Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
File:                     dmhXuj98cotoBSWsQfp84qHwCS0.mft (raw, json)
Hash identifier:          L352857I5llbrvpxfXEtZnmmkxa+xYuFRcv4JhsgYkc=
Subject key identifier:   D7:70:21:2C:F0:AF:87:B0:CC:C0:5C:A7:EF:20:DE:47:74:9A:DD:6D
Authority key identifier: 76:68:57:BA:3F:7C:72:8B:68:05:25:AC:41:FA:7C:E2:A1:F0:09:2D
Certificate issuer:       /CN=A9148AC0/serialNumber=766857BA3F7C728B680525AC41FA7CE2A1F0092D
Certificate serial:       026A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
Manifest number:          0257
Signing time:             Wed 07 Oct 2026 02:43:46 +0000
Manifest this update:     Wed 07 Oct 2026 02:43:45 +0000
Manifest next update:     Wed 14 Oct 2026 02:43:45 +0000
Files and hashes:         1: dmhXuj98cotoBSWsQfp84qHwCS0.crl (hash: HD9mNvlciANHjYW/ZXaIM+EnX0eBJmW8CN2DwUO6xCw=)
                          2: 5C9259B631DA11EEBE28A546C4F9AE02.roa (hash: mxJVviu3Hptch60PLa/XEKp8ctUzhsRUSvChZ9yr8zw=)
                          3: 47854B9031DB11EEA02CF647C4F9AE02.roa (hash: GGFJyDNXeKU9lT+bTxvAzkG1O7Dgf7yckhosYzf3b1Y=)
                          4: 5D313B1C31DA11EEBE28A546C4F9AE02.roa (hash: 0AY62NK98rk5TGBieSIptVBTxWIVtw7dVGDsaIJvGI8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.crl
                          rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 02:43:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 618 (0x26a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148AC0, serialNumber=766857BA3F7C728B680525AC41FA7CE2A1F0092D
        Validity
            Not Before: Oct  7 02:43:45 2026 GMT
            Not After : Oct 14 02:43:45 2026 GMT
        Subject: CN=6ac5b1e2-56d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:29:dd:9b:b1:49:b0:b6:6c:47:0d:97:59:0f:
                    12:0f:f7:3e:72:be:23:6f:b6:ca:d3:67:73:d4:2d:
                    ed:c8:ec:6b:04:7f:b0:2d:b3:ba:e6:56:47:7f:3e:
                    7c:ff:a5:78:a2:86:55:be:d6:89:72:32:31:49:d8:
                    ae:fa:11:6a:22:79:1f:92:21:91:49:b8:97:1e:58:
                    4d:fd:cc:47:6e:8a:a0:a0:3e:e9:20:76:3e:59:1d:
                    8c:fc:72:7e:ee:17:94:20:b7:b9:69:cc:9f:7b:5b:
                    ab:c6:98:d6:5f:c9:17:44:af:94:f0:44:87:91:76:
                    71:b3:df:cb:44:d8:52:97:4a:6d:2a:3c:fd:78:d3:
                    7f:cf:ce:39:2a:88:ff:b1:12:16:b2:00:17:e7:fe:
                    05:5c:ba:75:44:28:47:d1:4f:a0:56:48:98:8c:98:
                    6b:94:69:c1:e5:f8:87:d1:cd:14:53:e9:11:ff:1e:
                    21:8b:97:b8:d3:53:ba:11:be:c4:8a:3c:51:0d:3a:
                    db:70:7b:ae:a4:4b:b6:c8:72:91:54:b2:05:29:26:
                    0f:3d:bc:02:d5:e0:4a:80:ac:ee:5f:24:e5:82:48:
                    e0:e6:70:ed:e1:d3:58:47:a5:75:0d:f9:16:32:43:
                    a7:b4:32:cf:87:a4:8d:e4:77:5d:a5:f7:4e:73:5c:
