Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.mft
File:                     hDJHwKwYH8NmZqRDchryHZ2mUNo.mft (raw, json)
Hash identifier:          DhiwKj/N31GFvKE1Xxx4CNwSyQvA57ogvULU9QF6A0U=
Subject key identifier:   BB:70:88:F4:83:24:BC:C6:06:62:52:E6:74:06:A9:B7:F1:25:93:69
Authority key identifier: 84:32:47:C0:AC:18:1F:C3:66:66:A4:43:72:1A:F2:1D:9D:A6:50:DA
Certificate issuer:       /CN=A91CEAE0/serialNumber=843247C0AC181FC36666A443721AF21D9DA650DA
Certificate serial:       01C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDJHwKwYH8NmZqRDchryHZ2mUNo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.mft
Manifest number:          01C3
Signing time:             Wed 07 Oct 2026 04:20:20 +0000
Manifest this update:     Wed 07 Oct 2026 04:20:19 +0000
Manifest next update:     Wed 14 Oct 2026 04:20:19 +0000
Files and hashes:         1: hDJHwKwYH8NmZqRDchryHZ2mUNo.crl (hash: btQMOOFiWjSKc5DEZ4AQGMifBEllift9gtWHkYw+z0k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.crl
                          rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDJHwKwYH8NmZqRDchryHZ2mUNo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 04:20:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 453 (0x1c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CEAE0, serialNumber=843247C0AC181FC36666A443721AF21D9DA650DA
        Validity
            Not Before: Oct  7 04:20:19 2026 GMT
            Not After : Oct 14 04:20:19 2026 GMT
        Subject: CN=6ac5c884-856c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f1:b0:a8:4e:60:89:ff:72:03:11:de:68:54:
                    33:c1:70:fd:43:e4:f3:ac:1b:d8:9b:67:7e:9f:7f:
                    75:b0:a6:d0:c6:b7:15:3f:28:8b:ec:ea:8c:2c:c6:
                    10:44:67:50:98:d8:f7:52:e6:9a:80:4e:26:93:4c:
                    e0:c2:94:1c:4e:c6:92:ae:38:30:a0:16:a9:22:62:
                    7f:d1:1b:f0:b3:96:eb:69:de:2b:a9:9a:00:07:58:
                    b8:58:04:93:03:72:c7:85:dd:5b:45:8c:19:cc:4c:
                    8e:cd:7e:cf:f8:f5:29:ed:01:db:df:c6:ad:05:a7:
                    79:17:84:61:49:2a:88:1e:43:cc:bb:98:cc:2f:02:
                    25:ce:af:28:96:29:fb:e6:59:d1:b4:d2:ee:db:f6:
                    2f:96:53:5d:8b:e9:f7:23:07:cc:2d:9e:ce:58:66:
                    ec:23:d0:98:24:b2:25:8b:bb:1f:7c:86:dc:fc:70:
                    80:4c:b4:20:ec:66:21:7d:a4:83:38:95:c8:ab:8c:
                    2f:40:0b:a6:45:cd:a9:2c:a9:a4:ce:45:87:1d:c4:
                    f0:1b:bb:89:79:19:b6:af:54:e2:5a:d5:55:3d:46:
                    ce:01:1b:6a:2b:47:2f:9e:e7:06:30:78:c9:bd:c3:
                    5c:ca:bd:21:95:99:b7:5c:e6:a5:fe:71:18:14:b7:
                    04:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:70:88:F4:83:24:BC:C6:06:62:52:E6:74:06:A9:B7:F1:25:93:69
            X509v3 Authority Key Identifier:
                keyid:84:32:47:C0:AC:18:1F:C3:66:66:A4:43:72:1A:F2:1D:9D:A6:50:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDJHwKwYH8NmZqRDchryHZ2mUNo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:fa:34:1a:c5:cc:18:63:43:50:9c:fe:e9:c5:f2:dc:08:7e:
         26:5f:cd:c6:49:b3:bd:db:8a:4b:7d:c7:1a:04:8b:fd:b8:fc:
         56:ed:4b:80:b8:01:21:9c:e7:ef:f9:17:fd:79:39:e9:f7:36:
         39:0a:31:e3:ec:b8:32:bd:0a:bc:2f:0a:ca:47:b5:48:44:49:
         85:41:f8:c7:e9:a7:04:18:be:22:17:aa:62:25:f4:9b:0c:a5:
         ea:1e:fe:04:19:8d:61:f3:a7:a6:44:75:96:a7:8f:32:cb:27:
         0f:71:a2:7b:fa:f9:28:2d:6b:e6:23:3f:98:4c:b0:a9:8d:ef:
         57:2c:7a:ed:a3:a6:d8:6f:42:c9:1a:5c:6f:d1:b8:64:72:21:
         e7:1c:f0:d4:b6:35:52:0d:89:5b:6a:1c:ab:43:5f:64:e5:85:
         ac:b8:cf:41:f7:42:75:ac:74:1f:77:23:4b:e6:8d:1a:08:32:
         2f:a9:d5:a6:82:00:13:79:6d:01:dd:fc:ba:ef:04:0d:1f:dc:
         3b:e8:23:cc:e0:a6:b1:d2:8c:30:a7:d2:af:e2:40:ce:a2:6f:
         3b:53:c4:4d:3b:44:bd:e9:3a:97:32:3b:8f:54:be:7c:08:97:
         92:03:c7:97:3a:8f:22:ad:d6:1d:28:f6:69:68:c4:a8:21:9e:
         c8:69:2e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 09:04:27 2026 by rpki-client