Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft
File:                     dKGUOXIqgzAE05VKV4ToXm6ZvME.mft (raw, json)
Hash identifier:          Oe8vUBROdYCgTpkJ8qqpESuAxx7CxC6kiYM6hMdpK8Q=
Subject key identifier:   03:4B:0D:D1:EB:E8:F1:35:21:5E:7E:AE:CF:99:B3:A6:A3:23:B0:DB
Authority key identifier: 74:A1:94:39:72:2A:83:30:04:D3:95:4A:57:84:E8:5E:6E:99:BC:C1
Certificate issuer:       /CN=A914454E/serialNumber=74A19439722A833004D3954A5784E85E6E99BCC1
Certificate serial:       0961
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dKGUOXIqgzAE05VKV4ToXm6ZvME.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft
Manifest number:          0961
Signing time:             Fri 02 Oct 2026 20:21:47 +0000
Manifest this update:     Fri 02 Oct 2026 20:21:47 +0000
Manifest next update:     Fri 09 Oct 2026 20:21:47 +0000
Files and hashes:         1: dKGUOXIqgzAE05VKV4ToXm6ZvME.crl (hash: kbT7a3zmtz8lTBqjxE2hX5jiJNT2bdmgd6gdPklX/ag=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.crl
                          rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dKGUOXIqgzAE05VKV4ToXm6ZvME.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 20:21:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2401 (0x961)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914454E, serialNumber=74A19439722A833004D3954A5784E85E6E99BCC1
        Validity
            Not Before: Oct  2 20:21:47 2026 GMT
            Not After : Oct  9 20:21:47 2026 GMT
        Subject: CN=6ac0125b-8fb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a0:e0:81:c1:36:df:6c:f4:26:dd:6d:67:b7:
                    1d:0e:19:da:c4:ce:22:06:e7:30:b3:2b:2d:d5:2c:
                    04:e9:0c:79:2f:d5:d1:91:13:b0:a2:3a:e2:fa:df:
                    4f:bb:3c:88:9a:55:bf:a0:17:d0:f2:9d:13:53:f3:
                    78:13:3c:1c:b8:cc:53:54:69:4f:b2:34:3b:2c:4d:
                    35:29:9c:e1:6a:da:45:6f:3a:ba:e7:ea:d0:0f:20:
                    56:08:44:35:a1:cf:c0:a7:b7:11:96:00:21:2f:2a:
                    b2:34:15:ad:58:96:94:cf:d3:fe:c7:da:a5:bb:90:
                    69:31:c9:fa:21:ca:59:f2:78:62:a8:43:dd:55:cf:
                    56:8c:1d:8a:bb:bd:5f:12:30:76:35:5b:57:e1:e8:
                    7f:63:aa:38:55:12:74:f5:e6:bc:e9:61:d7:1c:ac:
                    5c:ca:45:e7:58:0f:f3:f9:6a:7c:4d:d3:af:26:67:
                    bd:2a:1e:63:a3:36:fc:36:04:08:d2:5c:f9:25:97:
                    00:3d:45:ce:66:0b:10:81:0e:58:6e:5c:c6:73:ab:
                    c4:12:17:48:ee:42:f5:47:7f:9f:ad:c0:4b:35:b3:
                    ba:22:f7:05:5a:7c:9b:ff:5a:69:9f:bd:03:32:25:
                    c7:e2:f6:48:3b:49:60:93:87:2e:8f:7c:46:b9:f1:
                    0c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:4B:0D:D1:EB:E8:F1:35:21:5E:7E:AE:CF:99:B3:A6:A3:23:B0:DB
