Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft
File:                     djSthmVu_mxF5O-Zj5S2l6w5vvE.mft (raw, json)
Hash identifier:          Z600oJfraOGtCa7wyASpY77uFjoMA+VwR7XAS4148WI=
Subject key identifier:   BE:BF:A8:68:ED:66:01:21:6E:FE:FA:3D:6F:7A:0A:57:64:0C:A5:0E
Authority key identifier: 76:34:AD:86:65:6E:FE:6C:45:E4:EF:99:8F:94:B6:97:AC:39:BE:F1
Certificate issuer:       /CN=A91B23D9/serialNumber=7634AD86656EFE6C45E4EF998F94B697AC39BEF1
Certificate serial:       0176
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djSthmVu_mxF5O-Zj5S2l6w5vvE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft
Manifest number:          0156
Signing time:             Mon 19 Oct 2026 05:52:00 +0000
Manifest this update:     Mon 19 Oct 2026 05:52:00 +0000
Manifest next update:     Mon 26 Oct 2026 05:52:00 +0000
Files and hashes:         1: djSthmVu_mxF5O-Zj5S2l6w5vvE.crl (hash: itquzwqQeE4U2Cr8OCh0q/Dvu3v90cspuTmsZsbN1rM=)
                          2: 5FF7DA8AC9DD11EF9A19CE57C4F9AE02.roa (hash: c4VFZAceUdJlng/FeQRaHeNTf/QP511PnqvINvkog+A=)
                          3: 7BC585BEC9DD11EF98B1E263C4F9AE02.roa (hash: gOLrlN2EfbwTp4zsFTkIHkRkrBvQ0xLDRVKKWvZfbic=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.crl
                          rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djSthmVu_mxF5O-Zj5S2l6w5vvE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 05:51:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 374 (0x176)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B23D9, serialNumber=7634AD86656EFE6C45E4EF998F94B697AC39BEF1
        Validity
            Not Before: Oct 19 05:52:00 2026 GMT
            Not After : Oct 26 05:52:00 2026 GMT
        Subject: CN=6ad5b000-03c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c1:35:c6:77:dc:ec:59:98:26:2e:31:05:e5:
                    e8:cd:89:79:3c:1f:97:25:9d:df:cb:9c:dc:8c:d5:
                    36:36:c2:a3:4e:1e:f2:bc:86:e1:1d:06:0b:0d:96:
                    a9:e5:06:27:71:2c:77:5d:28:8a:28:ea:e6:b9:4d:
                    d3:89:62:0d:3e:84:4a:a6:0c:e5:a4:7f:95:37:11:
                    1e:04:63:ef:5c:40:7f:78:11:e5:ea:87:9f:53:2d:
                    e4:0a:b6:05:cc:3d:68:95:a1:01:e2:ee:3c:55:6b:
                    32:ff:8e:31:d0:e5:53:78:01:fa:63:e4:ed:5d:34:
                    c3:f5:dd:3c:4f:b2:39:f4:3a:d4:af:39:e3:01:8e:
                    58:f6:05:a2:f1:d9:62:39:9d:7f:58:5c:c1:0c:cb:
                    0c:ab:0c:41:5f:dc:bc:f7:24:0e:1a:a2:d3:b7:55:
                    de:57:88:7f:d9:9c:25:42:3f:e3:b3:47:08:a4:76:
                    a1:20:14:e8:7d:a5:b1:72:94:ca:de:58:88:41:3e:
                    5b:cf:0d:e6:64:d6:98:15:9c:3d:a1:5e:de:80:e5:
                    fb:e4:55:50:d6:99:ca:fb:86:d4:c5:9e:18:60:36:
                    50:2c:e2:80:fd:18:ed:58:5b:fc:18:5a:7e:58:bd:
                    d3:ad:a8:8c:13:8c:e0:55:cb:a6:bc:54:f0:0d:c7:
                    fb:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:BF:A8:68:ED:66:01:21:6E:FE:FA:3D:6F:7A:0A:57:64:0C:A5:0E
            X509v3 Authority Key Identifier:
                keyid:76:34:AD:86:65:6E:FE:6C:45:E4:EF:99:8F:94:B6:97:AC:39:BE:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djSthmVu_mxF5O-Zj5S2l6w5vvE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:fd:f9:32:1d:c7:6f:43:28:43:4d:93:bc:f6:05:36:a9:e2:
         c6:0d:60:f7:8a:40:dc:67:fd:05:84:d4:2f:69:50:73:a5:e6:
         b5:05:03:4c:f7:51:34:d4:c7:7f:36:38:ad:d3:8d:cc:ed:f9:
         55:c1:4c:25:b4:f9:a0:fe:05:85:16:14:79:59:71:c3:c2:80:
         2e:b1:ec:82:a5:6f:7e:9f:00:05:14:af:62:fd:05:cb:03:74:
         86:eb:a0:a8:73:5c:1f:de:18:46:75:4a:f4:d9:32:be:84:8a:
         74:a6:0b:d2:93:5f:68:85:c7:b4:96:61:b0:ab:db:5d:47:0c:
         bd:2a:68:a8:58:5d:06:92:a7:b8:d2:74:1c:b6:d3:ed:f9:81:
         61:ed:61:85:22:0c:19:cf:b3:e3:c3:12:d9:59:75:55:47:ee:
         e0:6a:78:9b:f4:a0:28:3e:6d:58:69:6f:b4:85:1d:95:19:cf:
         9a:dc:1f:f2:a4:ab:6b:96:b1:ce:1d:f5:ac:a2:97:cd:11:20:
         99:98:e9:be:44:5e:88:75:43:c7:a0:ce:68:ef:dc:f5:e9:f7:
         b4:52:4b:89:de:de:3b:39:e1:1b:5c:f8:b5:b4:7e:5f:1f:2a:
         26:96:b7:01:78:ec:8f:88:ba:13:01:e9:ee:d2:c5:f0:b4:55:
         5e:50:af:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 09:21:38 2026 by rpki-client