Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.mft
File:                     DAmet3to0aLfVJLHMbZNVB9VmwI.mft (raw, json)
Hash identifier:          p98gt/gNebm9xla6asrr3wAXYd7FwePOdJG63/hpgwo=
Subject key identifier:   FE:FB:08:8C:8E:44:F5:04:36:86:C8:FE:6E:DA:5C:FF:22:50:E8:9F
Authority key identifier: 0C:09:9E:B7:7B:68:D1:A2:DF:54:92:C7:31:B6:4D:54:1F:55:9B:02
Certificate issuer:       /CN=A91509A4/serialNumber=0C099EB77B68D1A2DF5492C731B64D541F559B02
Certificate serial:       0418
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAmet3to0aLfVJLHMbZNVB9VmwI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.mft
Manifest number:          0408
Signing time:             Sat 17 Oct 2026 00:38:01 +0000
Manifest this update:     Sat 17 Oct 2026 00:38:00 +0000
Manifest next update:     Sat 24 Oct 2026 00:38:00 +0000
Files and hashes:         1: DAmet3to0aLfVJLHMbZNVB9VmwI.crl (hash: MavBjHxMM2x3PBAB32h47Rh+sdmpRBL+7v0MRT0SIck=)
                          2: 300D92DA802811F19145777464A30FBC.roa (hash: D6zmGA6eygjoBFl8Qr1kZfq7BJzeCTU0+FvtkXhk3dg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.crl
                          rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAmet3to0aLfVJLHMbZNVB9VmwI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Oct 2026 00:38:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1048 (0x418)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91509A4, serialNumber=0C099EB77B68D1A2DF5492C731B64D541F559B02
        Validity
            Not Before: Oct 17 00:38:00 2026 GMT
            Not After : Oct 24 00:38:00 2026 GMT
        Subject: CN=6ad2c369-6e93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c6:8b:4f:79:ec:6c:a5:8d:1a:a0:73:0d:eb:
                    72:92:18:3a:d4:7d:95:6d:5b:84:f6:d1:22:aa:43:
                    4a:a5:9f:d6:aa:e1:8d:20:84:cd:5a:80:21:6e:96:
                    79:3a:27:e2:25:cf:d5:ef:2a:e8:15:e8:26:ee:7b:
                    f5:bb:16:50:4c:1b:56:1b:c3:9e:54:89:8f:18:d1:
                    81:4e:23:23:f7:86:97:36:52:a1:b8:43:79:4e:7f:
                    da:98:e3:e2:10:c6:3e:84:26:a7:3a:36:cb:61:bd:
                    25:53:fd:50:44:67:fd:ad:fa:16:78:7d:15:a8:7f:
                    ea:87:87:6c:c4:21:ef:3d:1c:da:db:20:37:99:65:
                    6c:76:1d:27:f2:ea:65:33:9e:81:ed:37:50:67:3a:
                    de:26:12:64:74:be:fb:95:63:c4:f6:13:a7:c7:bc:
                    23:29:91:23:d8:62:ec:86:ca:dc:54:2e:a9:1f:6f:
                    c8:a8:1a:6d:c0:34:f6:17:21:30:fa:6f:99:07:58:
                    3e:f4:6b:60:e4:e5:a0:bb:02:aa:30:86:f6:ad:da:
                    52:57:2b:1e:77:01:1a:7c:fc:74:c6:f8:15:05:35:
                    ad:7a:12:5e:2f:82:ee:06:53:36:77:df:48:98:af:
                    e3:6a:21:d9:45:16:3f:1f:67:39:a6:fb:52:19:10:
                    a7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:FB:08:8C:8E:44:F5:04:36:86:C8:FE:6E:DA:5C:FF:22:50:E8:9F
            X509v3 Authority Key Identifier:
                keyid:0C:09:9E:B7:7B:68:D1:A2:DF:54:92:C7:31:B6:4D:54:1F:55:9B:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAmet3to0aLfVJLHMbZNVB9VmwI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:b9:bc:ae:13:6f:45:19:01:7b:36:9a:3b:0e:f8:cc:a6:e5:
         05:57:0a:63:d2:8f:55:12:7c:04:83:64:33:dc:7c:df:2f:f9:
         57:bd:aa:00:ac:15:50:92:3a:08:4b:e7:04:8b:8b:2d:08:6f:
         a7:fa:66:24:9e:6d:70:b1:d0:c4:5b:b9:24:52:7f:1c:1f:c2:
         e6:07:69:5b:18:46:13:61:91:d4:f6:05:6c:5e:ce:13:17:6c:
         47:79:c4:da:93:a2:a8:4b:4c:95:fc:ef:72:cb:b4:45:6f:c1:
         66:9b:64:31:97:ab:e0:63:8e:31:86:1c:8e:50:c7:02:c9:5c:
         d7:64:fb:69:c5:67:9d:95:75:42:b7:23:e7:eb:ba:9a:88:81:
         3d:1a:b6:df:93:00:6f:8b:e0:9f:01:db:0b:f4:fd:1b:c9:43:
         19:28:32:b3:99:d9:61:8f:79:a2:14:40:40:e5:cd:b4:54:63:
         b9:27:42:43:33:0e:34:58:ba:fc:59:64:6a:6b:46:32:02:be:
         38:e5:a2:2e:15:83:3b:3f:d6:ca:f3:29:e9:17:31:96:20:84:
         1e:7a:e4:72:f9:d1:30:85:7d:a2:98:49:bd:00:3d:3e:e6:2b:
         08:9f:c0:3a:e7:83:ee:e3:ee:cb:01:c6:99:92:5b:a8:fb:37:
         b4:a5:74:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 20:59:59 2026 by rpki-client