Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.mft
File:                     DcXOSilPLJOAqRNe4fBTByikzaY.mft (raw, json)
Hash identifier:          GoOee9xArsYNEegG4tUGeaq852JZA7ZfOjDFhnBJXc8=
Subject key identifier:   B8:5E:D8:4C:73:89:FF:B5:CB:83:3F:C2:CB:B1:0C:A5:6D:AD:8B:B1
Authority key identifier: 0D:C5:CE:4A:29:4F:2C:93:80:A9:13:5E:E1:F0:53:07:28:A4:CD:A6
Certificate issuer:       /CN=A912B4DB/serialNumber=0DC5CE4A294F2C9380A9135EE1F0530728A4CDA6
Certificate serial:       35AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcXOSilPLJOAqRNe4fBTByikzaY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.mft
Manifest number:          359D
Signing time:             Wed 28 Oct 2026 15:13:13 +0000
Manifest this update:     Wed 28 Oct 2026 15:13:12 +0000
Manifest next update:     Wed 04 Nov 2026 15:13:12 +0000
Files and hashes:         1: DcXOSilPLJOAqRNe4fBTByikzaY.crl (hash: AX5v10YsYFLcHDg0W7Js+vD/gI1NDvHz/x7F0+QSV4U=)
                          2: 7FE5F2CEDB9411E9832A463AC4F9AE02.roa (hash: J9d3oCMnh4MCQUF8hvG6C1s4rT5lBz2hVV4fQZpMFs4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.crl
                          rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcXOSilPLJOAqRNe4fBTByikzaY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Nov 2026 15:13:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13739 (0x35ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B4DB, serialNumber=0DC5CE4A294F2C9380A9135EE1F0530728A4CDA6
        Validity
            Not Before: Oct 28 15:13:12 2026 GMT
            Not After : Nov  4 15:13:12 2026 GMT
        Subject: CN=6ae21108-1540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:63:50:56:2c:e3:51:1d:9c:12:27:97:55:dc:
                    ea:2a:93:27:20:54:fa:ff:fe:27:be:7e:e0:30:56:
                    01:83:7c:af:c5:09:bb:cc:94:29:6f:0a:5f:88:7f:
                    a7:42:67:97:18:0f:51:c6:1a:b1:e7:87:b8:42:d2:
                    25:0b:0c:68:08:90:a1:dc:c2:e9:d2:e9:8f:a9:b2:
                    b8:3b:64:f6:8e:95:59:c6:6c:75:5f:34:43:dc:05:
                    b2:bf:a3:c2:fc:52:48:f7:e8:39:02:07:b1:d5:b3:
                    9e:7f:0d:b8:35:e7:e8:c7:23:d3:ce:c1:ec:bb:71:
                    99:8e:eb:e8:86:1d:58:0f:6a:74:b9:3d:16:f7:69:
                    b7:d7:f7:e6:a3:86:da:03:2e:20:21:18:e6:bb:8c:
                    cd:30:fe:13:11:f9:14:f3:24:1a:cc:fd:3f:72:c3:
                    f0:4a:fd:f5:b7:d9:4e:99:3a:69:fa:bc:95:d2:4d:
                    db:15:1c:4c:34:9e:99:e6:83:21:f6:4d:eb:b1:c7:
                    4a:fe:ef:16:2e:9e:e6:3c:86:97:97:71:8c:d2:17:
                    47:c3:89:1e:0d:3f:2b:88:77:15:bc:39:ae:f9:6f:
                    c8:db:e0:db:c4:92:03:2d:d8:5c:79:e2:35:34:db:
                    cf:23:1e:5b:4f:e4:17:4f:25:50:10:9d:22:89:43:
                    12:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:5E:D8:4C:73:89:FF:B5:CB:83:3F:C2:CB:B1:0C:A5:6D:AD:8B:B1
            X509v3 Authority Key Identifier:
                keyid:0D:C5:CE:4A:29:4F:2C:93:80:A9:13:5E:E1:F0:53:07:28:A4:CD:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcXOSilPLJOAqRNe4fBTByikzaY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:26:5e:6b:07:1f:10:c1:60:2a:e7:18:91:18:9c:cb:92:86:
         43:78:35:68:29:fa:7a:c0:29:64:b9:c0:0e:39:85:4e:a2:a1:
         a0:7f:91:78:c5:7b:cf:2d:c8:73:4d:68:14:3a:fe:7c:d6:69:
         e8:ed:20:0a:ec:b6:59:dc:60:3f:99:10:ac:91:ab:ca:e9:b1:
         1a:aa:3b:0d:87:ff:af:b2:a7:00:eb:eb:e1:5a:ab:03:2e:cd:
         2b:71:56:59:14:08:5e:2f:fc:3d:c3:f0:57:cb:64:66:76:2b:
         53:1f:e1:e7:88:a2:3f:3a:0a:52:70:b1:95:5a:65:09:5f:9d:
         79:9e:5c:4a:61:2f:f4:21:6c:2c:66:eb:88:76:25:83:d3:d6:
         27:86:1d:ca:ba:3d:5f:60:b1:df:60:9e:86:06:4c:85:fe:cb:
         1b:ff:c9:2f:4a:6e:7e:00:32:8f:84:96:ea:8b:ec:1b:10:8b:
         97:9a:dd:ce:ca:37:d2:a0:14:4e:c2:f8:03:2c:99:c6:0c:55:
         e5:d5:9b:20:4b:b4:03:a4:27:c8:d7:c0:8b:0b:87:96:48:32:
         c9:16:f4:7d:dc:1e:4c:12:96:66:d1:86:37:cb:76:42:30:fa:
         25:72:4c:0e:be:26:45:89:85:6b:f8:9d:e7:13:67:af:68:08:
         10:07:72:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:43:50 2026 by rpki-client