Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.mft
File:                     D1Mgluf1jeQB8mUHbe-1yC5x8-I.mft (raw, json)
Hash identifier:          bv/Mi4Z1koCdYtpa/f0xGkR5o50IGUSAeKEdh5+HkJI=
Subject key identifier:   CF:15:89:3A:EB:96:74:A3:A4:C4:C0:17:48:CD:EB:64:BA:F6:07:65
Authority key identifier: 0F:53:20:96:E7:F5:8D:E4:01:F2:65:07:6D:EF:B5:C8:2E:71:F3:E2
Certificate issuer:       /CN=A918306F/serialNumber=0F532096E7F58DE401F265076DEFB5C82E71F3E2
Certificate serial:       AC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1Mgluf1jeQB8mUHbe-1yC5x8-I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.mft
Manifest number:          AA
Signing time:             Sat 17 Oct 2026 07:49:15 +0000
Manifest this update:     Sat 17 Oct 2026 07:49:14 +0000
Manifest next update:     Sat 24 Oct 2026 07:49:14 +0000
Files and hashes:         1: D1Mgluf1jeQB8mUHbe-1yC5x8-I.crl (hash: RxhcUXwfHF2UsB3qL1Ifu7iTgxK+D6UCYJ505ojDImE=)
                          2: 970D44E2C54F11F0A154DD09C4F9AE02.roa (hash: HyMt0B+pOhVMNXH2gY84/5yQW/j0O4deZoiKvpL1EJk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.crl
                          rsync://rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1Mgluf1jeQB8mUHbe-1yC5x8-I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Oct 2026 07:49:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 172 (0xac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918306F, serialNumber=0F532096E7F58DE401F265076DEFB5C82E71F3E2
        Validity
            Not Before: Oct 17 07:49:14 2026 GMT
            Not After : Oct 24 07:49:14 2026 GMT
        Subject: CN=6ad3287b-919e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a3:cb:6e:56:12:6c:80:f4:00:d2:45:a5:d8:
                    c9:46:36:9f:d5:79:39:04:26:bb:5b:6b:b7:4c:45:
                    d5:e3:96:54:22:c8:f1:fb:f5:b3:0c:ac:a0:71:81:
                    de:ed:ed:2b:78:72:0a:ee:c5:a2:ee:5b:12:9c:e4:
                    98:13:3c:db:7a:ce:a1:56:85:c8:70:c3:d8:f5:52:
                    3d:22:14:2e:7c:6b:94:d8:56:99:7e:1a:e2:b2:0c:
                    91:8e:a9:64:4c:9c:07:14:cb:ab:e5:c2:dc:59:a5:
                    6d:df:69:cb:ed:c4:48:df:8b:a5:c3:67:c5:1f:34:
                    cf:d0:04:6b:8a:59:bf:36:4a:2f:6a:37:97:13:04:
                    98:bb:82:38:73:f3:c5:9c:d3:07:a5:b4:83:2f:69:
                    a2:0c:f4:8f:ee:1c:62:2f:35:32:fd:e8:68:be:06:
                    b9:0b:ed:cb:9a:3d:55:ac:88:2a:da:6e:b2:51:80:
                    1d:e7:c6:6e:f8:b9:bd:b2:eb:59:0f:fb:94:7e:80:
                    fd:bc:7f:b7:a7:02:00:3e:97:86:27:c3:7a:3c:93:
                    13:33:ab:f9:ec:1f:e3:17:b7:96:a4:cc:cd:b0:eb:
                    f1:0a:30:86:6b:54:7a:0f:3b:35:f3:ef:22:c9:b2:
                    5b:f9:6b:55:cb:64:ff:e4:36:ae:c8:5e:a1:40:2c:
