Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.mft
File:                     daduw5hFLfosNmmexaR2zMWB3lc.mft (raw, json)
Hash identifier:          1DmPt02ccSkUY8DOdqzhHR+3UZHhRS1FLEkB0RcKeHs=
Subject key identifier:   A0:8F:EB:88:E1:E9:BC:0E:03:23:F3:F0:E9:15:1D:E4:CB:F6:99:B4
Authority key identifier: 75:A7:6E:C3:98:45:2D:FA:2C:36:69:9E:C5:A4:76:CC:C5:81:DE:57
Certificate issuer:       /CN=A91D62C9/serialNumber=75A76EC398452DFA2C36699EC5A476CCC581DE57
Certificate serial:       1B5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daduw5hFLfosNmmexaR2zMWB3lc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.mft
Manifest number:          1B5A
Signing time:             Sun 04 Oct 2026 16:16:23 +0000
Manifest this update:     Sun 04 Oct 2026 16:16:22 +0000
Manifest next update:     Sun 11 Oct 2026 16:16:22 +0000
Files and hashes:         1: daduw5hFLfosNmmexaR2zMWB3lc.crl (hash: hvtiIBajcKx65zR4J9NlmEJWFDoKwr//h/cEr41QfwA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.crl
                          rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daduw5hFLfosNmmexaR2zMWB3lc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 16:16:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7002 (0x1b5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D62C9, serialNumber=75A76EC398452DFA2C36699EC5A476CCC581DE57
        Validity
            Not Before: Oct  4 16:16:22 2026 GMT
            Not After : Oct 11 16:16:22 2026 GMT
        Subject: CN=6ac27bd7-f610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0b:26:f2:ac:83:87:cc:82:ac:11:17:d8:e4:
                    b8:a1:9f:1d:08:f7:da:1a:15:14:61:7f:a3:54:3c:
                    c9:43:7b:48:46:45:1e:7f:2a:a3:b1:e2:d2:d6:34:
                    a3:54:75:58:25:c9:9b:55:55:fc:6e:f1:59:ad:6d:
                    b8:48:29:a6:94:23:6d:17:f3:27:d7:8a:fc:04:b6:
                    8d:c5:11:90:57:5f:b2:19:de:96:80:d0:96:e1:5e:
                    68:0c:41:2f:ac:be:30:9c:c9:cd:87:69:7c:6e:73:
                    5e:fe:e2:7e:79:ee:96:71:7b:15:48:e6:08:3a:12:
                    7e:c9:8a:15:d2:85:5f:7b:ca:47:f7:0f:33:7a:91:
                    f7:d4:63:c8:b9:d0:7f:77:96:42:81:55:b8:53:a3:
                    95:c1:2c:2f:33:83:92:fb:c5:af:a1:cf:e8:da:f2:
                    76:3a:7f:ef:53:40:d5:51:c7:d1:c0:cd:9f:b2:39:
                    ad:3b:98:04:2a:bf:66:f8:de:4b:ed:47:58:a0:7c:
                    f5:1d:76:23:e9:cf:cf:44:c0:c9:c9:2c:d7:1f:1e:
                    0c:16:1c:73:de:31:f6:60:30:59:a6:d7:0c:df:1d:
                    34:b1:bf:e1:c4:4f:b4:da:8f:15:9e:a4:35:cc:4f:
                    27:1a:ad:e8:4e:a1:de:f8:77:67:64:5b:9b:1e:34:
                    64:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:8F:EB:88:E1:E9:BC:0E:03:23:F3:F0:E9:15:1D:E4:CB:F6:99:B4
            X509v3 Authority Key Identifier:
                keyid:75:A7:6E:C3:98:45:2D:FA:2C:36:69:9E:C5:A4:76:CC:C5:81:DE:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daduw5hFLfosNmmexaR2zMWB3lc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:4a:3c:42:b7:ca:16:0e:3b:8d:6e:51:e5:10:00:62:cd:ab:
         9d:6e:a4:d6:1d:45:80:a4:a8:b2:52:ac:b7:9d:ce:4c:0d:a8:
         04:32:d6:30:fc:64:21:1d:6f:b0:6e:07:82:7b:6b:5a:c5:4a:
         be:51:8d:60:62:1b:01:69:f6:fb:8f:30:dd:a0:42:4a:97:84:
         6a:4a:9b:7d:6c:76:bf:42:26:a7:aa:90:da:18:4b:c2:b1:39:
         7d:6a:b6:78:a8:57:ee:bf:40:e8:d2:39:2e:ca:26:47:34:c6:
         8d:3d:31:24:89:e5:47:c9:ca:16:34:de:6e:94:dc:3f:74:cb:
         cd:b1:71:ad:c4:39:a9:28:23:ce:24:cc:97:a9:3d:27:40:1c:
         f8:dc:0a:9d:ef:33:ac:4a:fa:2d:43:53:f7:f8:39:fb:f1:f5:
         8c:a3:1c:36:20:a1:45:3c:c4:f5:cd:fe:f1:ff:25:0d:6b:cd:
         15:d3:bf:df:dc:6c:0d:bb:d4:4b:d9:c5:be:de:9f:28:4b:2e:
         11:37:11:e0:fd:7e:2b:cd:f7:1a:1b:59:8e:81:6f:70:ea:8c:
         f1:2a:17:c5:46:cd:1f:90:de:68:0a:56:2f:be:0e:25:03:7d:
         22:2d:d6:b0:ee:ac:8b:3f:f3:26:bf:2b:bb:ec:2d:83:b6:d0:
         6d:e5:e8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 14:35:17 2026 by rpki-client