Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919D626/60081EAC8D7F11EB8D8BD60BC4F9AE02/daF-q5BBtk2zdHHPtOv_WR6PaZM.mft
File:                     daF-q5BBtk2zdHHPtOv_WR6PaZM.mft (raw, json)
Hash identifier:          DntVR9mneM9zDD1XBh54lOkvi78MG5tBU+qeyjpAyu0=
Subject key identifier:   2F:9B:C2:F5:4E:E5:C6:15:D4:98:28:E3:F4:23:E4:75:F9:42:FE:5D
Authority key identifier: 75:A1:7E:AB:90:41:B6:4D:B3:74:71:CF:B4:EB:FF:59:1E:8F:69:93
Certificate issuer:       /CN=A919D626/serialNumber=75A17EAB9041B64DB37471CFB4EBFF591E8F6993
Certificate serial:       0750
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daF-q5BBtk2zdHHPtOv_WR6PaZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D626/60081EAC8D7F11EB8D8BD60BC4F9AE02/daF-q5BBtk2zdHHPtOv_WR6PaZM.mft
Manifest number:          0750
Signing time:             Tue 06 Oct 2026 15:04:32 +0000
Manifest this update:     Tue 06 Oct 2026 15:04:31 +0000
Manifest next update:     Tue 13 Oct 2026 15:04:31 +0000
Files and hashes:         1: daF-q5BBtk2zdHHPtOv_WR6PaZM.crl (hash: NJw11IRdKXlMV1zH53Vxl6sUTvcnqAUv9M6vDkKvIrA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D626/60081EAC8D7F11EB8D8BD60BC4F9AE02/daF-q5BBtk2zdHHPtOv_WR6PaZM.crl
                          rsync://rpki.apnic.net/member_repository/A919D626/60081EAC8D7F11EB8D8BD60BC4F9AE02/daF-q5BBtk2zdHHPtOv_WR6PaZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daF-q5BBtk2zdHHPtOv_WR6PaZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 15:04:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1872 (0x750)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D626, serialNumber=75A17EAB9041B64DB37471CFB4EBFF591E8F6993
        Validity
            Not Before: Oct  6 15:04:31 2026 GMT
            Not After : Oct 13 15:04:31 2026 GMT
        Subject: CN=6ac50e00-da1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:56:3e:e7:fb:d9:a8:50:56:e8:de:bd:b4:6d:
                    61:6d:eb:3c:5b:9c:8a:a7:66:61:01:66:9d:04:f8:
                    cb:5f:19:d8:f3:50:6b:19:5d:f6:0c:a2:6b:ac:be:
                    19:ad:bf:5f:2d:e9:1b:38:ef:6a:f1:35:3b:38:27:
                    62:46:e1:9b:ec:d0:e5:28:c8:cc:46:17:2e:4b:f1:
                    9e:80:3a:78:ea:b4:6a:7f:04:02:7c:ae:3a:eb:e0:
                    e3:a5:7d:33:5c:80:7c:22:3c:89:0b:d4:9a:d3:92:
                    32:a8:ec:27:95:b3:9f:21:c4:19:7a:47:e9:a5:30:
                    ae:be:4f:90:05:13:04:00:90:04:1f:25:07:5a:2a:
                    bb:bb:c5:80:24:10:59:6d:0c:2b:5d:67:8c:70:26:
                    bf:ef:28:28:19:0b:73:a3:0d:f2:fd:e0:a4:53:39:
                    b3:f1:82:95:6f:43:3a:51:2e:14:8f:15:56:f3:9f:
                    16:91:78:8d:f2:8d:31:f7:af:3b:d1:d0:8b:5a:3c:
                    76:7a:d5:e2:5f:35:7a:cb:33:55:f8:9a:a8:5a:ad:
                    a6:17:0b:6a:7d:2d:c9:89:09:55:07:8a:07:0d:87:
                    65:6f:de:65:b5:a5:d6:e6:70:3c:b4:9e:95:1c:8e:
                    7a:38:bc:e8:47:02:fc:8a:55:71:a9:f0:99:a9:ee:
                    20:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:9B:C2:F5:4E:E5:C6:15:D4:98:28:E3:F4:23:E4:75:F9:42:FE:5D
            X509v3 Authority Key Identifier:
                keyid:75:A1:7E:AB:90:41:B6:4D:B3:74:71:CF:B4:EB:FF:59:1E:8F:69:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D626/60081EAC8D7F11EB8D8BD60BC4F9AE02/daF-q5BBtk2zdHHPtOv_WR6PaZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daF-q5BBtk2zdHHPtOv_WR6PaZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D626/60081EAC8D7F11EB8D8BD60BC4F9AE02/daF-q5BBtk2zdHHPtOv_WR6PaZM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:01:44:2b:0c:d1:59:91:52:b9:51:8c:df:95:ed:22:79:51:
         44:03:1e:1f:97:4a:22:e2:aa:84:7f:75:ec:c9:6e:70:cf:ed:
         88:2e:64:af:cf:0c:3e:c1:eb:02:00:a8:3c:4a:e5:bf:dc:f1:
         8f:25:f1:b9:fb:8f:1c:3d:48:28:5b:5c:e1:e6:63:3a:36:e3:
         62:bc:4e:75:e1:9a:5c:ef:bb:8a:73:da:37:06:8c:6c:3d:27:
         01:eb:ac:18:6c:4e:be:50:2d:be:6f:3b:da:e3:b2:74:d9:0d:
         81:e7:4d:eb:5b:d6:86:0d:08:ea:3f:2c:21:52:f9:97:e7:7e:
         a1:0d:b6:69:c4:44:80:cd:67:1c:bd:b4:b4:e7:34:3c:28:38:
         08:56:a8:ef:cf:c7:b9:dc:26:64:b6:dc:b1:f5:8b:b8:12:e5:
         70:3d:58:03:bc:9d:89:c7:b2:28:5e:62:43:95:3c:ca:13:76:
         63:45:ed:b1:3f:b9:c4:a8:d1:85:70:65:e5:6e:82:dc:75:72:
         43:5a:eb:e5:6c:85:0d:ce:f1:6c:f6:25:15:4d:f6:74:49:51:
         c1:02:77:ae:50:6a:0d:0a:b1:5c:df:8a:d2:17:b6:02:b7:c0:
         91:67:ea:1f:58:01:d7:af:71:f2:d5:30:5b:45:12:b2:fa:b4:
         62:9c:45:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 01:08:50 2026 by rpki-client