Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft
File:                     dCF08y5sxujR-WW_odQKENbj58k.mft (raw, json)
Hash identifier:          Nj5zB4QWj5xfCuft89mF3IinZw5TtcHaToQGvRT6FQI=
Subject key identifier:   0A:FD:54:B0:71:D4:75:46:AD:FB:95:A2:63:3B:21:28:B3:4C:DB:CF
Authority key identifier: 74:21:74:F3:2E:6C:C6:E8:D1:F9:65:BF:A1:D4:0A:10:D6:E3:E7:C9
Certificate issuer:       /CN=A911D1A9/serialNumber=742174F32E6CC6E8D1F965BFA1D40A10D6E3E7C9
Certificate serial:       0264
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCF08y5sxujR-WW_odQKENbj58k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft
Manifest number:          0258
Signing time:             Sun 27 Sep 2026 02:41:19 +0000
Manifest this update:     Sun 27 Sep 2026 02:41:19 +0000
Manifest next update:     Sun 04 Oct 2026 02:41:19 +0000
Files and hashes:         1: dCF08y5sxujR-WW_odQKENbj58k.crl (hash: 6ngQHvqgKxsWojVjZOlLEYrGDSqJzTu/xt21WhPWb2Q=)
                          2: 637BE5B0407C11EFBB872A45C4F9AE02.roa (hash: w37FmKuGyYiI7GCx8HffTvi454gu/r8u+XiWKTa1IQ4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.crl
                          rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCF08y5sxujR-WW_odQKENbj58k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 02:41:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 612 (0x264)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D1A9, serialNumber=742174F32E6CC6E8D1F965BFA1D40A10D6E3E7C9
        Validity
            Not Before: Sep 27 02:41:19 2026 GMT
            Not After : Oct  4 02:41:19 2026 GMT
        Subject: CN=6ab8824f-7fe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b3:74:58:11:31:68:68:92:42:0d:a4:49:8c:
                    21:c3:cf:6d:22:b7:47:bf:dc:a4:f7:03:86:47:18:
                    10:bc:40:f6:20:99:ff:cf:23:0a:3b:29:8b:c1:a0:
                    67:da:27:c6:9b:6e:89:42:22:ee:64:a1:13:d6:b6:
                    3e:49:6c:46:bf:3d:e0:0e:14:db:24:8a:7f:fa:41:
                    74:3b:2d:35:60:21:ba:c7:96:85:f6:bf:18:68:d0:
                    7f:8a:64:3f:bd:f6:17:29:48:32:79:a8:7b:16:07:
                    7a:97:df:e9:b8:1d:83:54:aa:23:7b:8d:08:ec:89:
                    ec:4e:df:cc:ab:9f:cb:62:23:4e:2c:30:d3:9a:67:
                    ee:c0:ee:66:4d:03:29:91:8a:fc:13:ff:b3:5f:ce:
                    5b:73:79:7c:02:5e:d7:48:f9:61:4a:4f:df:e9:6d:
                    e1:f1:e7:da:8e:81:5f:6c:4b:7a:1e:1b:aa:0c:d7:
                    55:ec:5a:5c:a4:45:73:9c:d6:f8:c8:77:3f:c6:e6:
                    b8:4b:5a:f9:25:b6:f0:82:be:62:23:11:2a:9e:74:
                    70:89:8f:b4:2c:37:0e:2d:76:c9:19:81:24:bb:1c:
                    ce:2c:f3:d6:e6:1c:4d:f3:2b:e8:cb:2c:cd:95:a5:
                    43:ff:34:de:2d:fd:2d:87:2e:3f:bc:05:dc:d4:ed:
                    92:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:FD:54:B0:71:D4:75:46:AD:FB:95:A2:63:3B:21:28:B3:4C:DB:CF
            X509v3 Authority Key Identifier:
                keyid:74:21:74:F3:2E:6C:C6:E8:D1:F9:65:BF:A1:D4:0A:10:D6:E3:E7:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCF08y5sxujR-WW_odQKENbj58k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:1e:e6:e1:2f:70:c9:2a:58:38:23:03:36:30:df:9a:d3:26:
         3d:5f:af:8a:01:72:3e:f3:1b:b7:09:ce:82:f5:e7:91:aa:b8:
         3d:41:3d:96:48:60:27:42:3d:ff:e9:99:18:17:3e:49:9a:83:
         82:a7:cb:8e:68:5f:d4:44:b5:cd:c4:7a:1b:30:55:c3:ed:70:
         71:8a:2a:dd:14:8f:16:1f:74:f0:f7:c7:9e:09:ad:b9:f8:26:
         8a:51:5b:53:71:88:37:cc:95:cc:42:1c:76:fd:68:46:96:25:
         cb:33:0d:10:60:29:1e:54:49:80:8f:11:b5:65:fe:f4:b9:90:
         1b:ee:ec:96:21:0d:bf:07:da:fa:82:82:70:32:f5:db:c4:4c:
         f0:21:e5:e9:c5:eb:e1:dc:ee:aa:d6:b7:06:e1:cf:e2:89:b5:
         b1:e6:66:1c:56:c7:be:44:dc:e9:8e:20:b1:fd:32:3f:aa:e3:
         f1:73:4e:c2:7b:c6:31:9d:e6:b3:3d:8a:f8:05:01:bf:93:e6:
         ce:c8:4e:1d:fe:48:b6:15:a8:34:91:dc:f2:83:da:d4:5b:52:
         c6:14:96:d7:5b:c2:55:9d:44:c3:08:74:96:56:c0:8e:b3:aa:
         44:90:31:62:9a:0f:0f:d8:c9:70:9b:29:fa:3f:10:4b:20:ad:
         16:ed:54:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:12:28 2026 by rpki-client