Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft
File:                     dK62Py8dqVfWWCCWT_ed8PWTgAw.mft (raw, json)
Hash identifier:          uGH3M+trb7S75z+UYqJkQW9BHcMJbQd0sANxbfbOlHk=
Subject key identifier:   C2:97:1D:54:A5:B2:C3:D4:86:25:71:7C:4F:DF:BC:F2:BB:49:FC:BD
Authority key identifier: 74:AE:B6:3F:2F:1D:A9:57:D6:58:20:96:4F:F7:9D:F0:F5:93:80:0C
Certificate issuer:       /CN=A914661C/serialNumber=74AEB63F2F1DA957D65820964FF79DF0F593800C
Certificate serial:       03B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft
Manifest number:          036D
Signing time:             Sun 01 Nov 2026 01:37:08 +0000
Manifest this update:     Sun 01 Nov 2026 01:37:07 +0000
Manifest next update:     Sun 08 Nov 2026 01:37:07 +0000
Files and hashes:         1: dK62Py8dqVfWWCCWT_ed8PWTgAw.crl (hash: 8iPm66aOu+r2WrDIKyhEYVOYAKUvyP4jKfhU+pm2NOI=)
                          2: BAB6F18CC98F11F1BE89D5246211F970.roa (hash: +5gDZUyO7W1ca+VApcEfrvU3T22UADBqHypNIqhhFrA=)
                          3: B3965064C98F11F18242C4016211F970.roa (hash: M+Hd182BXg5n33G249QUEal/eIUIE2c2D+daU1AipsI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.crl
                          rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Nov 2026 01:37:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 949 (0x3b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914661C, serialNumber=74AEB63F2F1DA957D65820964FF79DF0F593800C
        Validity
            Not Before: Nov  1 01:37:07 2026 GMT
            Not After : Nov  8 01:37:07 2026 GMT
        Subject: CN=6ae697c4-29a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:03:8d:0f:9e:7a:30:19:79:e6:5e:14:31:f9:
                    4b:26:c6:a3:4a:17:22:b8:49:01:df:69:ba:6a:9c:
                    4f:05:81:96:79:2a:40:f4:5f:bd:49:ba:aa:85:2c:
                    cb:50:24:ed:32:e4:97:b1:d9:35:e2:4c:b1:3c:ba:
                    00:56:ea:e9:4e:3a:5f:55:17:94:a4:ab:c2:02:9e:
                    67:e1:10:ac:26:44:d5:4e:ad:2c:21:d7:35:ae:a4:
                    35:01:73:87:f1:9c:44:10:fd:d3:1d:c5:90:3d:84:
                    25:60:97:7e:5a:e4:f7:c6:02:96:4e:71:95:38:a7:
                    7e:7b:44:20:70:01:ae:5a:59:8f:7f:68:ea:bd:7d:
                    00:b7:75:74:34:25:9f:44:fb:b5:b5:f3:88:c4:d1:
                    b2:d3:84:47:c6:81:eb:c6:5f:0d:0b:60:74:b2:81:
                    c4:d2:b5:e8:fb:bd:df:0b:7b:4b:2a:e3:dc:e2:fa:
                    7e:17:28:c3:f4:be:64:82:ba:cb:9f:a5:b1:72:ba:
                    b6:cb:fd:27:4c:51:a1:1d:5f:95:6b:9f:6e:a7:5f:
                    d1:89:79:43:fd:52:fc:c7:d6:cb:f0:73:d9:e5:2e:
                    d3:79:8b:84:09:eb:7c:18:70:0d:a1:8b:9f:7a:07:
                    f0:4b:cc:fd:99:0d:b8:bf:9e:e0:b9:5c:d8:56:71:
                    c2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:97:1D:54:A5:B2:C3:D4:86:25:71:7C:4F:DF:BC:F2:BB:49:FC:BD
            X509v3 Authority Key Identifier:
                keyid:74:AE:B6:3F:2F:1D:A9:57:D6:58:20:96:4F:F7:9D:F0:F5:93:80:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:f0:7b:31:9a:ea:3f:99:d4:8a:34:3e:03:02:1e:8e:95:95:
         a0:98:2f:35:97:45:fa:98:03:0f:c2:4e:91:51:42:d1:ef:b2:
         9c:14:9a:e1:07:af:12:52:45:0e:87:fd:b9:ca:20:48:4f:68:
         48:ca:0d:53:be:2b:ad:a4:55:5b:6c:0f:d4:bd:71:ae:98:fe:
         6b:f2:1e:55:6f:2b:78:eb:bd:c8:f2:ff:31:1e:97:b9:cf:a2:
         d2:aa:89:a9:a2:e5:52:e8:56:68:bf:ce:87:f6:ee:0a:13:5e:
         06:69:ae:23:2b:f6:4d:6d:b4:35:7f:fb:b5:25:a8:f5:b8:13:
         40:61:db:1a:a5:de:0b:b9:b5:8d:ad:3f:b2:04:85:7c:81:dd:
         71:8d:cc:96:77:8b:ff:f0:6c:1d:b1:67:f6:d5:ac:6f:52:f8:
         60:96:1a:2c:49:eb:12:b2:85:93:8e:61:82:ea:b8:0e:c6:af:
         f1:c5:14:fb:fa:b9:4a:39:37:8b:12:53:97:b9:91:70:db:09:
         e1:61:4c:53:b3:df:4e:25:aa:8d:76:a0:b5:75:2a:83:2b:1b:
         f3:1f:6a:be:bf:9f:3d:9b:c9:b7:89:a3:cd:f8:82:84:f7:43:
         e4:51:73:fc:dd:9e:ec:f9:57:4f:5f:ca:a2:c1:4c:86:68:40:
         ef:6f:be:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 08:27:59 2026 by rpki-client