Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/DsmozWa374HQeaCEKyY5Zf50-NA.mft
File:                     DsmozWa374HQeaCEKyY5Zf50-NA.mft (raw, json)
Hash identifier:          JtZnxsb7rwCifjMGnxMNRin7u7/4p4E5IIFLT7Sp4T4=
Subject key identifier:   03:95:83:1C:16:7A:F6:0E:0D:A9:E0:A5:BB:7B:2F:B8:8A:06:BF:68
Authority key identifier: 0E:C9:A8:CD:66:B7:EF:81:D0:79:A0:84:2B:26:39:65:FE:74:F8:D0
Certificate issuer:       /CN=A91614E3/serialNumber=0EC9A8CD66B7EF81D079A0842B263965FE74F8D0
Certificate serial:       62
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DsmozWa374HQeaCEKyY5Zf50-NA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/DsmozWa374HQeaCEKyY5Zf50-NA.mft
Manifest number:          5E
Signing time:             Sat 17 Oct 2026 08:53:12 +0000
Manifest this update:     Sat 17 Oct 2026 08:53:11 +0000
Manifest next update:     Sat 24 Oct 2026 08:53:11 +0000
Files and hashes:         1: DsmozWa374HQeaCEKyY5Zf50-NA.crl (hash: o11VdritJgMJdo1iRyg2f/2MTpePOBqPXc0GIz8zM94=)
                          2: 5A98E30A42CB11F1992134BCC5833773.roa (hash: A2UYdaAyeRv93KkABaSgrqSGjF16Qsj6+LJRZzldEFU=)
                          3: FE7346D642CC11F1A52BA276C6833773.roa (hash: tvwf4DAv3iIkKDVBaLvU4xQwNZROIguZpPcMUL1yZRw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/DsmozWa374HQeaCEKyY5Zf50-NA.crl
                          rsync://rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/DsmozWa374HQeaCEKyY5Zf50-NA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DsmozWa374HQeaCEKyY5Zf50-NA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Oct 2026 08:53:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91614E3, serialNumber=0EC9A8CD66B7EF81D079A0842B263965FE74F8D0
        Validity
            Not Before: Oct 17 08:53:11 2026 GMT
            Not After : Oct 24 08:53:11 2026 GMT
        Subject: CN=6ad33778-91e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f1:87:68:67:ec:d2:ea:e3:ef:13:07:89:d4:
                    e6:ef:8f:eb:fd:f4:fe:f8:5c:58:75:5a:1d:c6:68:
                    5b:88:50:f1:c0:ce:ad:75:7f:1c:4a:10:33:a9:f8:
                    d7:54:95:c3:8b:02:b1:50:ce:69:f5:5e:2d:f9:54:
                    f9:99:ea:f5:8b:1b:81:1a:63:c9:f4:d5:b1:a6:61:
                    33:8d:49:ea:aa:53:b8:99:44:5e:35:a1:51:af:f5:
                    50:79:77:da:d2:60:75:c0:c7:26:03:db:c7:fa:20:
                    b8:47:96:0e:a8:0d:2e:1a:e8:78:c8:4d:84:55:60:
                    2b:11:04:b5:2e:01:10:b6:25:da:15:8e:b0:9c:f2:
                    aa:76:5a:1f:5c:e7:59:d5:43:a9:c2:a8:50:6f:db:
                    3a:9a:99:ac:48:9b:9a:51:6e:df:5c:61:77:42:40:
                    f5:0c:e3:19:ec:9c:71:3d:7c:8c:fa:c0:27:e0:4f:
                    b1:7a:8b:1b:47:ec:f8:c7:fa:45:67:18:73:36:f5:
                    79:09:9c:fc:b8:7a:68:70:60:ca:9d:38:ae:e4:34:
                    36:7a:05:fd:53:64:57:c8:99:e3:2f:42:16:56:19:
                    52:9b:8f:22:8d:53:06:36:24:78:99:3a:86:0a:f1:
                    56:db:27:a5:6a:f1:d9:6c:6f:73:d0:15:bf:bc:7f:
                    71:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:95:83:1C:16:7A:F6:0E:0D:A9:E0:A5:BB:7B:2F:B8:8A:06:BF:68
            X509v3 Authority Key Identifier:
                keyid:0E:C9:A8:CD:66:B7:EF:81:D0:79:A0:84:2B:26:39:65:FE:74:F8:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/DsmozWa374HQeaCEKyY5Zf50-NA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DsmozWa374HQeaCEKyY5Zf50-NA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/DsmozWa374HQeaCEKyY5Zf50-NA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:dd:a5:87:f9:18:59:36:85:c7:7c:12:07:95:ac:d6:31:37:
         14:3d:b7:c7:8e:24:b8:4c:7f:b7:6f:05:ca:67:3f:07:de:5b:
         53:86:ed:40:a8:37:58:ef:3b:34:55:00:f5:d8:e9:82:87:0b:
         08:74:be:1f:97:e3:e5:4f:a8:a7:d0:a2:8d:c8:c1:d8:1a:52:
         ad:5f:e2:ba:ac:5a:b9:72:1d:31:f0:9d:ce:e4:dc:97:93:68:
         b0:82:ab:00:59:1f:ee:b5:8f:4c:bc:81:97:00:2d:9b:08:ff:
         9f:14:f5:2e:c2:82:23:de:bc:ae:bf:f9:f2:d7:56:2d:20:51:
         7d:b1:1f:4c:7d:e5:73:f1:c8:10:1a:3b:63:92:4a:fa:6b:fc:
         18:91:f5:93:a6:bd:a6:29:aa:91:01:9c:3b:7e:18:55:1f:f4:
         41:38:14:9b:ab:7b:f7:88:75:58:55:14:3e:e7:ee:3f:64:a9:
         e9:4c:af:dc:9c:16:8c:ab:77:28:04:05:1f:5b:a3:39:31:49:
         32:be:e6:d0:15:5b:57:08:dd:67:a3:12:0c:2d:14:b7:3e:0c:
         1c:6d:33:f1:cc:4a:2f:d5:de:d7:d6:a3:24:bc:77:e1:5a:93:
         ca:84:70:32:64:d5:aa:be:f6:5b:5f:d1:f6:73:68:55:0d:1f:
         df:e3:77:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 13:21:42 2026 by rpki-client