Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft
File:                     dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft (raw, json)
Hash identifier:          FHkPr1aycMqNteLeP93SEVdfaBBa+wWH+a172bLcQdY=
Subject key identifier:   49:E5:E3:1B:54:DD:04:C4:82:5C:36:3A:BF:29:F1:F1:70:F0:80:05
Authority key identifier: 76:78:62:5D:91:54:FC:DF:1B:00:0A:43:D1:F8:92:FB:1D:58:83:69
Certificate issuer:       /CN=A9180DF5/serialNumber=7678625D9154FCDF1B000A43D1F892FB1D588369
Certificate serial:       0709
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft
Manifest number:          0706
Signing time:             Tue 06 Oct 2026 22:16:05 +0000
Manifest this update:     Tue 06 Oct 2026 22:16:04 +0000
Manifest next update:     Tue 13 Oct 2026 22:16:04 +0000
Files and hashes:         1: dnhiXZFU_N8bAApD0fiS-x1Yg2k.crl (hash: rKU4a4bcUdwR5CoAsSAdFavWgF5fL3mTigsn+h7inDI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.crl
                          rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 22:16:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1801 (0x709)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180DF5, serialNumber=7678625D9154FCDF1B000A43D1F892FB1D588369
        Validity
            Not Before: Oct  6 22:16:04 2026 GMT
            Not After : Oct 13 22:16:04 2026 GMT
        Subject: CN=6ac57324-4557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9b:91:cc:d5:19:9a:2c:f2:b7:d1:d7:45:86:
                    17:81:71:e1:71:47:39:39:96:39:c3:b9:8c:ff:b2:
                    23:6f:42:7d:17:df:cc:63:d1:6d:91:62:59:aa:7c:
                    de:a2:f0:95:a2:bc:c2:28:4e:47:a4:df:92:f9:ba:
                    64:52:71:15:5b:54:20:c4:56:2a:48:f4:16:70:b0:
                    45:11:55:35:b0:1e:21:8e:91:bd:08:fb:c7:59:51:
                    53:87:f5:43:29:6d:c6:ce:95:eb:2a:0b:99:c0:d4:
                    c3:b2:f5:c7:a2:7c:02:51:e1:0f:64:66:0c:77:19:
                    78:1c:6e:b3:f0:0d:33:a8:f7:90:99:de:75:f0:38:
                    4a:a4:57:f8:17:0f:1f:70:35:a5:f7:02:cd:1b:74:
                    a4:69:90:18:00:7a:34:d9:e1:1c:a2:92:06:f3:8b:
                    96:47:04:a7:b3:30:4c:f8:b2:0f:3d:b5:bd:e2:08:
                    e9:14:1e:58:13:15:56:ce:bf:2f:dd:17:5d:e2:8e:
                    c6:2d:93:7f:7f:64:41:b3:df:e1:7d:8c:82:c4:9e:
                    54:c4:48:fa:bf:89:12:75:f3:bf:cb:54:67:a5:c9:
                    85:1a:6f:19:2f:cc:6d:4d:85:41:f2:96:fa:65:fb:
                    bf:dc:3f:fb:21:58:4e:bb:c1:d2:64:42:23:99:56:
                    f5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:E5:E3:1B:54:DD:04:C4:82:5C:36:3A:BF:29:F1:F1:70:F0:80:05
            X509v3 Authority Key Identifier:
                keyid:76:78:62:5D:91:54:FC:DF:1B:00:0A:43:D1:F8:92:FB:1D:58:83:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:a3:36:87:2f:13:b9:51:fc:86:ec:84:2c:11:09:84:f5:2b:
         40:1d:f9:75:ac:b5:fa:14:ac:9e:25:e4:71:30:82:d2:c7:05:
         9e:c7:ff:50:a1:eb:cc:c9:ea:3a:04:7a:2b:25:c2:46:a8:b6:
         a9:13:cd:ee:a1:4b:04:a3:f5:e1:4b:31:53:32:16:52:48:ea:
         b0:17:42:59:8d:51:23:31:0f:f0:59:32:d6:85:73:59:c7:86:
         5a:b4:7c:e2:b4:a1:f4:b8:6d:b9:01:2b:2c:86:23:43:db:db:
         68:f0:46:f2:7e:34:c6:02:57:0a:49:26:46:14:0c:bd:a5:5c:
         e6:45:bc:ad:4e:ee:f4:ac:b9:6c:e6:39:68:f1:6e:0e:4a:3d:
         50:bd:3d:d5:58:50:13:f3:da:c9:6f:ac:71:fe:03:2f:e7:89:
         db:3f:d4:3f:18:ab:c5:a0:52:07:3c:e1:7e:94:bc:a7:cd:3a:
         05:79:80:c7:3d:9c:b0:c4:fe:26:77:29:94:f1:75:30:8a:ff:
         f9:d0:31:9e:51:21:a5:1f:e9:1f:cc:bd:43:0c:d4:6e:d7:90:
         b0:a0:0b:f7:52:5e:3d:e6:b6:e7:8f:e4:23:99:10:a7:9f:a0:
         6c:60:88:3e:3e:6c:63:87:fd:db:48:53:25:33:e3:79:b3:12:
         34:b4:2a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 00:56:25 2026 by rpki-client