Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C09A/BB673F3EEAD711F0B9CBFBE6646F56BC/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.mft
File:                     Dztf8VRQUpFAjEhAsQNtkqkwTtQ.mft (raw, json)
Hash identifier:          4Gxit+I7McEpCEF4rowoJTnGo6Ya86nCq2/tlp4gKlg=
Subject key identifier:   B3:B0:8E:11:14:FE:5E:8B:70:93:AD:F5:49:D4:84:A0:80:16:3F:9F
Authority key identifier: 0F:3B:5F:F1:54:50:52:91:40:8C:48:40:B1:03:6D:92:A9:30:4E:D4
Certificate issuer:       /CN=A917C09A/serialNumber=0F3B5FF154505291408C4840B1036D92A9304ED4
Certificate serial:       8D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C09A/BB673F3EEAD711F0B9CBFBE6646F56BC/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.mft
Manifest number:          8D
Signing time:             Sat 03 Oct 2026 08:12:57 +0000
Manifest this update:     Sat 03 Oct 2026 08:12:57 +0000
Manifest next update:     Sat 10 Oct 2026 08:12:57 +0000
Files and hashes:         1: Dztf8VRQUpFAjEhAsQNtkqkwTtQ.crl (hash: RphCrMF+8kOTeL7Qy0+V/5cMYOJzgVQK7Fgk9U4yTs0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C09A/BB673F3EEAD711F0B9CBFBE6646F56BC/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.crl
                          rsync://rpki.apnic.net/member_repository/A917C09A/BB673F3EEAD711F0B9CBFBE6646F56BC/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 08:12:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141 (0x8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C09A, serialNumber=0F3B5FF154505291408C4840B1036D92A9304ED4
        Validity
            Not Before: Oct  3 08:12:57 2026 GMT
            Not After : Oct 10 08:12:57 2026 GMT
        Subject: CN=6ac0b909-9c64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:61:ee:fa:84:08:0c:0d:cb:33:64:a8:17:42:
                    2c:14:61:cf:c7:47:5b:05:eb:1b:49:33:27:cd:be:
                    4a:8d:b1:72:81:b1:ac:3d:cb:7e:76:5a:db:8a:60:
                    41:d5:91:0d:67:b2:cb:d0:d6:d0:5a:aa:7e:9b:8c:
                    48:d9:8b:77:45:5e:00:d6:f3:96:28:ad:93:68:a9:
                    7a:f0:0a:17:62:63:7b:41:50:05:f8:20:64:fb:39:
                    32:a8:15:ab:ac:ed:87:c4:db:a1:3e:b8:4c:a8:98:
                    97:d5:ba:26:7a:b8:d6:18:70:85:92:77:a6:8e:be:
                    c4:b7:b0:fa:39:99:fa:19:ff:6c:7a:09:4d:2d:66:
                    46:9a:0d:cc:7b:a4:2f:a6:6c:53:3b:2c:b6:fc:34:
                    c3:0d:94:52:a7:0d:ba:e9:4b:77:f0:cd:46:12:99:
                    f8:d4:c6:a9:2d:84:60:e3:41:3c:3d:97:97:ee:87:
                    6a:08:b3:26:01:e1:dd:b3:b6:43:30:cb:5f:2a:1f:
                    a8:53:0f:07:b7:88:c8:1f:f8:cd:f2:ae:b8:b0:db:
                    1e:bf:a8:49:75:2a:a6:2c:71:64:e6:60:89:8d:40:
                    d1:35:98:db:c1:72:54:5a:c4:14:a2:fe:12:84:9e:
                    81:a9:d2:b6:7e:11:cf:86:f0:62:1f:6b:5e:6c:ad:
                    eb:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:B0:8E:11:14:FE:5E:8B:70:93:AD:F5:49:D4:84:A0:80:16:3F:9F
            X509v3 Authority Key Identifier:
                keyid:0F:3B:5F:F1:54:50:52:91:40:8C:48:40:B1:03:6D:92:A9:30:4E:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C09A/BB673F3EEAD711F0B9CBFBE6646F56BC/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C09A/BB673F3EEAD711F0B9CBFBE6646F56BC/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:6a:4c:ac:c8:52:b7:6c:c3:f0:a3:76:5c:d7:56:17:02:a8:
         09:5c:df:45:4b:ac:71:70:45:cd:4c:ca:78:3a:ea:87:18:8f:
         c4:f5:91:00:81:22:c2:5d:86:7e:70:ee:eb:a0:55:12:e3:94:
         83:fd:75:8c:57:e6:61:f4:3c:2f:7a:ca:56:4b:f5:54:44:42:
         6d:60:7b:7d:48:0e:86:a7:d1:27:8b:2a:95:f6:c7:a9:1a:31:
         80:f3:48:b9:62:60:a2:f9:35:98:0f:75:ca:a5:37:04:4a:00:
         ec:50:d5:be:73:7d:e4:37:3f:d5:8d:20:26:c2:3b:02:e2:e6:
         94:1d:89:57:78:c3:8d:91:03:6f:56:47:3b:60:43:50:b0:6b:
         e6:2f:40:15:05:24:f2:dd:f0:97:fe:00:ad:70:30:5a:51:b1:
         4a:45:f2:ec:1d:6a:00:0e:0c:c0:9a:e0:2b:5b:ba:a3:d5:09:
         62:64:46:04:be:b0:e6:f2:de:64:50:c4:2b:a4:b1:ab:72:c2:
         c1:9f:be:f8:46:2e:50:d6:f8:4e:29:b1:dd:cc:d0:cd:4e:52:
         53:ab:69:36:90:6a:47:f6:4a:13:ee:6a:5d:46:b0:3e:0c:21:
         02:65:ba:e2:61:91:a5:cb:f5:e3:94:99:bd:9d:41:b4:91:31:
         7f:30:a4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:20:11 2026 by rpki-client