                    27:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:70:21:2C:F0:AF:87:B0:CC:C0:5C:A7:EF:20:DE:47:74:9A:DD:6D
            X509v3 Authority Key Identifier:
                keyid:76:68:57:BA:3F:7C:72:8B:68:05:25:AC:41:FA:7C:E2:A1:F0:09:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:ca:00:38:d2:e5:0f:e3:4a:2a:90:1f:0d:e0:b7:6b:27:31:
         78:1f:2d:ba:71:cb:08:1f:b9:ec:4d:6b:d6:2d:3e:24:1d:5e:
         54:2d:b3:5c:50:cb:1e:50:a3:13:1b:b3:80:03:67:ec:e5:e1:
         10:10:37:60:2b:0b:19:c6:0a:3b:dc:64:56:db:98:73:87:78:
         a4:ec:c1:f1:46:31:6a:18:40:75:b7:a3:88:00:cf:ad:8c:d2:
         31:32:11:1d:fd:2b:98:18:c6:33:86:cc:a9:b9:35:60:18:5f:
         92:cc:4d:ea:30:ef:f2:b3:86:9b:36:e1:0d:75:c1:84:ea:e6:
         49:4f:94:2f:92:54:e8:a7:ca:fe:65:8b:1f:14:aa:44:7b:4d:
         1a:78:f2:72:5f:5a:db:24:78:d3:df:80:34:32:27:30:1c:38:
         09:0b:6f:64:37:99:1d:99:ab:32:13:d4:4c:1e:7a:51:8e:d2:
         c0:5e:85:0d:01:df:12:70:e0:80:64:8f:7d:6a:64:c7:10:0c:
         b1:56:7c:de:db:a7:07:ca:7d:7a:68:53:57:66:1d:e7:47:71:
         dd:15:36:5b:74:a9:99:e4:44:31:7e:00:25:86:e9:13:c9:5d:
         b4:92:99:45:d3:c0:fe:ff:2e:db:eb:f1:e2:a4:cc:2a:56:95:
         9d:47:c0:a5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAmowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDhBQzAxMTAvBgNVBAUTKDc2Njg1N0JBM0Y3QzcyOEI2ODA1MjVBQzQxRkE3Q0Uy
QTFGMDA5MkQwHhcNMjYxMDA3MDI0MzQ1WhcNMjYxMDE0MDI0MzQ1WjAYMRYwFAYD
VQQDEw02YWM1YjFlMi01NmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoyndm7FJsLZsRw2XWQ8SD/c+cr4jb7bK02dz1C3tyOxrBH+wLbO65lZHfz58
/6V4ooZVvtaJcjIxSdiu+hFqInkfkiGRSbiXHlhN/cxHboqgoD7pIHY+WR2M/HJ+
7heUILe5acyfe1urxpjWX8kXRK+U8ESHkXZxs9/LRNhSl0ptKjz9eNN/z845Koj/
sRIWsgAX5/4FXLp1RChH0U+gVkiYjJhrlGnB5fiH0c0UU+kR/x4hi5e401O6Eb7E
ijxRDTrbcHuupEu2yHKRVLIFKSYPPbwC1eBKgKzuXyTlgkjg5nDt4dNYR6V1DfkW
MkOntDLPh6SN5HddpfdOc1wnAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNdwISzw
r4ewzMBcp+8g3kd0mt1tMB8GA1UdIwQYMBaAFHZoV7o/fHKLaAUlrEH6fOKh8Akt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEFDMC9FNEVENTM5NDMx
RDgxMUVFODMwMDZBNDFDNEY5QUUwMi9kbWhYdWo5OGNvdG9CU1dzUWZwODRxSHdD
UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RtaFh1ajk4Y290b0JTV3NRZnA4NHFId0NTMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OEFDMC9FNEVENTM5NDMxRDgxMUVFODMwMDZBNDFDNEY5QUUwMi9kbWhYdWo5OGNv
dG9CU1dzUWZwODRxSHdDUzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAk8oAONLlD+NKKpAfDeC3aycxeB8tunHLCB+57E1r1i0+JB1eVC2zXFDLHlCj
ExuzgANn7OXhEBA3YCsLGcYKO9xkVtuYc4d4pOzB8UYxahhAdbejiADPrYzSMTIR
Hf0rmBjGM4bMqbk1YBhfksxN6jDv8rOGmzbhDXXBhOrmSU+UL5JU6KfK/mWLHxSq
RHtNGnjycl9a2yR409+ANDInMBw4CQtvZDeZHZmrMhPUTB56UY7SwF6FDQHfEnDg
gGSPfWpkxxAMsVZ83tunB8p9emhTV2Yd50dx3RU2W3SpmeREMX4AJYbpE8ldtJKZ
RdPA/v8u2+vx4qTMKlaVnUfApQ==
-----END CERTIFICATE-----
Generated at Wed Oct 7 11:18:52 2026 by rpki-client