Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft
File:                     DihwYx-g7-rpRTHbDiYEXKO8gZs.mft (raw, json)
Hash identifier:          S/Ouu8h00ipk6O3RMD1eGY1suozxG26ACNNchW63YQ4=
Subject key identifier:   DB:D0:E8:05:A5:41:50:72:42:92:5C:67:B0:A1:BA:AA:44:FB:E1:43
Authority key identifier: 0E:28:70:63:1F:A0:EF:EA:E9:45:31:DB:0E:26:04:5C:A3:BC:81:9B
Certificate issuer:       /CN=A9162DD6/serialNumber=0E2870631FA0EFEAE94531DB0E26045CA3BC819B
Certificate serial:       113E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft
Manifest number:          1125
Signing time:             Fri 04 Sep 2026 17:14:03 +0000
Manifest this update:     Fri 04 Sep 2026 17:14:03 +0000
Manifest next update:     Fri 11 Sep 2026 17:14:03 +0000
Files and hashes:         1: DihwYx-g7-rpRTHbDiYEXKO8gZs.crl (hash: jjlXgoQhW5yqR2fjBOD/lPCfbgONQQ6TlBdj0AXbQ2c=)
                          2: DA3261943FEB11E9882E830FC4F9AE02.roa (hash: mkc5tQXX6CS1iIsQT2pt5gTX2uoC5kqfFh3pHjgWeEk=)
                          3: D97D5F6A3FEB11E9882E830FC4F9AE02.roa (hash: YTLM/IZw3IIR4MorBonKso+E+SL2P2Fu9vwyg8zdQ0M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.crl
                          rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 17:14:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4414 (0x113e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162DD6, serialNumber=0E2870631FA0EFEAE94531DB0E26045CA3BC819B
        Validity
            Not Before: Sep  4 17:14:03 2026 GMT
            Not After : Sep 11 17:14:03 2026 GMT
        Subject: CN=6a9afc5b-0730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7a:ae:9f:24:25:35:1a:4d:32:27:3e:b9:68:
                    4e:3f:6f:de:92:cf:c8:ee:f9:c7:ee:b5:70:72:b5:
                    fd:a6:c4:40:d8:e5:b4:b0:af:a0:dd:26:95:50:41:
                    29:0c:aa:6a:32:08:28:8c:61:14:25:67:fd:2f:49:
                    32:90:03:c0:56:a8:49:ce:a1:d0:2c:33:91:dd:8d:
                    24:23:f0:23:0a:b0:46:2d:ef:cd:65:15:19:2d:df:
                    d8:20:84:c4:5f:c1:6c:0b:b2:cc:05:db:82:1e:a9:
                    09:96:28:bd:b6:d0:e4:f0:7a:52:fd:bf:85:a9:a0:
                    8d:08:6e:80:3c:2d:32:b6:8b:70:dd:4f:36:39:35:
                    0d:01:b5:53:d9:21:8e:04:b5:45:f7:50:22:9d:8a:
                    7d:1c:48:fd:50:2a:c2:0e:7c:e1:59:b5:cf:1b:48:
                    a2:c1:aa:c6:21:c0:46:25:96:70:21:5a:40:2e:fa:
                    b8:87:15:4f:55:d8:d8:89:ff:01:59:d8:34:27:e4:
                    06:1c:8f:c0:c4:6f:77:92:f1:f1:15:b2:16:a5:0d:
                    5c:40:fa:45:c8:ef:9f:be:06:12:37:bf:fa:ae:b1:
                    e0:4e:32:b0:0d:aa:42:69:a7:b8:b4:71:0b:74:6f:
                    d0:f3:ff:46:6b:79:03:01:fa:ae:99:f1:ea:e7:ef:
                    43:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D0:E8:05:A5:41:50:72:42:92:5C:67:B0:A1:BA:AA:44:FB:E1:43
            X509v3 Authority Key Identifier:
                keyid:0E:28:70:63:1F:A0:EF:EA:E9:45:31:DB:0E:26:04:5C:A3:BC:81:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:f2:64:71:3c:24:8f:27:54:51:52:a9:47:3d:bf:5f:b1:09:
         5a:f3:f8:d2:24:bb:9f:6b:ea:82:cc:66:d1:0e:8e:ce:4c:fe:
         d3:7c:6b:ca:bc:d5:3d:12:a4:34:c5:28:5a:d9:26:bd:1f:ec:
         d8:37:15:52:11:0d:a1:72:81:7f:37:8d:ac:fd:58:bd:b4:9a:
         1d:a9:9f:dd:5d:26:2d:49:d9:8a:9e:8b:04:d6:73:be:fb:fb:
         4a:10:46:f2:f1:48:77:a9:27:c2:59:2e:13:c5:3b:98:36:d3:
         cb:ff:68:72:d3:55:30:92:c3:73:0f:1d:6c:d0:40:be:9c:6e:
         58:54:a1:8b:31:2e:af:e1:48:52:c7:78:9b:29:b2:64:7a:a2:
         82:58:dc:00:66:45:ea:ce:aa:e0:f4:10:48:ce:ef:8d:f0:3c:
         ce:c7:d3:a4:19:dd:58:07:83:8c:d0:42:a7:48:46:f4:12:7f:
         eb:51:b0:30:b7:2f:8a:5d:99:2c:30:b0:3d:04:3b:d2:65:26:
         73:91:29:eb:88:3e:68:42:f7:51:fc:a7:e4:03:dd:59:7d:08:
         36:da:bc:70:c7:d0:f5:75:c2:26:0a:1f:6d:e1:e4:51:95:97:
         5f:21:dc:94:4b:00:5a:22:ed:99:f6:33:cd:b9:86:7d:2b:e3:
         f9:a7:a2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:33:05 2026 by rpki-client