Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft
File:                     DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft (raw, json)
Hash identifier:          B0jhv7pveVbI8EG0N9n7BwvgrbXCHc8MrgqI0ooHADM=
Subject key identifier:   DE:27:61:F1:FB:44:D1:AB:2F:51:18:24:6B:7E:C1:23:D0:14:51:59
Authority key identifier: 0D:E5:96:CB:2C:60:CB:75:7D:B8:F4:0E:B8:6F:24:76:52:C1:3A:30
Certificate issuer:       /CN=A9135033/serialNumber=0DE596CB2C60CB757DB8F40EB86F247652C13A30
Certificate serial:       0E2D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeWWyyxgy3V9uPQOuG8kdlLBOjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft
Manifest number:          0E19
Signing time:             Wed 14 Oct 2026 17:56:13 +0000
Manifest this update:     Wed 14 Oct 2026 17:56:12 +0000
Manifest next update:     Wed 21 Oct 2026 17:56:12 +0000
Files and hashes:         1: DeWWyyxgy3V9uPQOuG8kdlLBOjA.crl (hash: ecHWbq8I3wF0SOprFFKsxIb0r6nUb6BWNbY25Gvx+as=)
                          2: 2328656A840211EEB9348E11C4F9AE02.roa (hash: AJ7U14HstgqbbA37ZAEyjfsIrPGL23cFMb8Jhil555M=)
                          3: 29E38708B6DC11F1ABAE44C35911F970.roa (hash: hVeqKJzrVGxJ3NNY0BfqeBXzVsvx+nTJK5T5DlTsjmY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.crl
                          rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeWWyyxgy3V9uPQOuG8kdlLBOjA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Oct 2026 17:56:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3629 (0xe2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135033, serialNumber=0DE596CB2C60CB757DB8F40EB86F247652C13A30
        Validity
            Not Before: Oct 14 17:56:12 2026 GMT
            Not After : Oct 21 17:56:12 2026 GMT
        Subject: CN=6acfc23d-71a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7a:49:24:d3:2c:9a:11:15:35:0c:da:ae:5b:
                    3c:57:25:50:f2:62:b1:1f:bb:e4:bc:89:4a:03:c1:
                    6e:fe:73:71:1f:ea:cc:e5:d6:9f:18:99:81:bc:51:
                    18:b1:89:7d:0f:ce:89:0d:f1:5d:dc:0b:fb:a1:21:
                    4e:cc:b4:ba:15:58:f3:e5:9a:dc:1d:2b:e2:07:62:
                    96:82:53:c7:54:c4:19:48:96:d8:51:88:c7:91:f3:
                    d1:26:67:a9:50:7a:c6:1d:d9:1f:53:65:ac:34:af:
                    e0:2c:3a:ce:85:b7:0e:14:21:c0:ae:73:82:dc:3d:
                    53:a1:33:87:40:44:45:61:f7:e7:81:58:cc:d7:7a:
                    2d:b2:ea:2b:e7:b9:d2:3f:fe:9b:73:0e:17:f3:3e:
                    1c:54:ce:e8:34:44:bd:a5:e3:ed:14:bd:85:13:86:
                    7f:47:ae:57:0a:2e:b2:e2:dd:cd:21:5d:cb:d0:01:
                    22:c6:59:71:22:f4:0a:f2:a6:f7:a4:a7:b9:15:c7:
                    ed:75:c5:cb:20:aa:58:87:d6:74:b7:ce:b1:7d:43:
                    88:e4:cf:4a:ee:6d:de:66:d2:48:61:e1:9b:80:1c:
                    65:86:ba:e9:4e:38:33:a7:4d:a9:dc:8c:14:d5:c8:
                    b8:92:85:6d:f3:86:84:33:f8:e6:a0:7f:f3:bb:de:
                    e6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:27:61:F1:FB:44:D1:AB:2F:51:18:24:6B:7E:C1:23:D0:14:51:59
            X509v3 Authority Key Identifier:
                keyid:0D:E5:96:CB:2C:60:CB:75:7D:B8:F4:0E:B8:6F:24:76:52:C1:3A:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeWWyyxgy3V9uPQOuG8kdlLBOjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:96:af:3b:d2:82:1b:e4:6e:b2:d8:33:b2:1f:d5:6c:d8:65:
         bc:36:37:ea:26:ef:80:11:b5:5c:02:55:7f:6d:b2:8c:67:c0:
         2c:73:dc:c1:79:11:f7:3f:e9:7f:ec:0b:82:49:37:d2:6b:f6:
         1f:e9:2e:5b:6c:57:53:90:56:c1:d3:6e:4e:e8:03:b2:ac:9b:
         74:c9:5f:1b:5f:90:c9:d0:43:61:1b:4a:3e:76:76:d5:0c:02:
         80:ae:80:4c:fe:eb:25:b5:06:c3:58:11:dc:14:cd:e5:5a:06:
         68:f6:f9:06:b9:8c:d9:64:fc:92:ec:55:3c:34:d0:03:6b:e8:
         4c:eb:0f:cc:99:b3:4c:85:83:ff:87:3c:31:d5:69:5a:d0:67:
         f5:f2:f4:b7:7b:32:bd:89:ca:5c:8e:6a:b7:4e:b7:a6:bc:56:
         99:d3:ac:1a:90:4b:ed:de:f0:13:4e:e9:5f:d5:1c:f2:3f:5e:
         be:a8:a4:4f:b2:21:03:75:8c:b6:c5:0e:e6:cc:ad:f5:a7:ad:
         1e:b7:ec:17:6c:7b:e9:cc:e5:cf:05:a7:d4:7f:74:07:85:e9:
         c7:96:4e:5a:e4:57:f9:e6:fb:44:23:55:cb:cf:1b:26:31:c5:
         9f:db:6a:94:bf:d6:b1:95:e2:b6:d2:4a:ea:7f:c5:a4:76:99:
         f1:13:b5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 20:26:57 2026 by rpki-client