Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.mft
File:                     PyDCnh1-UV3z49hapE51H4Fycxo.mft (raw, json)
Hash identifier:          +gsTYmN88oRvB78uDac6/v0qVYnPdmeplW8AEO/yiDc=
Subject key identifier:   70:33:5E:B2:5E:04:E7:16:08:75:38:12:2D:F7:1E:FA:70:37:3C:CD
Authority key identifier: 3F:20:C2:9E:1D:7E:51:5D:F3:E3:D8:5A:A4:4E:75:1F:81:72:73:1A
Certificate issuer:       /CN=A91210E0/serialNumber=3F20C29E1D7E515DF3E3D85AA44E751F8172731A
Certificate serial:       0239
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PyDCnh1-UV3z49hapE51H4Fycxo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.mft
Manifest number:          0231
Signing time:             Wed 07 Oct 2026 03:08:05 +0000
Manifest this update:     Wed 07 Oct 2026 03:08:05 +0000
Manifest next update:     Wed 14 Oct 2026 03:08:05 +0000
Files and hashes:         1: PyDCnh1-UV3z49hapE51H4Fycxo.crl (hash: K+wkVo4lNaJUQPeje+5/8Ag4BFzqJd+pNbXYALN7Qdk=)
                          2: 503E43126E5E11EEB39D9E48C4F9AE02.roa (hash: 0Pp/jipwHz+dDFZW3SdujQfWz5D9Ej7JkD74IDbQ7uI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.crl
                          rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PyDCnh1-UV3z49hapE51H4Fycxo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 03:08:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 569 (0x239)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91210E0, serialNumber=3F20C29E1D7E515DF3E3D85AA44E751F8172731A
        Validity
            Not Before: Oct  7 03:08:05 2026 GMT
            Not After : Oct 14 03:08:05 2026 GMT
        Subject: CN=6ac5b795-8ea2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e6:ad:67:d5:a7:9c:ee:a2:b0:f6:d5:a9:2e:
                    65:e2:09:d6:22:cb:7c:c7:a3:61:84:77:22:13:df:
                    54:fd:2e:29:16:96:e5:3a:6d:dd:16:bd:18:31:12:
                    16:7f:10:bc:3c:f9:0a:59:ee:81:7d:b6:d8:f1:ed:
                    d4:0c:fa:2a:47:51:52:c7:a6:4f:d4:81:cc:90:35:
                    f6:ec:6e:f1:2a:d8:5f:d6:3d:04:e3:cd:47:7e:0f:
                    3a:8e:22:0a:7e:7c:4e:d3:9c:7e:6c:fb:ee:08:27:
                    c7:87:a3:26:da:75:c2:79:ac:d6:36:96:42:dc:f1:
                    35:0a:a4:1a:7c:14:92:43:79:0c:a3:34:68:54:d5:
                    0f:52:11:37:c0:ff:c4:8e:5a:fb:83:d8:28:87:4f:
                    3a:42:9a:4a:23:16:4d:da:09:46:3f:27:a7:45:bd:
                    5c:9c:b7:e6:8a:b4:89:c9:1e:28:6d:87:f3:ec:db:
                    3f:e7:3b:5a:e3:fd:00:75:7e:a2:d6:7a:94:27:25:
                    7a:bb:33:dd:db:43:1e:bd:a9:7b:15:a9:f0:2e:b4:
                    ff:f4:6e:e8:43:10:7d:cd:e8:12:89:ce:d5:c0:37:
                    e0:98:6f:26:c8:4d:ab:ff:a9:99:2a:fa:dd:b1:b1:
                    a9:25:77:d1:9d:e4:82:2c:d2:2e:e3:55:30:22:05:
                    51:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:33:5E:B2:5E:04:E7:16:08:75:38:12:2D:F7:1E:FA:70:37:3C:CD
            X509v3 Authority Key Identifier:
                keyid:3F:20:C2:9E:1D:7E:51:5D:F3:E3:D8:5A:A4:4E:75:1F:81:72:73:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PyDCnh1-UV3z49hapE51H4Fycxo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:c8:32:41:01:4b:8c:26:03:4b:be:6c:e6:8d:80:64:bf:db:
         ff:a4:9a:1a:b6:a8:9d:2b:64:dc:7a:2b:d0:e0:6d:4e:67:3d:
         e1:fc:37:bd:c0:55:bb:b4:a3:86:d7:fe:2d:af:95:d8:11:ff:
         4c:9e:50:aa:63:ce:7f:94:92:9b:8f:23:20:b9:03:b2:1b:85:
         49:b3:88:b3:3f:41:1c:f0:02:69:c1:ba:2a:57:c6:9b:a2:cc:
         f1:64:cc:c1:24:4e:00:8b:d8:78:53:71:43:24:7f:98:00:ee:
         ba:35:44:93:0a:1a:e8:69:b6:bc:86:34:0f:b0:55:20:f7:99:
         51:de:01:4b:59:10:3c:79:7f:79:bc:53:09:4d:90:3f:15:66:
         82:7b:90:20:12:eb:a4:1c:af:3f:a1:1a:ef:7b:32:28:00:e9:
         e3:ce:0c:44:d5:80:98:5e:21:1b:bf:fb:3f:8d:ac:5e:ef:cd:
         f6:da:a6:40:3e:f2:fe:56:b3:11:b2:e3:ea:39:b3:98:84:fb:
         88:35:90:d3:e3:73:52:d9:0b:6f:41:59:18:37:73:08:d6:b8:
         c4:a1:8d:3e:d4:07:6e:3c:f5:81:17:8d:cb:2a:07:0f:da:70:
         f4:8b:ad:3e:8c:29:cf:b9:38:e4:08:09:24:bb:23:9b:d1:8b:
         a0:0f:51:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 19:23:24 2026 by rpki-client