Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.mft
File:                     dQ-le1kVZTnLFuVKYKbO21sQ654.mft (raw, json)
Hash identifier:          HWTVKoSRNeKNB1yzKho+Yxt2RaGsRLMgik3U00mpgwQ=
Subject key identifier:   C4:BF:DE:FE:F1:0A:72:F5:28:0D:7E:25:6C:33:11:87:13:B7:AE:AB
Authority key identifier: 75:0F:A5:7B:59:15:65:39:CB:16:E5:4A:60:A6:CE:DB:5B:10:EB:9E
Certificate issuer:       /CN=A91BB1F3/serialNumber=750FA57B59156539CB16E54A60A6CEDB5B10EB9E
Certificate serial:       01A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQ-le1kVZTnLFuVKYKbO21sQ654.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.mft
Manifest number:          01A0
Signing time:             Sat 03 Oct 2026 04:53:18 +0000
Manifest this update:     Sat 03 Oct 2026 04:53:18 +0000
Manifest next update:     Sat 10 Oct 2026 04:53:18 +0000
Files and hashes:         1: dQ-le1kVZTnLFuVKYKbO21sQ654.crl (hash: F99nQvvbTgKnHXZrSXBdppmJrBPVdMldVcuPpaBXoIM=)
                          2: F9E4E14645AE11EF8870C771C4F9AE02.roa (hash: 92+MCvev4Dufdf+wuDOQcin6Fkp7+RWjlESgBq/RGGs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.crl
                          rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQ-le1kVZTnLFuVKYKbO21sQ654.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 04:53:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 421 (0x1a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB1F3, serialNumber=750FA57B59156539CB16E54A60A6CEDB5B10EB9E
        Validity
            Not Before: Oct  3 04:53:18 2026 GMT
            Not After : Oct 10 04:53:18 2026 GMT
        Subject: CN=6ac08a3e-018a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6a:6f:35:fa:8f:dd:2d:e1:f7:47:86:e6:0b:
                    6a:f7:52:a9:de:84:e2:7f:86:d5:3f:d8:da:b4:27:
                    83:c2:0a:fa:be:01:3b:bd:5c:58:a0:63:3d:3d:93:
                    ce:2f:ff:f3:bc:86:de:14:0f:f8:7b:f1:85:a2:74:
                    7f:88:a4:19:00:ed:ca:a8:72:a9:68:b9:9e:f6:98:
                    10:d3:0f:2b:6c:f3:a9:18:15:09:9c:37:50:c7:19:
                    df:96:9a:5b:17:4a:43:50:bc:2c:f0:12:50:27:0a:
                    02:70:d9:71:6a:b0:3b:7e:15:8a:e1:6a:dd:61:a3:
                    c5:60:52:8b:17:b4:2b:75:33:9a:3e:ac:79:9c:dd:
                    d4:ef:a8:b0:4c:fc:8e:73:a9:0b:5a:a5:d5:50:13:
                    be:78:ea:67:e5:7b:e1:30:52:f4:9d:e3:70:41:f2:
                    d9:50:b7:7f:f7:b1:d8:eb:b8:fe:1c:b5:31:1d:f4:
                    37:26:05:24:8e:3c:92:d9:1c:ef:11:75:12:62:0a:
                    36:4b:21:49:b8:3f:92:e9:2a:92:35:2f:fa:06:ff:
                    15:1d:11:3a:13:35:ea:9b:be:d9:3a:ac:6a:90:87:
                    02:da:08:a0:78:c4:95:03:70:45:31:bf:91:ec:b7:
                    7c:15:4e:cd:99:79:6f:01:9a:89:b2:30:74:87:b7:
                    c3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:BF:DE:FE:F1:0A:72:F5:28:0D:7E:25:6C:33:11:87:13:B7:AE:AB
            X509v3 Authority Key Identifier:
                keyid:75:0F:A5:7B:59:15:65:39:CB:16:E5:4A:60:A6:CE:DB:5B:10:EB:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQ-le1kVZTnLFuVKYKbO21sQ654.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:ff:68:f6:07:e6:8a:ad:02:a3:06:d8:5b:99:c6:d5:55:ab:
         c5:5b:bd:07:a9:1c:25:91:09:a3:64:cc:bb:b0:33:ec:f2:01:
         02:dd:de:9c:61:59:dc:3b:8f:39:e3:db:fc:f1:89:a5:f7:f8:
         74:71:0e:23:1b:3f:4a:af:f2:ad:be:0c:27:f6:31:06:49:5c:
         0b:b3:69:17:c7:a5:3a:67:49:94:7c:58:e1:25:1e:56:a2:78:
         18:4d:3d:73:27:0f:ab:de:49:7a:88:f1:84:29:9b:7d:a2:e9:
         44:04:64:1e:42:d6:91:36:5a:c1:f3:43:da:07:ce:6f:db:79:
         50:81:6a:65:03:d2:98:a5:10:df:0b:d1:e4:cb:44:dd:05:49:
         a2:64:ae:c6:56:c0:fe:cc:37:ed:22:c3:67:b8:7f:0f:31:37:
         57:d0:1e:6f:92:06:87:7c:b8:be:43:da:0a:19:f3:b9:a9:c0:
         96:5d:81:a3:81:f5:61:c0:ab:54:51:5d:5e:ad:75:e9:e7:e9:
         51:7b:de:9f:9d:3b:a6:a1:af:a8:5d:fe:76:ad:8f:6e:a8:78:
         c1:1b:36:20:82:0b:0c:8c:7d:a9:9a:e7:1a:96:69:9f:db:fd:
         0e:ad:0b:a6:4d:7b:f0:4f:05:67:17:2b:cf:ce:58:54:7e:16:
         44:3e:d8:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:43:13 2026 by rpki-client