Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft
File:                     dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft (raw, json)
Hash identifier:          KkaKKqtZQYb8K7tk4HcViyIFn475sHU7W6UVuKinUHY=
Subject key identifier:   35:9A:20:44:2B:FD:F0:11:B7:97:92:3A:EE:F3:7C:A5:75:CF:59:FF
Authority key identifier: 74:A1:16:69:C4:3E:53:B0:F2:1D:4B:41:3F:92:D9:EA:91:31:55:03
Certificate issuer:       /CN=A9178424/serialNumber=74A11669C43E53B0F21D4B413F92D9EA91315503
Certificate serial:       01BC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dKEWacQ-U7DyHUtBP5LZ6pExVQM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft
Manifest number:          01B5
Signing time:             Sun 25 Oct 2026 04:25:11 +0000
Manifest this update:     Sun 25 Oct 2026 04:25:11 +0000
Manifest next update:     Sun 01 Nov 2026 04:25:11 +0000
Files and hashes:         1: dKEWacQ-U7DyHUtBP5LZ6pExVQM.crl (hash: IINcT3dYZ8j5m8n6hmCwoFZ2l8WB6Dw6KqjsxvsCnn8=)
                          2: D672BC9638E411EF8BF0C15EC4F9AE02.roa (hash: 2Pw8KaLRV6aBD082BqEQ7VHZ0JNyhO7oJeP00MvVoik=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.crl
                          rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dKEWacQ-U7DyHUtBP5LZ6pExVQM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 04:25:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 444 (0x1bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178424, serialNumber=74A11669C43E53B0F21D4B413F92D9EA91315503
        Validity
            Not Before: Oct 25 04:25:11 2026 GMT
            Not After : Nov  1 04:25:11 2026 GMT
        Subject: CN=6add84a7-cfa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e7:6d:a4:d4:fd:a4:92:d7:6f:fc:c7:dc:43:
                    f6:d2:cb:60:ae:8e:29:8c:e5:5e:57:78:aa:96:79:
                    e9:99:e8:63:30:b6:ac:13:f3:b2:b5:4a:ed:1c:38:
                    60:0b:c5:cc:23:32:28:f2:27:f9:73:f6:c9:33:75:
                    03:96:a9:be:d8:ef:16:f0:5f:fb:be:4d:42:c5:9b:
                    62:70:ab:16:31:e3:d5:19:2e:c3:ec:a6:ed:28:51:
                    bc:3f:dd:82:5e:2d:91:23:d2:aa:4d:02:48:ef:f9:
                    55:56:d6:13:80:7a:88:e6:69:4e:28:84:03:71:1b:
                    22:89:af:f2:83:97:40:aa:19:9a:b9:8e:e5:96:bd:
                    ca:f0:8b:ec:84:0d:03:da:f0:3a:45:ac:94:e9:e4:
                    2c:57:52:3c:95:60:11:86:83:85:ab:63:a5:c9:1a:
                    3a:f4:a2:ee:be:41:cf:a6:69:be:e9:0a:20:87:1c:
                    68:df:9f:52:48:68:a8:36:ca:70:4a:fd:36:7f:08:
                    99:a9:37:94:f7:f4:3b:1d:19:53:22:de:53:c6:af:
                    47:31:87:1a:b8:8f:b4:6d:b1:51:fe:d2:d8:6d:03:
                    e7:af:b9:9f:44:94:d8:7b:41:f3:25:f5:9d:13:09:
                    dd:22:1b:b3:23:6e:93:d0:27:16:bd:80:f1:f0:9f:
                    4a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:9A:20:44:2B:FD:F0:11:B7:97:92:3A:EE:F3:7C:A5:75:CF:59:FF
            X509v3 Authority Key Identifier:
                keyid:74:A1:16:69:C4:3E:53:B0:F2:1D:4B:41:3F:92:D9:EA:91:31:55:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dKEWacQ-U7DyHUtBP5LZ6pExVQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:56:3a:8d:d5:22:9a:eb:3d:93:d5:28:b1:1b:cc:73:33:04:
         fa:56:69:80:d0:ba:68:7e:50:c8:94:03:95:57:20:e4:6e:c9:
         7d:7c:fc:87:fa:fb:7c:76:29:1a:26:99:3d:93:df:55:ad:de:
         ad:2a:7e:de:a9:d4:a7:b1:f2:db:96:5e:1a:88:69:d9:9e:68:
         a2:5f:5c:0f:83:3f:47:9b:ab:6f:d1:28:af:45:07:ac:34:0f:
         71:0b:bb:35:26:c7:68:b0:f8:55:c6:7d:4f:0c:1a:46:b3:cb:
         97:32:29:f1:e8:5c:2a:9e:d6:10:60:56:c8:ae:d3:eb:d9:a3:
         5a:34:66:e4:4e:59:79:73:ee:c0:1a:8c:4e:4b:22:b1:4f:bd:
         57:df:12:f4:95:b3:33:b5:ff:1f:3a:87:0e:37:fb:ae:aa:fc:
         31:d2:54:ee:63:00:6a:02:e0:db:e3:c4:24:13:6d:26:3b:87:
         ef:88:6b:8e:ba:5e:67:5e:5e:5d:84:4f:17:03:e3:9c:3f:f1:
         b4:da:3a:12:2d:c8:59:54:0e:1e:6d:51:34:58:fd:73:c7:97:
         16:0f:0c:de:12:b3:8c:0d:41:99:27:62:b3:76:93:8b:f1:c9:
         db:f2:29:2d:19:59:48:c0:8c:1e:03:6d:aa:e5:c6:8c:24:60:
         7b:2f:13:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 12:40:54 2026 by rpki-client