Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft
File:                     1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft (raw, json)
Hash identifier:          zG7d8+b3cAnKwNjm5s4Q0dYOgC51yuzHpUWuPTLa3ho=
Subject key identifier:   CF:A6:6F:44:E7:4A:A4:B8:89:D2:67:FF:2E:31:6A:51:3B:D1:4E:34
Authority key identifier: D4:34:E5:9E:98:E4:50:8E:EA:A4:0D:F9:60:DA:4F:33:42:41:67:59
Certificate issuer:       /CN=A91233F8/serialNumber=D434E59E98E4508EEAA40DF960DA4F3342416759
Certificate serial:       02C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft
Manifest number:          089D
Signing time:             Sun 04 Oct 2026 23:01:05 +0000
Manifest this update:     Sun 04 Oct 2026 23:01:05 +0000
Manifest next update:     Sun 11 Oct 2026 23:01:05 +0000
Files and hashes:         1: 1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl (hash: f4B9Hu/CiwB5vKcRX7xpssoFVC+KvCDRRvH+AJ+0/D8=)
                          2: 1B4BA08497A711EDA815F80AC4F9AE02.roa (hash: q8TmdXzDI+kRS9ckU02MC/ivGlamdxtAYJvwAi6SQG0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl
                          rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 23:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 710 (0x2c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91233F8, serialNumber=D434E59E98E4508EEAA40DF960DA4F3342416759
        Validity
            Not Before: Oct  4 23:01:05 2026 GMT
            Not After : Oct 11 23:01:05 2026 GMT
        Subject: CN=6ac2dab1-4468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:e6:68:48:49:41:a7:01:38:7a:6f:55:4e:c9:
                    6b:4a:76:df:f6:c1:e9:5a:0f:59:32:ef:fd:99:b3:
                    c8:2b:6b:6d:8f:a6:f5:f9:3b:bc:9b:eb:2f:ab:2a:
                    fc:67:ed:a8:33:1a:4c:c7:dd:7b:b0:5d:6c:88:13:
                    53:97:e5:ad:2f:71:3b:73:f1:55:76:b4:ea:e2:1e:
                    0d:9e:bb:54:f7:f5:2b:a4:f3:33:d6:5e:62:75:69:
                    ef:be:42:89:e5:62:9f:73:56:76:a3:c1:98:72:78:
                    3d:20:e6:12:fa:37:48:a4:84:e0:bb:47:50:7c:a1:
                    60:b7:89:cd:90:f3:a8:16:d0:9a:90:b1:34:1c:df:
                    bc:19:1b:d1:cc:06:a2:c6:23:b0:52:df:88:f5:9e:
                    66:c7:62:fd:88:6a:22:44:07:6e:7f:8b:9b:a2:fc:
                    1d:ba:f5:ba:0f:a6:b5:d3:98:6a:37:d0:1b:8a:be:
                    3d:bb:a4:1c:a9:c6:1c:b1:cc:99:26:cb:c2:ea:64:
                    6a:5e:d1:b1:67:9b:1d:f3:2e:9d:a5:54:0a:8d:98:
                    48:a4:e3:64:1c:07:1c:99:76:94:27:5d:e8:c2:6a:
                    30:4f:eb:6a:f1:ea:9f:38:88:1e:1e:44:33:98:c1:
                    d4:7a:30:19:d5:17:d3:7f:01:72:fa:02:aa:d2:98:
                    a9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A6:6F:44:E7:4A:A4:B8:89:D2:67:FF:2E:31:6A:51:3B:D1:4E:34
            X509v3 Authority Key Identifier:
                keyid:D4:34:E5:9E:98:E4:50:8E:EA:A4:0D:F9:60:DA:4F:33:42:41:67:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:dd:e8:0a:7d:95:cc:b1:dc:e4:5b:84:b3:80:cf:78:da:f1:
         28:b6:93:da:ac:70:ba:83:d8:3e:43:8a:e1:7c:ce:31:64:39:
         ee:da:43:8e:c6:27:17:6d:a0:29:0a:f1:38:d9:75:49:8d:35:
         eb:31:5b:52:6a:d3:b6:52:90:07:57:24:06:e0:a7:58:5a:46:
         fe:af:e3:48:dd:f6:7e:30:70:5e:62:26:58:0d:a0:b1:34:39:
         42:e8:91:2d:66:aa:51:d6:c9:ab:17:d3:f5:1b:94:9f:8b:c6:
         75:7b:67:1c:19:9d:f2:90:9d:1a:c7:c3:e1:ef:16:4c:cc:e5:
         fd:1e:0e:3f:82:61:65:cb:f2:86:09:67:2d:7e:98:a7:84:fd:
         c1:2a:b6:b4:fb:52:43:56:69:55:5f:f1:69:83:65:95:9b:6e:
         26:f1:bf:9f:5c:29:21:e5:a7:f0:58:ad:7c:7b:cb:19:f0:6a:
         67:2f:19:c8:d4:38:14:4d:9b:fb:58:26:da:c3:27:49:03:e7:
         c4:e2:c8:c8:b7:82:4a:70:11:25:c3:ee:c1:f9:22:2b:04:64:
         ef:e7:85:48:21:a3:48:43:d0:40:64:a7:b8:88:36:6e:f8:5f:
         4b:d9:4b:f4:3e:a5:41:6d:52:09:f6:df:07:bf:e7:83:cc:6d:
         e7:23:40:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:19:15 2026 by rpki-client