Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft
File:                     Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft (raw, json)
Hash identifier:          wU3C/IyS294FSAhZzsoP0Y6nkOlkmGyNX5f5CRAa6uw=
Subject key identifier:   55:E4:87:CC:53:B2:C1:7E:03:23:64:E1:5D:F4:6E:6E:FB:EC:5D:93
Authority key identifier: 0D:CA:FA:C1:45:B2:2F:15:60:78:01:66:CD:1F:15:15:04:EE:F8:A1
Certificate issuer:       /CN=A917C0CC/serialNumber=0DCAFAC145B22F1560780166CD1F151504EEF8A1
Certificate serial:       DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft
Manifest number:          CD
Signing time:             Mon 05 Oct 2026 07:11:45 +0000
Manifest this update:     Mon 05 Oct 2026 07:11:45 +0000
Manifest next update:     Mon 12 Oct 2026 07:11:45 +0000
Files and hashes:         1: Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl (hash: t3udbHtzbdHWChS0g68pvm3FRiKmY52dcMzy7Cs0W34=)
                          2: 6579B1188F5811F0BE083D3DC4F9AE02.roa (hash: HH9ky92fQzGNTYsX0+VQPTLNrW/aQl3+AElKQhw1OdM=)
                          3: B339551A8F5911F0AFB88342C4F9AE02.roa (hash: eXQMNO4T9SC2XkbTYizwJc2SFGid2A3mIxorvKFCeno=)
                          4: D84A5FAC8F5911F081D9D142C4F9AE02.roa (hash: sPIf66/t3nPzaly4TLYXdFQdjV7uJL1S1ZXAusvb7xs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl
                          rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 07:11:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222 (0xde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C0CC, serialNumber=0DCAFAC145B22F1560780166CD1F151504EEF8A1
        Validity
            Not Before: Oct  5 07:11:45 2026 GMT
            Not After : Oct 12 07:11:45 2026 GMT
        Subject: CN=6ac34db1-e61e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:42:a7:17:30:23:d1:ef:1a:54:46:d2:1c:1d:
                    6e:6c:7c:52:70:0a:a7:27:6d:4e:77:43:95:2e:b9:
                    ec:47:4b:da:11:8d:fd:4a:c9:de:e7:74:b4:14:30:
                    b0:d7:eb:79:c3:b0:c6:8e:9f:8b:d9:b1:3f:27:b0:
                    8c:3c:65:56:c0:e5:43:27:4f:56:17:d8:65:0f:2c:
                    d0:45:e2:5b:be:68:66:1a:c3:69:ef:5f:5d:69:64:
                    fe:ac:7a:1e:1a:cc:2b:1d:b0:02:78:65:52:a2:bf:
                    55:fc:0f:fd:a3:f8:79:de:04:dd:92:60:08:22:f9:
                    ee:e1:13:65:98:92:fc:b0:7b:f5:ab:65:b7:44:fa:
                    51:2c:41:ba:e9:b8:5c:7e:a5:21:23:6f:bf:a1:66:
                    e6:e7:a0:d7:45:1f:00:e9:e3:bd:db:63:ac:bb:79:
                    3c:c1:62:11:0e:96:30:00:e7:b5:28:6e:6c:db:d7:
                    aa:e0:95:c7:89:23:65:cb:3d:7b:ee:ca:62:26:38:
                    7d:de:54:4b:32:2f:53:72:24:23:ef:1c:2e:c0:f6:
                    e8:c0:3d:9c:f4:2b:83:32:13:41:e1:90:e8:be:47:
                    80:74:f1:59:ee:5c:ba:cf:75:d7:3f:b2:f2:c1:7e:
                    c6:e1:ec:3c:42:ae:92:79:9c:63:1f:a8:03:02:73:
                    78:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E4:87:CC:53:B2:C1:7E:03:23:64:E1:5D:F4:6E:6E:FB:EC:5D:93
            X509v3 Authority Key Identifier:
                keyid:0D:CA:FA:C1:45:B2:2F:15:60:78:01:66:CD:1F:15:15:04:EE:F8:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:45:6a:e9:ee:2c:41:41:22:db:47:2f:ec:b7:da:6d:ea:0a:
         41:5a:5f:5a:f9:ec:7a:85:e9:10:53:24:9e:73:43:90:ec:9b:
         ad:aa:43:47:b5:83:95:17:9d:d9:92:3b:a7:d7:eb:f5:00:b8:
         8b:81:47:2b:d1:75:7a:fa:7b:e4:6b:9a:65:96:50:80:5a:1e:
         6e:b9:11:31:48:31:96:3d:e1:85:37:55:5c:9d:42:73:c1:d6:
         29:af:2c:73:15:0a:ff:b8:ab:10:db:29:f4:fd:3f:c8:71:be:
         92:f4:9d:76:bc:73:27:aa:c4:a6:45:ac:be:f6:ac:ac:4f:7a:
         2f:3c:14:25:03:b1:ed:42:33:17:11:2f:69:4b:ed:5b:1a:8c:
         5c:c2:e8:f4:1d:5e:6a:b4:33:ab:49:56:b5:6b:59:7a:d6:e0:
         c7:95:d7:62:e0:d3:70:15:ad:11:65:1c:ff:60:f6:49:27:bc:
         bd:1d:5a:4d:b5:f9:45:7d:59:91:e9:1f:24:c5:1f:16:d5:d9:
         6f:cc:66:57:da:a3:64:90:76:be:dd:76:6f:76:9b:62:77:3f:
         fd:02:e6:0e:64:d4:a6:77:03:ab:e0:0d:10:d9:18:a8:0a:4f:
         5c:4e:be:79:60:71:ab:7f:31:7b:f4:df:e7:76:d8:4e:13:5f:
         05:a2:98:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:58:37 2026 by rpki-client