Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft
File:                     DHadpEmC9hZQNilD5t_vlRuXd_o.mft (raw, json)
Hash identifier:          l36zwKVNZ1EP2K3ZoL2kF/Q7hw8J3v+LrKm8HNjihUo=
Subject key identifier:   F3:23:C4:F0:60:DC:9C:B9:FD:70:C0:83:A3:5F:6F:24:95:D7:37:05
Authority key identifier: 0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA
Certificate issuer:       /CN=A9116DDB/serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA
Certificate serial:       0311
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft
Manifest number:          02D5
Signing time:             Tue 27 Oct 2026 01:42:09 +0000
Manifest this update:     Tue 27 Oct 2026 01:42:08 +0000
Manifest next update:     Tue 03 Nov 2026 01:42:08 +0000
Files and hashes:         1: DHadpEmC9hZQNilD5t_vlRuXd_o.crl (hash: HDZOpyVoFF2DXh+waRe6JtPX9WSas8yzMPb7kIiiuMg=)
                          2: 976A9C302BAF11F0B6DD613FC4F9AE02.roa (hash: Hox0f2DRIVuIK+ZDPSBwi8YFrSvd/HIMMzrpJToGzWQ=)
                          3: 2C5C63329E5311EE8D49694BC4F9AE02.roa (hash: Kr94412hhcY/at18rjv0XA0pqE08XI59mHNHLnbdksc=)
                          4: 98ABC1DC2BAF11F0B6DD613FC4F9AE02.roa (hash: ghST+vSBTxMdN+yzTKosvMAzRvP/vrilwEFegVUb+WY=)
                          5: 8A04741C68A311F19B45E58A7847A888.roa (hash: Zy0kCOinMyWSdMjqBbtvPvM9LDmL8Dbk2NJX54n4aWs=)
                          6: 9A79B41A633811EE9D258E2EC4F9AE02.roa (hash: Wcf2vMzftWJtAn6zdPO2KOKSjFD6mFbi1Rf4pSx3lOY=)
                          7: 67425BB07A7F11EFB5653840C4F9AE02.roa (hash: HFcUvaW9KbLDg5i5OgcqMSY14LszjF0fYUXU/KjRNmo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl
                          rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 01:42:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 785 (0x311)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116DDB, serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA
        Validity
            Not Before: Oct 27 01:42:08 2026 GMT
            Not After : Nov  3 01:42:08 2026 GMT
        Subject: CN=6ae00171-0084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:85:ae:c9:11:eb:38:02:1d:ed:46:a5:80:89:
                    c9:cd:9c:8c:34:28:9a:cf:52:fe:dd:80:3d:7d:fb:
                    90:2b:79:d5:20:09:1b:c2:36:a8:16:0c:7f:2a:72:
                    78:ae:62:ab:45:b6:cb:be:51:e8:a5:3f:f0:c0:55:
                    80:9a:c0:57:9a:bb:43:1d:ec:5d:f1:c3:58:12:a8:
                    c1:87:f2:18:d7:8b:fc:55:56:ca:6a:ff:f3:11:28:
                    6a:0d:a1:73:3c:97:1d:3b:66:ce:98:82:95:76:97:
                    79:05:f3:d7:15:d1:76:ac:6d:8a:45:31:28:3f:e8:
                    74:76:9f:21:11:20:24:53:d0:ac:58:2c:2e:55:61:
                    93:53:9c:79:07:c5:43:e6:00:77:73:33:93:78:03:
                    07:e9:34:be:d7:81:d5:7e:b8:01:57:ab:f9:fb:ec:
                    1f:a6:b8:71:58:45:ee:c0:37:1d:02:3c:c0:b0:a7:
                    ca:b6:eb:5e:87:f6:b4:8f:2d:b9:b1:80:0b:53:92:
                    7f:9e:d9:8c:10:c3:90:d5:dc:be:55:9c:8b:59:d0:
                    97:1f:c9:3c:36:ae:89:69:63:c6:85:4f:ac:72:d5:
                    99:51:7f:51:a0:d4:c0:8a:89:69:f2:ee:d0:1e:90:
                    80:2a:e2:03:35:a1:f2:34:c5:59:14:b1:90:42:78:
                    45:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:23:C4:F0:60:DC:9C:B9:FD:70:C0:83:A3:5F:6F:24:95:D7:37:05
            X509v3 Authority Key Identifier:
                keyid:0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:0c:84:79:3c:26:2c:02:31:ca:4c:00:d4:b7:57:07:3a:1f:
         a7:9b:96:1c:ed:9e:11:39:45:de:6c:e6:06:0c:54:8f:0d:c9:
         e4:2d:b7:e2:58:79:72:c3:b3:01:47:66:35:27:f1:85:65:d1:
         56:38:61:b5:8a:54:c1:e8:96:ee:9f:24:4f:63:24:71:c8:8f:
         1f:90:43:b4:93:fd:5e:94:74:14:59:ae:43:0e:ea:3e:f3:2f:
         e5:3b:d3:eb:7c:01:21:3d:b6:3c:83:f0:ab:89:16:8e:35:9b:
         69:b7:17:8d:93:e2:5f:ea:69:99:23:35:94:88:ab:bf:93:af:
         d2:f7:2e:cf:8d:98:03:94:66:03:88:44:6e:05:ba:b9:0d:53:
         e7:c3:fb:1f:75:d1:c4:f9:8b:7d:79:eb:d4:b7:31:c0:8e:a5:
         cd:99:10:5a:ab:b9:10:51:3d:62:fc:b9:56:c9:44:9a:17:be:
         9b:97:09:7f:18:86:61:02:03:cc:5a:51:7c:e8:b2:4c:fc:0b:
         d6:9c:2e:5c:59:4d:42:42:95:90:43:7d:64:d6:0a:0c:5a:10:
         88:01:df:8a:ae:4d:fc:cd:18:2d:58:f4:6a:e0:df:97:42:23:
         20:32:f6:2d:cf:e3:b9:2a:75:df:70:ef:1f:57:b5:e6:6d:c8:
         4d:03:62:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:27:24 2026 by rpki-client