Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91850AD/60EBE1AC643411EF842FC620C4F9AE02/D2tHILCjVyLYXzRG79R0C9NBg04.mft
File:                     D2tHILCjVyLYXzRG79R0C9NBg04.mft (raw, json)
Hash identifier:          NCx3R76Du3Yv23qqZbYNcQG/IJ9beM+hDXs8LJW8tNw=
Subject key identifier:   12:6D:D1:2B:4D:33:8C:77:A4:ED:AC:C7:35:69:54:65:7C:B8:83:8B
Authority key identifier: 0F:6B:47:20:B0:A3:57:22:D8:5F:34:46:EF:D4:74:0B:D3:41:83:4E
Certificate issuer:       /CN=A91850AD/serialNumber=0F6B4720B0A35722D85F3446EFD4740BD341834E
Certificate serial:       01A7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D2tHILCjVyLYXzRG79R0C9NBg04.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91850AD/60EBE1AC643411EF842FC620C4F9AE02/D2tHILCjVyLYXzRG79R0C9NBg04.mft
Manifest number:          019B
Signing time:             Thu 29 Oct 2026 04:59:25 +0000
Manifest this update:     Thu 29 Oct 2026 04:59:25 +0000
Manifest next update:     Thu 05 Nov 2026 04:59:25 +0000
Files and hashes:         1: D2tHILCjVyLYXzRG79R0C9NBg04.crl (hash: AxtlNQufCsSVqUTMoTHEVJasrfD9p5/CjxOYaKx2XO8=)
                          2: CD1FB5C2643611EFA2C41948C4F9AE02.roa (hash: Oees07yYoqgn5PrN7dD6R0kAM+w8GIQPtiPs4eqC920=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91850AD/60EBE1AC643411EF842FC620C4F9AE02/D2tHILCjVyLYXzRG79R0C9NBg04.crl
                          rsync://rpki.apnic.net/member_repository/A91850AD/60EBE1AC643411EF842FC620C4F9AE02/D2tHILCjVyLYXzRG79R0C9NBg04.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D2tHILCjVyLYXzRG79R0C9NBg04.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Nov 2026 04:59:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 423 (0x1a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91850AD, serialNumber=0F6B4720B0A35722D85F3446EFD4740BD341834E
        Validity
            Not Before: Oct 29 04:59:25 2026 GMT
            Not After : Nov  5 04:59:25 2026 GMT
        Subject: CN=6ae2d2ad-a266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:19:70:e0:5b:2e:02:5c:77:77:34:51:de:86:
                    e5:e8:c8:5c:95:db:3e:7d:eb:03:92:6f:4a:e1:c8:
                    cf:da:8b:ca:ef:51:b5:22:59:e0:00:79:d5:2b:55:
                    55:b7:ea:11:03:d7:ee:f9:13:08:b2:b3:6b:a3:12:
                    51:2e:78:b3:4d:18:bb:e7:36:e4:43:01:20:c3:67:
                    e4:d9:8f:91:85:4c:71:46:4a:62:da:c3:fb:8e:1f:
                    0e:cb:b2:48:c8:9b:da:34:8b:4b:0a:05:5b:d1:8b:
                    1d:b1:d5:b0:14:79:04:1d:8c:eb:ed:1a:bb:5f:78:
                    ca:db:a2:01:48:88:65:7d:58:0d:c6:f7:38:0e:58:
                    b5:99:d7:8e:7e:0f:49:95:23:b5:84:a8:65:01:4b:
                    d4:22:01:3f:f6:99:e3:6f:a1:b9:04:1c:c8:81:36:
                    94:b3:84:87:a9:e4:e7:98:9e:0c:c2:4a:17:f0:fe:
                    2b:a8:a7:38:e6:dd:29:4c:e4:60:7b:ce:14:96:4b:
                    52:7d:80:67:b8:16:ec:91:7b:d1:65:c8:fc:21:7d:
                    68:c3:5f:2a:27:58:41:16:30:5d:9c:32:18:7f:88:
                    b3:d7:fb:cc:a6:e9:13:3d:0f:fd:9c:dc:9d:6d:ea:
                    ab:a4:5f:a4:7d:00:1a:90:dd:c5:df:47:22:d5:a7:
                    69:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:6D:D1:2B:4D:33:8C:77:A4:ED:AC:C7:35:69:54:65:7C:B8:83:8B
            X509v3 Authority Key Identifier:
                keyid:0F:6B:47:20:B0:A3:57:22:D8:5F:34:46:EF:D4:74:0B:D3:41:83:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91850AD/60EBE1AC643411EF842FC620C4F9AE02/D2tHILCjVyLYXzRG79R0C9NBg04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D2tHILCjVyLYXzRG79R0C9NBg04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91850AD/60EBE1AC643411EF842FC620C4F9AE02/D2tHILCjVyLYXzRG79R0C9NBg04.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:92:51:52:fb:84:0f:fa:8f:b3:5b:ec:88:10:d8:45:e4:b6:
         4f:b7:dd:e6:42:cd:5e:11:b9:0d:41:09:83:b1:3b:fa:c7:b9:
         b3:65:9b:cf:50:35:ce:10:82:c4:38:16:1a:71:36:ac:c9:58:
         3a:5d:83:6e:03:a9:29:06:c0:c6:e7:c9:c1:c1:d5:02:d0:50:
         b4:16:f0:5b:24:42:1d:09:4a:0b:29:13:b8:65:88:69:f3:97:
         60:5d:57:34:2a:fd:88:1e:47:10:66:99:20:b7:31:14:a2:26:
         03:36:9b:7e:8c:5d:4a:14:de:fe:86:32:0c:f7:e5:f4:15:52:
         de:c7:e2:4d:83:f5:4a:40:7b:19:36:cb:7f:66:1e:1b:3f:3a:
         27:0c:df:dd:dc:c2:9c:22:0f:87:14:8f:76:15:73:6a:1a:43:
         c5:e4:39:23:00:2e:b4:73:fe:d4:50:a2:64:77:3c:b0:6f:21:
         a7:80:ec:bb:d7:65:17:15:56:f3:c1:f0:30:e1:55:cb:6b:39:
         92:de:e6:b1:5c:5d:dc:bf:9f:5e:9a:0f:c8:b2:55:ef:00:8e:
         83:a1:d8:e9:78:dd:7f:d0:33:fb:7c:41:62:37:d1:af:87:cf:
         81:68:a5:3a:2b:11:0c:29:c6:9b:34:61:b0:3d:0c:6c:b6:b6:
         ab:39:a8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 05:21:29 2026 by rpki-client