Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.mft
File:                     1dDY4fA9UQCIn0GApl9VCg1YC4U.mft (raw, json)
Hash identifier:          o1tDGbx7sURWZGpPkdTLr2KMFxCETO07rgisfBUGDpU=
Subject key identifier:   5E:7E:B1:1F:B8:3E:C4:E0:4D:B6:AF:5F:AA:95:AA:88:9C:B7:CE:7B
Authority key identifier: D5:D0:D8:E1:F0:3D:51:00:88:9F:41:80:A6:5F:55:0A:0D:58:0B:85
Certificate issuer:       /CN=A91647ED/serialNumber=D5D0D8E1F03D5100889F4180A65F550A0D580B85
Certificate serial:       B4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1dDY4fA9UQCIn0GApl9VCg1YC4U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.mft
Manifest number:          AC
Signing time:             Wed 07 Oct 2026 07:46:00 +0000
Manifest this update:     Wed 07 Oct 2026 07:45:59 +0000
Manifest next update:     Wed 14 Oct 2026 07:45:59 +0000
Files and hashes:         1: 1dDY4fA9UQCIn0GApl9VCg1YC4U.crl (hash: +sHO01tjfLklnRlvNnt7+dCnXmp+26+vD2pYWaOMLZg=)
                          2: F3D0F394A9E811F1B4B821653A11F970.roa (hash: Ke4nsI9PbT1sUSAw9ynvVPd9L5zGagRzSrYV1iiyUT0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.crl
                          rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1dDY4fA9UQCIn0GApl9VCg1YC4U.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 07:45:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 180 (0xb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91647ED, serialNumber=D5D0D8E1F03D5100889F4180A65F550A0D580B85
        Validity
            Not Before: Oct  7 07:45:59 2026 GMT
            Not After : Oct 14 07:45:59 2026 GMT
        Subject: CN=6ac5f8b7-b5a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:38:c1:d0:d8:59:fa:6a:aa:28:d6:89:54:db:
                    a3:e1:83:9c:95:c7:92:94:35:d5:53:c3:d5:71:58:
                    57:33:18:34:f5:85:01:76:64:06:30:22:36:11:4e:
                    c9:49:bd:ef:9e:6f:12:ef:cf:03:a2:06:77:83:4a:
                    10:f3:52:59:f0:c1:da:ef:fe:ba:52:bc:fd:12:1c:
                    89:5c:bb:60:c5:e9:9e:71:3d:c4:25:4e:cc:88:f6:
                    3a:0e:4f:3b:d8:46:4b:11:12:f5:18:ea:6f:0b:fc:
                    71:9f:f8:cd:91:bc:3e:8f:2e:be:15:f5:12:66:3b:
                    f5:15:93:e5:cb:2c:b5:50:ad:39:ad:6f:8f:d7:b2:
                    56:ff:80:91:6a:33:e0:d2:4f:a8:d3:3e:c7:b6:3c:
                    8e:f8:e5:2a:ac:26:a7:a7:58:ee:ec:04:ec:58:eb:
                    9d:b2:b3:63:05:6a:cf:ee:79:9a:ca:0c:98:cc:9e:
                    6c:9b:13:e2:5e:6c:d9:30:92:7d:5c:fa:b8:da:6d:
                    df:86:6a:5e:37:9a:2b:9f:07:91:bd:c4:66:8b:f6:
                    aa:c9:c9:ee:27:e1:ab:90:38:33:70:e8:87:a0:01:
                    d2:db:6b:9c:f9:bd:07:df:9a:a1:13:c0:89:4f:ff:
                    8a:e5:0f:ba:5b:c1:be:9f:05:3c:c5:2f:66:13:f4:
                    ed:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:7E:B1:1F:B8:3E:C4:E0:4D:B6:AF:5F:AA:95:AA:88:9C:B7:CE:7B
            X509v3 Authority Key Identifier:
                keyid:D5:D0:D8:E1:F0:3D:51:00:88:9F:41:80:A6:5F:55:0A:0D:58:0B:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1dDY4fA9UQCIn0GApl9VCg1YC4U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:b0:39:22:d6:0d:bc:de:ca:ff:02:32:f5:9f:57:3d:54:9c:
         6c:0b:bb:e6:a1:7c:f6:89:f8:b9:f4:d0:3f:58:21:13:d5:64:
         22:1e:dc:3e:e3:31:51:8f:d8:c3:1b:82:34:33:82:c9:d0:be:
         5d:cd:b6:3b:c6:48:b4:01:bb:10:da:bd:40:2f:45:d0:8f:ca:
         93:2e:5a:f0:ff:00:a0:46:84:c1:c5:2f:88:c0:a6:18:3e:c5:
         0f:57:0c:96:1f:ac:12:a5:be:95:de:55:ad:f4:43:98:7a:2b:
         2a:b9:b5:dc:f5:be:62:8c:4d:d8:cb:c6:0f:bd:8a:df:52:57:
         43:91:2d:c3:25:d6:62:64:b8:2c:94:36:5b:12:90:55:05:25:
         d8:e9:5f:fa:fa:1a:c6:88:b9:34:84:ab:54:95:0a:a4:59:37:
         9f:d1:88:13:a3:6d:33:39:4d:22:b9:f7:e4:fb:45:8f:61:e5:
         7e:84:a4:f3:20:ba:07:eb:b3:20:14:bd:61:86:ff:02:89:75:
         80:20:14:47:5b:fa:23:cf:43:85:79:83:0a:07:cb:95:30:42:
         6b:ec:0d:fa:0e:3f:09:21:6c:af:4a:e9:c1:cd:53:ae:90:11:
         5c:cc:2a:3b:f3:4b:b8:63:e6:3f:0c:aa:41:bf:98:bb:c5:b0:
         1a:f0:4d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:04:31 2026 by rpki-client