Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft
File:                     rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft (raw, json)
Hash identifier:          Yv20SMiC051WkG7j+FYyodQkEScU1k/6RmWzC0HjFRY=
Subject key identifier:   A5:5A:33:A8:EE:6E:6D:24:AA:B4:93:7C:10:86:1A:41:5B:78:59:BE
Authority key identifier: AC:32:E9:9C:B0:92:E6:2E:3A:CA:18:74:63:DA:99:E7:3D:5A:AF:3E
Certificate issuer:       /CN=A917C23C/serialNumber=AC32E99CB092E62E3ACA187463DA99E73D5AAF3E
Certificate serial:       083D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft
Manifest number:          0822
Signing time:             Fri 02 Oct 2026 21:28:41 +0000
Manifest this update:     Fri 02 Oct 2026 21:28:41 +0000
Manifest next update:     Fri 09 Oct 2026 21:28:41 +0000
Files and hashes:         1: rDLpnLCS5i46yhh0Y9qZ5z1arz4.crl (hash: gKagKxC41teYr4QAqKh8aMacSxAmLGWTUoO4VWMRY0s=)
                          2: BA4B22643AC911EBB83D7F0EC4F9AE02.roa (hash: jVj6UwIo4TXqA/uqzwENPxn//OG6jURpNnawIkmt1rI=)
                          3: D75EF2ACFB6D11EC8F56D760C4F9AE02.roa (hash: ZmAyU9kRA0slDQaJ0VTa+g0MzBvfdT0VhVsvUeReZ3c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.crl
                          rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 21:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2109 (0x83d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C23C, serialNumber=AC32E99CB092E62E3ACA187463DA99E73D5AAF3E
        Validity
            Not Before: Oct  2 21:28:41 2026 GMT
            Not After : Oct  9 21:28:41 2026 GMT
        Subject: CN=6ac02209-7d07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:21:e1:38:60:60:8a:e4:f2:95:cf:18:44:3f:
                    01:54:4e:8c:81:81:37:8d:af:60:1c:aa:68:dc:67:
                    52:de:32:13:8f:53:2c:e0:03:10:21:aa:8b:3e:dc:
                    2f:7d:02:45:c8:44:cd:bd:45:7f:4f:21:52:75:17:
                    17:3c:b5:91:e3:d7:d4:ea:b2:f2:0f:f5:b9:51:20:
                    75:d4:54:69:c3:0d:88:52:18:25:61:7b:b0:05:ff:
                    76:9a:e7:bd:2c:f8:1e:95:41:f5:5a:75:eb:44:0c:
                    78:8e:4b:57:2c:ec:45:62:7a:7f:a9:9c:f4:45:1a:
                    2f:73:2d:84:b7:5a:61:aa:72:21:16:6e:53:ff:b3:
                    35:16:30:7f:22:f8:5a:eb:ae:9f:3f:2b:c2:de:0b:
                    39:fc:c7:a8:9b:09:77:04:6d:ac:72:b9:0d:e5:07:
                    8d:0a:8d:27:61:1b:8b:75:68:a1:83:52:e5:8f:06:
                    15:fa:03:3d:b6:b5:aa:71:45:d2:35:0c:13:46:a8:
                    f3:90:4a:b1:7e:95:d6:7a:f4:29:63:80:df:94:2a:
                    cf:be:25:ac:63:e0:4f:1b:ed:f6:f8:78:1c:bf:ec:
                    94:50:5a:20:20:6c:0e:58:21:6a:03:0c:89:c9:b5:
                    f1:d3:bb:92:d5:0e:77:4d:90:a2:77:0b:23:0a:d4:
                    c6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:5A:33:A8:EE:6E:6D:24:AA:B4:93:7C:10:86:1A:41:5B:78:59:BE
            X509v3 Authority Key Identifier:
                keyid:AC:32:E9:9C:B0:92:E6:2E:3A:CA:18:74:63:DA:99:E7:3D:5A:AF:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:8b:da:97:62:85:d1:68:2f:95:b9:cf:de:e4:14:dc:20:c7:
         1b:7c:5e:26:39:6c:2f:35:30:cd:c7:97:7d:7f:2c:97:42:ce:
         4b:d5:47:c3:8c:e0:c7:b6:f6:96:b3:3f:bc:23:df:62:25:4b:
         85:cd:75:fb:3f:9e:00:d9:0d:17:ba:bb:e8:52:bc:a7:7a:5e:
         8c:0c:5c:9b:f5:94:0d:e7:04:fc:53:fe:17:02:71:d0:7b:0e:
         f9:3f:83:4b:45:50:b0:fd:f1:95:55:31:1a:42:3f:96:df:13:
         d7:1d:98:69:7b:f2:29:fe:c3:39:50:c9:c2:17:5b:27:50:bc:
         38:ad:b8:a2:14:3b:1e:f3:d3:7c:90:93:88:bc:49:2a:38:67:
         d8:fc:09:2f:dd:59:2a:35:75:7f:e7:52:01:55:d1:ac:fa:8f:
         6a:91:e5:fb:88:a9:9f:35:0d:63:2b:50:2c:ea:cf:8a:07:0b:
         36:9e:88:5b:3b:dc:4c:6f:6f:a6:ec:67:30:03:0e:a9:7f:13:
         ff:9b:6d:10:72:a9:f7:e8:c0:52:96:c4:2f:80:3e:3b:2e:a2:
         3b:c0:9a:d8:dc:48:db:fb:cb:4a:5e:4e:ef:69:6c:b4:ac:e9:
         a9:77:65:4f:08:0c:21:96:3e:f9:b2:7f:ca:21:e5:9d:44:30:
         71:ff:99:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 05:03:16 2026 by rpki-client