82:
         a7:34:bb:cb:b4:50:8a:d6:7a:f2:e8:3b:6f:de:5c:07:3a:6b:
         ed:9b:fc:7f:7c:01:6d:de:82:9c:77:37:0e:6b:5d:a4:48:a1:
         c9:24:3e:19:a3:e6:a0:af:7c:0d:36:86:8e:81:e0:5a:2b:de:
         d5:9a:eb:c2:93:d6:a6:9a:99:a8:89:f6:ce:2d:64:59:4e:39:
         14:e3:74:13:11:be:c3:50:41:ef:05:e0:13:0b:b3:c2:90:15:
         1b:8b:7d:26:f6:6d:4d:fd:c1:b8:8a:4b:78:64:f5:0a:93:14:
         f9:0f:0c:be:5f:7e:c3:b4:66:56:96:9e:7d:bd:78:6e:ab:8f:
         b4:bf:b4:b1:78:bc:30:50:9d:ea:43:64:a6:ce:0a:a2:6d:5e:
         60:93:69:6f:58:94:54:27:a4:0b:91:ca:29:a7:1c:51:f4:6f:
         a1:55:21:66:24:44:db:a0:65:6f:28:40:ed:6c:82:f4:13:01:
         33:0f:d0:d4:a4:8e:aa:8a:0a:c5:ce:26:e5:7b:22:f1:77:ba:
         d2:4c:f5:a7:c1:6c:87:61:3b:80:21:b8:7f:d9:26:3b:b1:f1:
         d0:ac:90:9c:42:ad:f7:b5:d2:49:1c:a3:d1:55:8e:cc:38:c1:
         6d:00:4e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 04:16:07 2026 by rpki-client