Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917F429/267587A8371911F1A66BD9F8C6833773/diWOCB8uCcDx-nu0mbF1lwVlwOs.mft
File:                     diWOCB8uCcDx-nu0mbF1lwVlwOs.mft (raw, json)
Hash identifier:          iD9n+holXXo48NJJqw5XGz98ChoVshvCOSI5GA20UCw=
Subject key identifier:   E4:CB:88:BC:6C:51:DF:D5:B0:B3:7A:46:42:01:14:30:48:98:C8:0A
Authority key identifier: 76:25:8E:08:1F:2E:09:C0:F1:FA:7B:B4:99:B1:75:97:05:65:C0:EB
Certificate issuer:       /CN=A917F429/serialNumber=76258E081F2E09C0F1FA7BB499B175970565C0EB
Certificate serial:       64
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/diWOCB8uCcDx-nu0mbF1lwVlwOs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F429/267587A8371911F1A66BD9F8C6833773/diWOCB8uCcDx-nu0mbF1lwVlwOs.mft
Manifest number:          63
Signing time:             Fri 23 Oct 2026 08:37:44 +0000
Manifest this update:     Fri 23 Oct 2026 08:37:44 +0000
Manifest next update:     Fri 30 Oct 2026 08:37:44 +0000
Files and hashes:         1: diWOCB8uCcDx-nu0mbF1lwVlwOs.crl (hash: MmYhZl8pjmiAOajFAd7dc8zJ1LFchxrYNChIukRR+JM=)
                          2: E47B5CC8371911F196F6B470C8833773.roa (hash: qBhoDtp7mp14HRwHJwctq+CWjS+yyzLGnVuJb1Tow90=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F429/267587A8371911F1A66BD9F8C6833773/diWOCB8uCcDx-nu0mbF1lwVlwOs.crl
                          rsync://rpki.apnic.net/member_repository/A917F429/267587A8371911F1A66BD9F8C6833773/diWOCB8uCcDx-nu0mbF1lwVlwOs.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/diWOCB8uCcDx-nu0mbF1lwVlwOs.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Oct 2026 08:37:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100 (0x64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F429, serialNumber=76258E081F2E09C0F1FA7BB499B175970565C0EB
        Validity
            Not Before: Oct 23 08:37:44 2026 GMT
            Not After : Oct 30 08:37:44 2026 GMT
        Subject: CN=6adb1cd8-7c0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c9:73:7a:d2:79:e2:df:0b:14:2e:08:bf:a2:
                    cd:04:2d:a4:98:b8:50:14:c4:33:69:bc:98:d0:e6:
                    5d:ac:cf:8f:dd:f2:63:c7:db:0d:df:66:03:69:3e:
                    f4:75:a4:71:1e:58:50:bb:ef:e4:64:ce:d7:ac:e3:
                    98:0c:30:b6:f6:f9:80:b6:98:1d:f4:1e:34:6c:e5:
                    ff:44:14:b7:44:35:ee:c2:da:d6:3c:7e:48:1e:39:
                    b7:72:4a:b8:47:fa:4a:8c:61:99:ba:9e:47:5d:05:
                    28:ac:66:d2:26:42:7f:69:73:25:7a:a5:91:76:ec:
                    e9:94:c1:ff:5d:74:79:46:00:21:63:46:57:c2:45:
                    79:73:fe:48:ea:b1:c6:90:b2:32:d2:dc:e4:85:67:
                    db:87:ac:72:95:d0:e2:d7:55:6c:e9:00:1c:02:85:
                    9d:44:be:79:50:87:ab:4e:3f:dc:f0:e6:8c:26:e3:
                    6b:71:a1:68:da:04:b4:24:bd:a7:da:1e:9e:f8:7e:
                    fc:2e:8b:fb:37:63:13:d9:2e:00:c2:2e:4f:93:b2:
                    90:76:44:95:53:48:aa:35:8a:ad:c0:f2:fd:be:4c:
                    23:8d:7d:c5:7d:d1:61:5c:00:aa:b4:16:ee:98:f4:
                    5d:b7:d6:59:c0:49:51:c1:3a:bc:24:7e:93:fa:21:
                    3b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:CB:88:BC:6C:51:DF:D5:B0:B3:7A:46:42:01:14:30:48:98:C8:0A
            X509v3 Authority Key Identifier:
                keyid:76:25:8E:08:1F:2E:09:C0:F1:FA:7B:B4:99:B1:75:97:05:65:C0:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F429/267587A8371911F1A66BD9F8C6833773/diWOCB8uCcDx-nu0mbF1lwVlwOs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/diWOCB8uCcDx-nu0mbF1lwVlwOs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F429/267587A8371911F1A66BD9F8C6833773/diWOCB8uCcDx-nu0mbF1lwVlwOs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:8a:48:e1:2a:76:f0:f6:17:c7:f4:2e:26:4d:d8:fa:c4:c3:
         53:74:14:42:f7:e9:ee:12:b8:81:83:16:90:a7:41:b2:26:57:
         08:34:d9:52:af:ae:4c:66:8c:3d:6b:29:00:5c:57:be:15:60:
         d7:88:91:7c:14:31:18:cd:23:dd:f2:c0:79:14:b6:bf:d6:6f:
         bf:24:d2:52:53:d5:2c:40:87:6a:72:4a:0f:fc:87:08:33:c2:
         a8:65:c7:af:79:c0:64:94:69:c9:67:2a:3e:e2:68:8b:a8:94:
         b6:a3:11:e9:97:44:fe:43:1e:5a:be:31:90:06:08:31:d1:76:
         19:df:60:e3:3b:dd:aa:d7:b0:0f:87:61:6b:96:db:ef:3e:ea:
         47:95:a5:e2:3f:f5:d1:10:ba:a9:cc:36:b7:7f:1a:06:97:d3:
         b0:5b:40:7a:20:e4:c1:7a:d7:c3:44:ad:c5:8d:55:b4:35:f5:
         75:a3:bb:9d:db:78:87:41:ad:bc:90:68:38:c5:7f:cc:f4:8c:
         18:19:8a:6a:f2:f2:1e:26:e2:07:e1:06:00:40:43:86:75:54:
         ee:a1:d1:62:c3:b5:65:d2:be:6b:4b:b5:e9:24:e9:99:ab:f4:
         af:eb:63:c3:25:e0:37:1e:96:ef:ab:f6:40:2c:19:de:22:f1:
         e1:a3:c1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 11:09:19 2026 by rpki-client