Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft
File:                     dK-15U8HPzwgdjJdKsf3AA4uaoY.mft (raw, json)
Hash identifier:          bKlOwCF7wJneKehsfzMYgLA7Za3Ezo/KqyP+f29UDes=
Subject key identifier:   9D:37:8F:9F:77:A5:BA:04:D3:29:54:34:C7:54:D7:84:C5:68:12:C7
Authority key identifier: 74:AF:B5:E5:4F:07:3F:3C:20:76:32:5D:2A:C7:F7:00:0E:2E:6A:86
Certificate issuer:       /CN=A916EDC2/serialNumber=74AFB5E54F073F3C2076325D2AC7F7000E2E6A86
Certificate serial:       043B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft
Manifest number:          0434
Signing time:             Sat 03 Oct 2026 00:32:41 +0000
Manifest this update:     Sat 03 Oct 2026 00:32:40 +0000
Manifest next update:     Sat 10 Oct 2026 00:32:40 +0000
Files and hashes:         1: dK-15U8HPzwgdjJdKsf3AA4uaoY.crl (hash: UrXriEf2ng7PEoZVdXNyjG+CwOrazX2xhZvqfL2SxCs=)
                          2: 5E8E08E8C26211ECBFC22B20C4F9AE02.roa (hash: C2lCkbVI1XaonZAwyhCohh9dLONbvb2hit8qWW3O4Ec=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.crl
                          rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 00:32:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1083 (0x43b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916EDC2, serialNumber=74AFB5E54F073F3C2076325D2AC7F7000E2E6A86
        Validity
            Not Before: Oct  3 00:32:40 2026 GMT
            Not After : Oct 10 00:32:40 2026 GMT
        Subject: CN=6ac04d28-018c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4c:07:b2:08:be:9e:1a:98:9e:12:a8:3a:58:
                    1d:c9:9a:37:fd:7d:d6:9b:d4:53:d5:9c:a2:0c:b3:
                    81:dc:d6:b0:34:c1:3f:7f:ec:f7:fa:41:7a:a6:02:
                    b9:19:28:ed:b8:c5:aa:35:7c:f5:99:2f:41:7d:f6:
                    a9:fa:a5:12:ec:0b:55:b9:df:60:6d:34:d6:5f:c9:
                    25:4e:72:2f:65:6f:f3:40:55:e2:f7:bb:84:cb:0f:
                    09:d3:d6:0c:58:e0:12:6c:07:93:0f:7d:fc:50:1a:
                    a2:7f:93:f1:6d:51:82:c8:62:47:67:fe:e6:17:f3:
                    09:1b:08:9f:8a:64:89:31:85:cf:94:c0:5c:43:fa:
                    fd:80:aa:96:a3:29:00:87:90:1e:3a:09:58:af:a9:
                    3a:7a:10:56:e8:d3:f5:5f:2e:09:75:de:20:ca:3f:
                    18:52:06:02:a0:00:f3:c7:8f:3c:61:6b:29:3a:05:
                    5c:ac:99:51:f4:f2:28:ee:fb:7c:38:93:cd:bb:d2:
                    26:eb:33:2b:ef:4b:47:64:21:93:6b:2f:f8:b8:6b:
                    0c:2a:f9:ad:d3:2f:5c:23:71:26:df:92:5e:1f:e3:
                    ac:f5:a1:37:ee:26:e0:ba:d0:e4:c6:aa:75:3e:67:
                    27:33:89:0f:a8:fc:76:c3:e0:59:46:19:ab:35:1d:
                    15:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:37:8F:9F:77:A5:BA:04:D3:29:54:34:C7:54:D7:84:C5:68:12:C7
            X509v3 Authority Key Identifier:
                keyid:74:AF:B5:E5:4F:07:3F:3C:20:76:32:5D:2A:C7:F7:00:0E:2E:6A:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:95:78:e8:8e:c3:71:f1:44:d8:df:97:8b:a2:88:cb:a5:e9:
         c5:12:9f:36:22:08:71:1a:1d:49:4e:05:aa:93:9b:cf:c7:0f:
         ac:ae:8d:fc:19:e3:d9:9c:e0:29:e8:e3:de:a7:7e:ce:1a:05:
         70:e7:03:79:43:70:64:19:fb:d4:c9:88:a9:d7:be:52:2c:94:
         8d:bc:86:18:de:28:42:71:26:bd:cb:7d:9d:2e:09:ea:69:1b:
         d5:4a:4f:d9:74:9c:a9:a6:29:ce:57:73:c8:f2:56:11:41:fa:
         86:38:09:cc:f6:00:4c:ab:08:fe:bd:e1:75:7e:54:02:ba:62:
         7c:6f:0c:a4:5a:73:f3:bb:53:02:5a:f2:80:0e:db:dc:94:75:
         05:c9:60:3b:f5:1f:a0:79:9b:f5:62:d9:b9:a6:22:12:ec:21:
         13:00:9c:fb:da:9a:2f:0a:b1:e7:45:27:bb:d8:0e:a8:51:bf:
         d5:19:00:d7:5c:6b:24:f5:79:bd:4c:20:39:e0:6a:ca:35:9a:
         98:af:e5:df:ae:64:ac:93:12:c5:b5:49:a1:12:9f:93:58:ac:
         41:e3:59:b9:75:54:3d:92:24:76:6c:f5:fb:89:58:26:1b:5f:
         2e:2a:0b:73:67:98:11:6a:03:9e:84:c1:e7:23:2c:df:ed:5b:
         07:77:a5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:46:18 2026 by rpki-client