Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.mft
File:                     rdsr88QYJtbQ--jSvy8FLZil2Uk.mft (raw, json)
Hash identifier:          vMm1ixARz5p5MLA4yNBy0/TcgN/23I4F6yUsyLfHGsA=
Subject key identifier:   C7:13:06:FD:90:FA:4E:21:99:A6:15:1E:B8:B7:91:B5:69:CF:24:C9
Authority key identifier: AD:DB:2B:F3:C4:18:26:D6:D0:FB:E8:D2:BF:2F:05:2D:98:A5:D9:49
Certificate issuer:       /CN=A91689C8/serialNumber=ADDB2BF3C41826D6D0FBE8D2BF2F052D98A5D949
Certificate serial:       0123
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdsr88QYJtbQ--jSvy8FLZil2Uk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.mft
Manifest number:          03DA
Signing time:             Sat 03 Oct 2026 01:57:11 +0000
Manifest this update:     Sat 03 Oct 2026 01:57:10 +0000
Manifest next update:     Sat 10 Oct 2026 01:57:10 +0000
Files and hashes:         1: rdsr88QYJtbQ--jSvy8FLZil2Uk.crl (hash: ULtB0SgsQIkMPj7EomVv3wASUJ+5POxa9B8SofAPxeU=)
                          2: 3BB70A86092211F08BA72686C4F9AE02.roa (hash: n2/dWwwbsPVQvjLILKjQ6cAG3MMBLfAzkKw6aR2yhc0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.crl
                          rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdsr88QYJtbQ--jSvy8FLZil2Uk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 01:57:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 291 (0x123)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91689C8, serialNumber=ADDB2BF3C41826D6D0FBE8D2BF2F052D98A5D949
        Validity
            Not Before: Oct  3 01:57:10 2026 GMT
            Not After : Oct 10 01:57:10 2026 GMT
        Subject: CN=6ac060f7-2f46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fe:b3:96:83:05:15:a4:f2:c4:70:f1:e5:c5:
                    87:58:57:b7:12:68:cf:26:18:78:a7:0d:29:fa:91:
                    42:b8:06:08:ea:7d:fe:4a:96:4a:b7:0c:b8:cf:b2:
                    16:f6:0a:8e:6a:a6:2a:c5:f6:0b:e1:cc:1c:fc:89:
                    76:a3:2c:18:a8:41:e6:63:77:1d:34:c7:cc:7f:ec:
                    34:c4:61:d7:5a:c9:d1:94:19:ed:6c:15:c7:8e:9b:
                    0a:62:21:15:77:40:89:0b:74:3a:89:31:ab:0a:95:
                    ae:cf:36:70:5b:6c:95:e5:78:92:e6:53:96:84:fa:
                    28:90:8e:cd:36:68:42:d2:f0:16:a9:e8:ae:54:0c:
                    5a:71:1f:2f:8f:81:71:7b:81:90:73:90:c8:bb:e4:
                    27:72:b2:9f:1b:8f:bd:8e:9b:11:dd:98:39:06:b7:
                    0c:ab:dd:6f:df:a2:64:4b:f6:d3:68:37:fe:77:f4:
                    95:1b:e2:af:c3:9e:ea:ec:a9:34:c2:9c:2e:c7:7d:
                    fa:71:ca:1b:3c:69:ba:d2:a5:c2:7b:f7:cb:84:6b:
                    52:d9:20:7e:bc:11:64:ba:8c:6f:8c:83:e9:a7:04:
                    10:f2:8e:ce:ec:eb:59:f2:b5:c3:60:03:88:d5:fe:
                    6c:75:db:1d:2b:02:d7:7e:16:b1:87:56:76:f5:39:
                    c5:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:13:06:FD:90:FA:4E:21:99:A6:15:1E:B8:B7:91:B5:69:CF:24:C9
            X509v3 Authority Key Identifier:
                keyid:AD:DB:2B:F3:C4:18:26:D6:D0:FB:E8:D2:BF:2F:05:2D:98:A5:D9:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdsr88QYJtbQ--jSvy8FLZil2Uk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:d4:64:a5:e1:09:b2:cd:0f:a2:a1:7a:ad:1a:b0:6d:86:01:
         0a:6a:d4:51:a1:79:a2:b3:69:03:a3:87:44:86:a1:45:71:9c:
         73:f4:ab:d9:92:45:cf:7b:ad:8b:fe:75:48:c1:15:31:00:fc:
         9d:c6:ce:b2:6c:20:67:79:8c:3a:e2:86:45:6c:c6:53:98:12:
         6e:71:ec:f9:46:67:ce:09:e8:c7:46:e1:73:ef:5a:df:6b:69:
         5c:1a:0e:17:02:b0:f8:05:64:99:67:f3:df:f6:11:25:87:32:
         5c:f5:d1:0a:bb:0a:ef:a1:2e:bf:d7:58:cc:82:bd:bc:b7:b3:
         69:f9:15:7f:0a:8a:54:30:bc:37:33:a0:ee:03:fd:c9:17:91:
         15:dc:b6:c9:ce:3a:42:33:90:cb:60:d9:b5:3b:94:35:55:5f:
         ea:de:3e:38:aa:8f:3e:15:3c:5f:57:76:48:82:cb:b5:91:c2:
         a2:f0:c4:25:1d:0e:72:3b:37:96:f6:69:56:ce:b2:99:e4:77:
         71:e0:19:01:f2:c9:d9:77:7a:ad:c3:f2:c5:c7:4a:ec:a7:70:
         10:61:3e:c2:a6:5d:56:21:cc:03:9e:db:ee:5a:c0:18:0c:7c:
         99:bb:68:fc:c1:45:f3:1b:78:9b:5f:cc:c6:f6:f8:23:de:2e:
         26:5b:6f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:59:10 2026 by rpki-client