Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft
File:                     DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft (raw, json)
Hash identifier:          mInAbacihDfhF300bQEvXVGHjFMlHleM7a7H2pdc4mM=
Subject key identifier:   4A:78:2A:91:C5:80:5A:18:27:46:D8:F6:2C:38:F1:08:40:F7:D9:FC
Authority key identifier: 0D:8C:1F:11:0B:DB:33:D0:53:B6:56:BB:A0:07:3B:93:0C:64:F3:14
Certificate issuer:       /CN=A917D114/serialNumber=0D8C1F110BDB33D053B656BBA0073B930C64F314
Certificate serial:       D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYwfEQvbM9BTtla7oAc7kwxk8xQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft
Manifest number:          CE
Signing time:             Mon 05 Oct 2026 07:08:23 +0000
Manifest this update:     Mon 05 Oct 2026 07:08:23 +0000
Manifest next update:     Mon 12 Oct 2026 07:08:23 +0000
Files and hashes:         1: DYwfEQvbM9BTtla7oAc7kwxk8xQ.crl (hash: D/2X2dlkOnXSC6rvuz0+ZnwiDkBCLDay5WEdm4UERVA=)
                          2: 77248CD0889111F0810C3E1FC4F9AE02.roa (hash: C+v8DxSw3+udVzZSqwvQqRGQ9Pr2cv6HbsmEoxT6o4g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.crl
                          rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYwfEQvbM9BTtla7oAc7kwxk8xQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 07:08:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 210 (0xd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D114, serialNumber=0D8C1F110BDB33D053B656BBA0073B930C64F314
        Validity
            Not Before: Oct  5 07:08:23 2026 GMT
            Not After : Oct 12 07:08:23 2026 GMT
        Subject: CN=6ac34ce7-0200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ee:dc:1a:cd:bf:26:26:4e:c9:de:f5:c3:56:
                    5d:dc:75:48:40:2a:19:eb:9e:28:28:a8:64:db:1d:
                    8d:b3:f7:ba:de:08:58:66:6e:0c:05:b6:2e:b0:66:
                    d5:19:61:ca:c0:cc:0b:4b:24:0d:1f:72:ca:2c:c9:
                    d7:26:74:d5:93:63:60:a7:5b:7e:8c:35:c8:82:99:
                    ab:1e:63:0d:c1:03:33:12:f3:56:83:8c:d3:48:fe:
                    3b:6c:47:71:ca:38:ad:63:37:1f:56:99:2f:83:87:
                    e7:fe:8f:96:b5:23:39:ad:03:ab:30:c5:ca:77:88:
                    c5:b3:20:19:7c:57:48:27:20:06:ba:38:60:f9:ea:
                    ac:40:36:a3:01:dc:b0:ab:22:2c:14:b7:ad:32:2f:
                    6a:aa:2b:a0:c9:01:f2:e2:4c:43:da:ef:49:44:07:
                    ac:7a:e3:83:c5:e0:43:be:1f:dc:94:28:23:9d:3b:
                    b6:e8:36:98:ce:9e:b6:87:2e:b4:4b:3a:8e:20:e3:
                    66:31:03:53:ce:35:d6:de:17:55:3d:91:dc:2d:36:
                    e8:f8:45:60:b6:d8:56:9b:8e:dc:85:4a:40:a1:ee:
                    11:56:e6:86:e2:0b:aa:d4:71:4f:f0:ab:23:3c:e5:
                    8b:79:7a:9a:c0:2e:a4:24:95:c3:51:fb:32:22:18:
                    00:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:78:2A:91:C5:80:5A:18:27:46:D8:F6:2C:38:F1:08:40:F7:D9:FC
            X509v3 Authority Key Identifier:
                keyid:0D:8C:1F:11:0B:DB:33:D0:53:B6:56:BB:A0:07:3B:93:0C:64:F3:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYwfEQvbM9BTtla7oAc7kwxk8xQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:8f:7c:ba:72:57:14:af:2b:19:45:71:5f:ae:bb:e0:d2:c1:
         02:83:a7:ff:c9:9d:20:69:f8:29:50:ba:81:b2:29:19:0e:ab:
         03:cb:92:2a:97:1b:43:fe:34:60:46:bc:7f:31:0c:69:8f:f0:
         85:a3:73:0f:ed:b8:9e:b2:3e:dc:c4:33:e1:da:f8:ce:b2:6f:
         39:d1:bd:b4:48:a0:a6:68:bd:94:6d:17:b1:1f:2f:e6:34:b8:
         36:5e:18:38:04:1d:90:8c:b9:76:fd:1f:cc:5a:ff:52:0b:0e:
         3d:85:df:70:82:f5:c5:d4:5e:8f:49:39:31:6d:bb:ea:28:a3:
         87:c0:0b:17:ab:74:67:e2:37:ee:61:61:1c:62:aa:ea:81:d1:
         ec:b8:c1:54:7f:e6:17:a1:54:5e:f1:9c:be:da:00:09:22:b9:
         d4:ff:93:90:70:c1:01:92:17:cc:f0:d9:47:62:15:59:86:2a:
         6e:e3:8d:dd:a5:cd:23:62:13:78:12:74:30:6a:d6:45:07:c0:
         40:f2:b9:34:29:12:4c:3d:c4:1b:0d:e6:4a:fc:63:55:ba:93:
         76:95:94:db:f4:56:83:0d:01:be:94:fd:06:2c:79:90:8b:eb:
         ca:47:ba:de:5e:37:03:8a:0f:cc:70:69:3b:e3:0e:26:0c:96:
         c0:1f:19:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 12:17:29 2026 by rpki-client