            X509v3 Authority Key Identifier:
                keyid:74:A1:94:39:72:2A:83:30:04:D3:95:4A:57:84:E8:5E:6E:99:BC:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dKGUOXIqgzAE05VKV4ToXm6ZvME.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:b2:48:86:70:f0:0c:82:41:20:c5:5b:4e:c6:43:5f:f8:01:
         f3:4a:77:68:3e:0c:9e:5d:39:c0:25:38:93:ef:ad:68:9c:b0:
         c9:34:ab:4d:d2:a2:b2:8b:56:63:88:cb:70:f8:1b:86:41:98:
         5b:3a:cc:7f:54:9e:40:d6:56:8a:d4:1e:ef:08:4a:52:0e:df:
         ae:e9:db:11:b7:38:34:d5:09:ae:9f:ca:b9:67:9b:19:58:84:
         5f:2a:a4:3d:b6:28:bc:c0:47:2d:da:c1:61:f0:b7:c6:3c:a2:
         51:b8:e4:de:f0:c9:af:d5:db:7f:fd:10:e2:13:83:c6:ca:3c:
         55:c2:1f:69:b5:61:ac:09:aa:ee:e1:dd:aa:13:c1:1a:2b:27:
         78:a2:18:30:5b:cc:bd:b6:09:e0:a4:55:0f:5d:0e:be:0e:5a:
         81:60:97:fd:d8:91:e5:c4:bf:5e:5a:42:f8:60:ac:1f:d2:2b:
         50:27:8b:61:39:a4:42:2e:82:af:e8:be:5d:cd:f6:f9:45:07:
         51:97:a7:b7:19:5d:f9:21:0c:20:30:da:6d:c9:c9:4a:16:95:
         85:d6:20:90:17:05:fb:9c:6c:5f:4e:a5:aa:25:ec:d5:73:25:
         45:14:32:89:11:9f:92:1b:c0:c5:72:ff:cb:f4:11:a9:65:17:
         f9:70:fe:d7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDQ1NEUxMTAvBgNVBAUTKDc0QTE5NDM5NzIyQTgzMzAwNEQzOTU0QTU3ODRFODVF
NkU5OUJDQzEwHhcNMjYxMDAyMjAyMTQ3WhcNMjYxMDA5MjAyMTQ3WjAYMRYwFAYD
VQQDEw02YWMwMTI1Yi04ZmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmqDggcE232z0Jt1tZ7cdDhnaxM4iBucwsyst1SwE6Qx5L9XRkROwojri+t9P
uzyImlW/oBfQ8p0TU/N4EzwcuMxTVGlPsjQ7LE01KZzhatpFbzq65+rQDyBWCEQ1
oc/Ap7cRlgAhLyqyNBWtWJaUz9P+x9qlu5BpMcn6IcpZ8nhiqEPdVc9WjB2Ku71f
EjB2NVtX4eh/Y6o4VRJ09ea86WHXHKxcykXnWA/z+Wp8TdOvJme9Kh5jozb8NgQI
0lz5JZcAPUXOZgsQgQ5YblzGc6vEEhdI7kL1R3+frcBLNbO6IvcFWnyb/1ppn70D
MiXH4vZIO0lgk4cuj3xGufEMXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFANLDdHr
6PE1IV5+rs+Zs6ajI7DbMB8GA1UdIwQYMBaAFHShlDlyKoMwBNOVSleE6F5umbzB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDU0RS8yQUY5REJCMEM0
RDUxMUVBODAyMUE3MThDNEY5QUUwMi9kS0dVT1hJcWd6QUUwNVZLVjRUb1htNlp2
TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RLR1VPWElxZ3pBRTA1VktWNFRvWG02WnZNRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NDU0RS8yQUY5REJCMEM0RDUxMUVBODAyMUE3MThDNEY5QUUwMi9kS0dVT1hJcWd6
QUUwNVZLVjRUb1htNlp2TUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA2rJIhnDwDIJBIMVbTsZDX/gB80p3aD4Mnl05wCU4k++taJywyTSrTdKisotW
Y4jLcPgbhkGYWzrMf1SeQNZWitQe7whKUg7frunbEbc4NNUJrp/KuWebGViEXyqk
PbYovMBHLdrBYfC3xjyiUbjk3vDJr9Xbf/0Q4hODxso8VcIfabVhrAmq7uHdqhPB
GisneKIYMFvMvbYJ4KRVD10Ovg5agWCX/diR5cS/XlpC+GCsH9IrUCeLYTmkQi6C
r+i+Xc32+UUHUZentxld+SEMIDDabcnJShaVhdYgkBcF+5xsX06lqiXs1XMlRRQy
iRGfkhvAxXL/y/QRqWUX+XD+1w==
-----END CERTIFICATE-----
Generated at Sun Oct 4 17:38:14 2026 by rpki-client