Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft
File:                     1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft (raw, json)
Hash identifier:          FpAr3WCzsT6W3CL6AYaJjMPmNmGNj4Xq2f89p4IEzTY=
Subject key identifier:   D7:EE:6E:E3:65:63:4C:65:70:93:65:4E:E0:AB:19:9E:90:ED:D9:12
Authority key identifier: D4:39:EE:D6:0D:31:97:09:87:24:74:B9:07:06:63:04:73:B6:DE:5E
Certificate issuer:       /CN=A911A70E/serialNumber=D439EED60D319709872474B90706630473B6DE5E
Certificate serial:       02CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Dnu1g0xlwmHJHS5BwZjBHO23l4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft
Manifest number:          02BF
Signing time:             Sat 03 Oct 2026 02:02:51 +0000
Manifest this update:     Sat 03 Oct 2026 02:02:50 +0000
Manifest next update:     Sat 10 Oct 2026 02:02:50 +0000
Files and hashes:         1: 1Dnu1g0xlwmHJHS5BwZjBHO23l4.crl (hash: 8rw83xFY31Vq/Mogp7e8Cq/Zxki7zHd78t2Nq5mG5FE=)
                          2: 5169DA6EA05D11ED9406DE26C4F9AE02.roa (hash: djIkhDevvOBsQkUaz/V5XZPkvO7argYWm0fhUEFlER8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.crl
                          rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Dnu1g0xlwmHJHS5BwZjBHO23l4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 02:02:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 717 (0x2cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A70E, serialNumber=D439EED60D319709872474B90706630473B6DE5E
        Validity
            Not Before: Oct  3 02:02:50 2026 GMT
            Not After : Oct 10 02:02:50 2026 GMT
        Subject: CN=6ac0624b-af1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:88:f3:f3:54:c6:44:df:97:4a:6e:85:d6:75:
                    3a:82:28:2b:4e:d6:5c:c2:1e:0e:45:35:28:79:49:
                    b7:fe:83:15:67:6a:66:8e:d6:a6:56:85:cc:fe:d1:
                    df:ea:ff:4b:55:b8:aa:11:c4:b6:bc:39:b0:b6:a9:
                    55:39:b4:bf:86:5c:13:e8:ee:90:c7:3c:ab:e8:56:
                    d1:d8:1c:9c:f3:5f:77:66:a3:d2:dd:85:62:f9:8f:
                    e0:66:9a:10:ce:0c:04:35:16:04:f8:5b:72:d7:be:
                    ea:f4:09:71:db:e1:5b:2e:a5:4a:4d:ae:f9:04:aa:
                    ba:73:4b:cb:66:17:7a:6e:2f:0a:15:2e:40:89:e9:
                    41:67:46:d4:e5:14:b4:c9:7f:3b:ed:95:16:dc:10:
                    95:92:3d:a6:46:b2:af:23:de:e7:08:e0:89:e5:e7:
                    fd:67:80:35:fa:cf:34:7b:c0:19:7d:6c:21:fd:bb:
                    05:ad:59:65:62:a4:ff:86:07:64:52:af:9c:d4:5f:
                    cf:9a:93:e4:9e:72:ff:cc:b0:8c:ed:a2:b1:36:09:
                    09:00:3e:78:2b:32:3c:9b:a6:9c:0b:01:ba:84:b4:
                    ea:07:67:77:4d:01:c6:91:b3:db:b0:cc:01:1f:9a:
                    55:62:71:fd:ea:f2:8a:81:da:2b:22:23:61:9c:06:
                    a2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:EE:6E:E3:65:63:4C:65:70:93:65:4E:E0:AB:19:9E:90:ED:D9:12
