Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.mft
File:                     DAmet3to0aLfVJLHMbZNVB9VmwI.mft (raw, json)
Hash identifier:          bH1mLmKmPqUmTtZU80G1476uqtEpCEqZKDJ12Q9+3LM=
Subject key identifier:   60:A5:09:AE:79:7F:0F:E8:B1:F0:7B:C2:46:13:C6:5A:58:65:C8:4F
Authority key identifier: 0C:09:9E:B7:7B:68:D1:A2:DF:54:92:C7:31:B6:4D:54:1F:55:9B:02
Certificate issuer:       /CN=A91509A4/serialNumber=0C099EB77B68D1A2DF5492C731B64D541F559B02
Certificate serial:       0401
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAmet3to0aLfVJLHMbZNVB9VmwI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.mft
Manifest number:          03F1
Signing time:             Tue 01 Sep 2026 00:25:03 +0000
Manifest this update:     Tue 01 Sep 2026 00:25:02 +0000
Manifest next update:     Tue 08 Sep 2026 00:25:02 +0000
Files and hashes:         1: DAmet3to0aLfVJLHMbZNVB9VmwI.crl (hash: 4MPGxVRQNHUHQRomiQXG0uUpcFmXEPuGi0+SJkwptLY=)
                          2: 300D92DA802811F19145777464A30FBC.roa (hash: D6zmGA6eygjoBFl8Qr1kZfq7BJzeCTU0+FvtkXhk3dg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.crl
                          rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAmet3to0aLfVJLHMbZNVB9VmwI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Sep 2026 00:20:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1025 (0x401)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91509A4, serialNumber=0C099EB77B68D1A2DF5492C731B64D541F559B02
        Validity
            Not Before: Sep  1 00:25:02 2026 GMT
            Not After : Sep  8 00:25:02 2026 GMT
        Subject: CN=6a961b5e-cf9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d6:5b:14:c0:f7:17:cb:c3:5b:82:16:c2:72:
                    4f:fe:4a:2d:86:97:c3:41:83:32:1d:41:b5:f5:1f:
                    f1:12:38:a1:cd:26:58:97:30:03:79:79:a0:98:c9:
                    92:d5:8c:7d:97:7a:1b:26:1e:98:e0:88:fa:00:c6:
                    29:0a:b8:d2:57:4d:e1:5f:89:ae:64:8c:fa:50:f9:
                    80:2b:09:f5:17:83:7d:c0:7d:de:7c:9d:5c:52:7c:
                    f4:31:62:1b:67:13:c9:42:1d:ec:28:6c:67:0e:18:
                    47:7f:20:62:98:11:f0:59:46:53:61:b6:94:c0:ec:
                    64:93:3e:c7:4f:f2:b5:f5:a9:e4:eb:96:3a:29:b3:
                    7f:85:47:25:dc:57:05:69:05:b7:e0:33:53:e9:6b:
                    22:fa:69:8b:e8:dd:87:c5:d0:50:b7:ef:9a:b5:06:
                    a2:61:3e:e7:21:08:07:11:bf:28:66:2c:59:fc:b6:
                    7f:1f:a2:5a:55:0a:59:1f:46:bc:61:b2:06:67:c1:
                    48:54:f8:e3:13:78:82:15:ad:37:6d:d1:9f:d5:9f:
                    d8:b2:44:ba:c0:c3:ab:8e:5b:dd:7d:1f:11:e1:c1:
                    da:04:53:4b:57:79:2b:f0:ee:d4:d8:02:ef:1d:69:
                    a8:91:de:02:c4:92:f5:01:2e:ac:63:0c:2a:22:40:
                    7e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:A5:09:AE:79:7F:0F:E8:B1:F0:7B:C2:46:13:C6:5A:58:65:C8:4F
            X509v3 Authority Key Identifier:
                keyid:0C:09:9E:B7:7B:68:D1:A2:DF:54:92:C7:31:B6:4D:54:1F:55:9B:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAmet3to0aLfVJLHMbZNVB9VmwI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:e6:5e:ff:c0:92:d8:30:21:b9:92:7c:f7:b5:20:de:4a:92:
         ea:24:42:19:c3:f9:33:0e:83:22:fe:f3:84:7d:0a:11:93:56:
         76:1f:86:a8:42:97:e6:8b:55:b9:86:d5:10:d2:e8:a5:00:c8:
         ae:1b:e0:7b:0f:ca:a4:75:47:be:74:e7:b7:49:11:14:4a:76:
         1a:74:ce:db:53:cf:4a:9c:40:6d:c7:f1:09:93:93:43:a4:18:
         b0:ba:b7:7e:d2:ef:a4:ff:f2:26:b7:bd:d3:0d:83:16:11:2b:
         0a:f9:f3:d0:60:b9:47:42:ae:98:aa:57:42:13:fc:b8:30:be:
         b4:a3:6d:0a:6d:c2:60:b1:ed:ca:ac:36:ad:32:d2:ee:c8:76:
         76:43:4a:47:cf:1b:b0:44:52:eb:7d:2f:a0:0f:3f:58:b1:30:
         b4:e6:a6:05:66:85:f6:4d:e5:8d:88:2f:da:b2:d6:17:e4:fa:
         c3:8e:78:8f:19:ef:d9:16:d4:a2:20:ed:f2:c8:d0:41:f3:04:
         06:88:7c:65:98:cd:18:a9:cb:10:5d:92:5f:8d:22:e1:7d:02:
         d0:d7:5f:ac:c8:af:19:43:a8:c1:50:37:ff:ab:5c:2a:49:cd:
         1f:e0:0f:ab:08:db:2d:14:d4:82:ca:59:09:e0:22:b8:46:d3:
         83:b0:55:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:07:18 2026 by rpki-client