                    b5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:15:89:3A:EB:96:74:A3:A4:C4:C0:17:48:CD:EB:64:BA:F6:07:65
            X509v3 Authority Key Identifier:
                keyid:0F:53:20:96:E7:F5:8D:E4:01:F2:65:07:6D:EF:B5:C8:2E:71:F3:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1Mgluf1jeQB8mUHbe-1yC5x8-I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:e9:7b:ab:b9:6f:9e:10:ba:3d:be:6d:25:ba:60:1c:33:b0:
         ec:12:13:3d:fa:5c:82:14:43:91:d1:36:f2:62:23:36:62:9c:
         04:ea:a8:79:bf:14:75:70:ec:01:d6:b6:88:32:da:e9:15:39:
         18:c4:66:29:17:e4:2e:ee:8f:79:de:80:a5:c3:ee:95:52:da:
         ad:95:75:e8:01:7a:44:70:1b:6f:76:36:32:d6:aa:ae:9c:cc:
         62:15:96:94:cb:f8:33:e2:fc:6d:da:5e:bf:20:80:f4:e9:62:
         9d:bc:01:98:10:6b:5b:47:a0:78:ed:c2:f0:aa:82:44:fa:b7:
         4e:b4:50:e1:cf:05:67:9e:6a:ed:80:f2:3c:19:f3:59:02:31:
         a8:67:1a:bb:50:8b:2b:f6:58:bd:ac:c9:ce:5b:7e:f8:18:bf:
         02:f7:8c:14:f8:74:1b:0d:fa:7c:61:cc:6b:0d:66:3b:f1:f6:
         ef:15:e1:39:41:36:c8:c3:1c:1a:bf:28:47:f5:fe:99:46:48:
         38:52:d7:88:66:3c:f9:7e:9d:ef:d9:08:a2:2b:4f:83:54:5e:
         36:65:50:a5:c1:8d:b1:09:4d:af:de:bb:2a:17:5b:46:e7:36:
         fe:a0:a8:63:59:11:9e:f9:90:f8:c5:c9:cf:52:d1:4e:e7:e2:
         54:11:54:11
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODMwNkYxMTAvBgNVBAUTKDBGNTMyMDk2RTdGNThERTQwMUYyNjUwNzZERUZCNUM4
MkU3MUYzRTIwHhcNMjYxMDE3MDc0OTE0WhcNMjYxMDI0MDc0OTE0WjAYMRYwFAYD
VQQDEw02YWQzMjg3Yi05MTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqaPLblYSbID0ANJFpdjJRjaf1Xk5BCa7W2u3TEXV45ZUIsjx+/WzDKygcYHe
7e0reHIK7sWi7lsSnOSYEzzbes6hVoXIcMPY9VI9IhQufGuU2FaZfhrisgyRjqlk
TJwHFMur5cLcWaVt32nL7cRI34ulw2fFHzTP0ARrilm/NkovajeXEwSYu4I4c/PF
nNMHpbSDL2miDPSP7hxiLzUy/ehovga5C+3Lmj1VrIgq2m6yUYAd58Zu+Lm9sutZ
D/uUfoD9vH+3pwIAPpeGJ8N6PJMTM6v57B/jF7eWpMzNsOvxCjCGa1R6Dzs18+8i
ybJb+WtVy2T/5DauyF6hQCy1AwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM8ViTrr
lnSjpMTAF0jN62S69gdlMB8GA1UdIwQYMBaAFA9TIJbn9Y3kAfJlB23vtcgucfPi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzA2Ri82MUMyNjhENkM1
NEUxMUYwODg1ODRGODZDNEY5QUUwMi9EMU1nbHVmMWplUUI4bVVIYmUtMXlDNXg4
LUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0QxTWdsdWYxamVRQjhtVUhiZS0xeUM1eDgtSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MzA2Ri82MUMyNjhENkM1NEUxMUYwODg1ODRGODZDNEY5QUUwMi9EMU1nbHVmMWpl
UUI4bVVIYmUtMXlDNXg4LUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAj+l7q7lvnhC6Pb5tJbpgHDOw7BITPfpcghRDkdE28mIjNmKcBOqoeb8UdXDs
Ada2iDLa6RU5GMRmKRfkLu6Ped6ApcPulVLarZV16AF6RHAbb3Y2MtaqrpzMYhWW
lMv4M+L8bdpevyCA9OlinbwBmBBrW0egeO3C8KqCRPq3TrRQ4c8FZ55q7YDyPBnz
WQIxqGcau1CLK/ZYvazJzlt++Bi/AveMFPh0Gw36fGHMaw1mO/H27xXhOUE2yMMc
Gr8oR/X+mUZIOFLXiGY8+X6d79kIoitPg1ReNmVQpcGNsQlNr967KhdbRuc2/qCo
Y1kRnvmQ+MXJz1LRTufiVBFUEQ==
-----END CERTIFICATE-----
Generated at Sat Oct 17 23:49:56 2026 by rpki-client