Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B04C/11A2F3DA2C2711F19BAFCA1D9C833773/DSL_1HBKVK6e2tG35aTgNT9F2hc.mft
File:                     DSL_1HBKVK6e2tG35aTgNT9F2hc.mft (raw, json)
Hash identifier:          bdyX9HznZ9cOLLS93Gm1vKDYnDGQ4L0v6aAUnBYJPWI=
Subject key identifier:   8B:5E:4E:80:98:1A:B7:A6:4F:CC:63:1C:50:2A:29:BB:1A:19:D8:C9
Authority key identifier: 0D:22:FF:D4:70:4A:54:AE:9E:DA:D1:B7:E5:A4:E0:35:3F:45:DA:17
Certificate issuer:       /CN=A917B04C/serialNumber=0D22FFD4704A54AE9EDAD1B7E5A4E0353F45DA17
Certificate serial:       6E
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DSL_1HBKVK6e2tG35aTgNT9F2hc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B04C/11A2F3DA2C2711F19BAFCA1D9C833773/DSL_1HBKVK6e2tG35aTgNT9F2hc.mft
Manifest number:          6D
Signing time:             Tue 27 Oct 2026 08:15:24 +0000
Manifest this update:     Tue 27 Oct 2026 08:15:24 +0000
Manifest next update:     Tue 03 Nov 2026 08:15:24 +0000
Files and hashes:         1: DSL_1HBKVK6e2tG35aTgNT9F2hc.crl (hash: SiWaqiRibwvtzvB5PM9y9XQTVZpEHdBMzlGkGT/rg/8=)
                          2: 984616082C2A11F1B015EE939D833773.roa (hash: oF4VI5NZfC+UNgW9AHSKJ6DEAMeK3Nd3QJRoxE5Ngzs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B04C/11A2F3DA2C2711F19BAFCA1D9C833773/DSL_1HBKVK6e2tG35aTgNT9F2hc.crl
                          rsync://rpki.apnic.net/member_repository/A917B04C/11A2F3DA2C2711F19BAFCA1D9C833773/DSL_1HBKVK6e2tG35aTgNT9F2hc.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DSL_1HBKVK6e2tG35aTgNT9F2hc.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 08:15:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110 (0x6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B04C, serialNumber=0D22FFD4704A54AE9EDAD1B7E5A4E0353F45DA17
        Validity
            Not Before: Oct 27 08:15:24 2026 GMT
            Not After : Nov  3 08:15:24 2026 GMT
        Subject: CN=6ae05d9c-7b9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9e:80:0d:19:23:cc:fb:2e:ef:e3:19:2b:30:
                    bd:c1:26:a4:09:c0:e6:ae:c2:57:1a:0b:97:91:a7:
                    45:b5:a7:57:40:7e:e2:a9:40:ae:b1:5c:0a:4b:4f:
                    de:ce:cd:ce:2c:f8:1b:91:05:3d:d7:b1:89:81:18:
                    e0:dd:bf:18:a5:88:9a:09:a2:f6:9f:07:52:89:3b:
                    91:3e:df:ca:33:59:f5:d8:c5:fa:7f:a2:52:e6:40:
                    62:a5:8f:4c:f6:1c:a0:b7:4f:2a:95:62:ff:53:66:
                    b0:a7:fa:5a:fe:0a:05:74:f6:7b:69:9d:80:5c:8a:
                    53:46:bf:9e:27:6a:ca:f9:13:a6:ee:d4:1d:ed:b2:
                    37:e2:68:37:1e:f1:b6:f7:db:8f:71:3e:d6:0e:5a:
                    23:4f:9f:50:51:8f:97:81:ed:e3:35:a6:07:6b:49:
                    5b:0c:2a:98:1a:f9:c1:a4:2f:e0:5c:3c:74:2d:75:
                    e1:52:0c:3c:61:28:b0:5d:46:6e:c5:2b:b3:11:ec:
                    40:64:81:13:fd:de:bf:94:3a:4a:f3:37:ca:f6:96:
                    12:1b:8e:12:9b:ca:78:bc:97:0a:a3:9b:60:37:84:
                    e5:f1:fa:c2:09:75:d3:00:14:49:a6:a7:6a:73:22:
                    10:dc:2d:2b:e7:c2:0a:66:13:e1:cc:54:b7:8d:73:
                    94:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:5E:4E:80:98:1A:B7:A6:4F:CC:63:1C:50:2A:29:BB:1A:19:D8:C9
            X509v3 Authority Key Identifier:
                keyid:0D:22:FF:D4:70:4A:54:AE:9E:DA:D1:B7:E5:A4:E0:35:3F:45:DA:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B04C/11A2F3DA2C2711F19BAFCA1D9C833773/DSL_1HBKVK6e2tG35aTgNT9F2hc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DSL_1HBKVK6e2tG35aTgNT9F2hc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B04C/11A2F3DA2C2711F19BAFCA1D9C833773/DSL_1HBKVK6e2tG35aTgNT9F2hc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:c7:59:4a:64:a3:b2:40:18:76:b5:6e:17:f2:7d:62:fe:47:
         ca:92:65:94:3a:07:3c:91:34:98:d3:e0:c3:71:85:49:11:80:
         a9:78:eb:47:7b:e9:40:5c:b4:ef:15:cd:2d:16:02:28:97:a0:
         4c:3a:4f:7a:2d:b0:41:75:24:f6:f0:09:14:5a:bc:3b:6c:57:
         6b:48:98:e8:e1:be:34:19:70:ce:51:eb:8e:51:15:85:ac:03:
         34:6c:1b:cb:58:15:c7:79:79:2c:59:5c:30:12:b6:76:b0:94:
         ae:d2:e5:0c:a2:0a:9c:bb:5d:56:1b:a8:26:8a:2d:3d:88:91:
         c3:2d:c3:95:c4:29:62:fd:88:11:18:a8:b1:b0:81:fd:c0:a1:
         3d:c3:82:fc:eb:1b:be:18:4c:bd:ad:f8:f2:51:4f:ca:6b:3b:
         55:a1:45:4d:70:02:7b:78:46:f3:74:1d:67:ec:58:ce:ea:de:
         e2:59:1c:13:6d:2d:02:e9:f3:57:ca:85:d1:6a:3b:7a:1c:45:
         d1:c4:66:d7:1c:e7:13:eb:30:df:f1:8c:63:35:63:f8:cf:87:
         7e:98:61:08:15:3e:50:95:c3:23:08:a9:4b:b7:73:6b:47:09:
         b1:4c:2b:4a:92:4e:6d:6e:d7:0f:ea:e8:59:7e:a0:60:34:df:
         7d:42:d2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:36:52 2026 by rpki-client