            X509v3 Authority Key Identifier:
                keyid:D4:39:EE:D6:0D:31:97:09:87:24:74:B9:07:06:63:04:73:B6:DE:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Dnu1g0xlwmHJHS5BwZjBHO23l4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:ff:80:0a:4a:57:d4:9a:fa:05:1d:61:29:38:8d:bc:f4:08:
         59:d2:72:3a:a4:bc:d5:28:4f:fa:c1:6e:63:e1:f5:c0:58:cc:
         6b:f9:f0:53:d3:5b:a0:27:46:b8:35:06:0e:c0:5d:f6:d9:40:
         3a:67:87:74:6f:52:b7:23:27:51:83:93:3e:e4:8e:f6:be:28:
         85:8c:b6:c0:d2:30:8f:da:90:19:ee:61:ca:ac:5a:94:14:d9:
         ef:92:9e:b2:57:69:af:5e:24:3c:d5:26:47:7a:36:cc:27:eb:
         38:c2:e3:d7:8a:66:3e:b9:62:79:bd:b4:d4:86:de:47:98:43:
         38:b0:5e:59:a9:73:cc:6f:60:9f:6c:3f:11:06:c7:e9:1f:90:
         b1:17:84:ab:6b:8b:af:20:80:6e:37:22:42:3e:dd:48:81:5f:
         1f:30:6c:47:fa:69:c7:2c:d1:e0:4c:f4:c6:ec:14:20:37:00:
         f6:e7:1d:8c:5b:14:86:49:02:15:a5:f8:0d:c0:42:52:b7:e0:
         8c:5f:5d:ec:e0:c6:a5:3c:74:1f:46:cc:c6:cf:99:4c:7a:f7:
         5c:67:92:54:5c:26:6f:e4:08:10:ce:ff:b9:ed:a8:25:f2:4b:
         c3:1d:07:d2:ab:ec:ca:72:68:59:8e:4a:5f:4e:f6:35:54:23:
         c2:08:0b:92
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAs0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUE3MEUxMTAvBgNVBAUTKEQ0MzlFRUQ2MEQzMTk3MDk4NzI0NzRCOTA3MDY2MzA0
NzNCNkRFNUUwHhcNMjYxMDAzMDIwMjUwWhcNMjYxMDEwMDIwMjUwWjAYMRYwFAYD
VQQDEw02YWMwNjI0Yi1hZjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6Ijz81TGRN+XSm6F1nU6gigrTtZcwh4ORTUoeUm3/oMVZ2pmjtamVoXM/tHf
6v9LVbiqEcS2vDmwtqlVObS/hlwT6O6Qxzyr6FbR2Byc8193ZqPS3YVi+Y/gZpoQ
zgwENRYE+Fty177q9Alx2+FbLqVKTa75BKq6c0vLZhd6bi8KFS5AielBZ0bU5RS0
yX877ZUW3BCVkj2mRrKvI97nCOCJ5ef9Z4A1+s80e8AZfWwh/bsFrVllYqT/hgdk
Uq+c1F/PmpPknnL/zLCM7aKxNgkJAD54KzI8m6acCwG6hLTqB2d3TQHGkbPbsMwB
H5pVYnH96vKKgdorIiNhnAai+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNfubuNl
Y0xlcJNlTuCrGZ6Q7dkSMB8GA1UdIwQYMBaAFNQ57tYNMZcJhyR0uQcGYwRztt5e
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTcwRS8wMDA4M0ZBQzlE
NTcxMUVEOUY5ODk1MzBDNEY5QUUwMi8xRG51MWcweGx3bUhKSFM1QndaakJITzIz
bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFEbnUxZzB4bHdtSEpIUzVCd1pqQkhPMjNsNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QTcwRS8wMDA4M0ZBQzlENTcxMUVEOUY5ODk1MzBDNEY5QUUwMi8xRG51MWcweGx3
bUhKSFM1QndaakJITzIzbDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACv+ACkpX1Jr6BR1hKTiNvPQIWdJyOqS81ShP+sFuY+H1wFjMa/nwU9NboCdG
uDUGDsBd9tlAOmeHdG9StyMnUYOTPuSO9r4ohYy2wNIwj9qQGe5hyqxalBTZ75Ke
sldpr14kPNUmR3o2zCfrOMLj14pmPrlieb201IbeR5hDOLBeWalzzG9gn2w/EQbH
6R+QsReEq2uLryCAbjciQj7dSIFfHzBsR/ppxyzR4Ez0xuwUIDcA9ucdjFsUhkkC
FaX4DcBCUrfgjF9d7ODGpTx0H0bMxs+ZTHr3XGeSVFwmb+QIEM7/ue2oJfJLwx0H
0qvsynJoWY5KX072NVQjwggLkg==
-----END CERTIFICATE-----
Generated at Sun Oct 4 08:33:02 2026 by rpki-client