Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E2F2C/FFB761FA967811EA840F0029C4F9AE02/PDml0ZGM9lqyVjMi8PXxQwmme48.mft
File:                     PDml0ZGM9lqyVjMi8PXxQwmme48.mft (raw, json)
Hash identifier:          HLrK/HpZ6/0/p+39H50FpHKKUqeMbqNGLvY4kDiAYjw=
Subject key identifier:   44:9A:FA:D3:93:5F:97:38:55:EE:67:7A:AB:CC:AA:23:C4:8B:3F:01
Authority key identifier: 3C:39:A5:D1:91:8C:F6:5A:B2:56:33:22:F0:F5:F1:43:09:A6:7B:8F
Certificate issuer:       /CN=A91E2F2C/serialNumber=3C39A5D1918CF65AB2563322F0F5F14309A67B8F
Certificate serial:       0A8B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDml0ZGM9lqyVjMi8PXxQwmme48.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2F2C/FFB761FA967811EA840F0029C4F9AE02/PDml0ZGM9lqyVjMi8PXxQwmme48.mft
Manifest number:          0A76
Signing time:             Tue 06 Oct 2026 19:46:37 +0000
Manifest this update:     Tue 06 Oct 2026 19:46:37 +0000
Manifest next update:     Tue 13 Oct 2026 19:46:37 +0000
Files and hashes:         1: PDml0ZGM9lqyVjMi8PXxQwmme48.crl (hash: SG9wJ1RqOvhY/yUopY9lQxAKrshwwDxHW0mcDbDmPB4=)
                          2: DE07328A778911ECBD9C7748C4F9AE02.roa (hash: eoOKzGf6hqxQXd8fMZE71+Ku4lATAuz8sDutvZKUeO8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E2F2C/FFB761FA967811EA840F0029C4F9AE02/PDml0ZGM9lqyVjMi8PXxQwmme48.crl
                          rsync://rpki.apnic.net/member_repository/A91E2F2C/FFB761FA967811EA840F0029C4F9AE02/PDml0ZGM9lqyVjMi8PXxQwmme48.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDml0ZGM9lqyVjMi8PXxQwmme48.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 19:46:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2699 (0xa8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2F2C, serialNumber=3C39A5D1918CF65AB2563322F0F5F14309A67B8F
        Validity
            Not Before: Oct  6 19:46:37 2026 GMT
            Not After : Oct 13 19:46:37 2026 GMT
        Subject: CN=6ac5501d-d970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1a:ff:24:22:23:57:09:69:44:ad:f8:52:f7:
                    fd:9d:54:0f:25:19:3d:40:15:49:05:8c:84:67:19:
                    08:83:ed:de:21:86:1a:37:b1:75:9a:21:38:e1:45:
                    ff:0d:ce:dc:82:3b:c2:d5:5a:20:e3:25:b5:ba:77:
                    3e:17:b5:92:f9:dc:e3:e4:9f:e1:84:a1:bb:7a:47:
                    aa:d9:60:76:87:15:2d:82:15:e2:4f:dd:31:cd:3d:
                    c4:7c:f9:2a:97:ed:ca:96:22:db:df:52:4a:1c:73:
                    aa:45:25:23:8c:c3:a5:18:f8:d0:c4:36:f1:01:ef:
                    04:2a:8c:f6:4d:da:4f:b6:02:ad:c3:a3:5d:90:82:
                    57:32:13:fe:e2:06:83:dd:5e:95:03:0c:22:ed:1f:
                    75:b2:fc:fe:c9:21:01:11:70:da:56:bf:11:97:c2:
                    fb:ba:40:47:84:a0:1b:e0:a6:cf:5f:73:56:0a:19:
                    73:17:73:30:13:99:b3:86:ea:a6:f2:72:ea:5c:3c:
                    fc:76:28:22:b0:ef:27:2b:a0:45:00:4b:57:79:2f:
                    ab:5e:4c:60:12:64:89:3c:81:0c:4a:0b:87:2b:54:
                    86:5f:a5:06:0c:08:62:2d:32:64:d2:c3:f2:21:6f:
                    b6:06:83:d1:bc:16:4e:e9:d0:7b:47:d1:86:ac:83:
                    9e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:9A:FA:D3:93:5F:97:38:55:EE:67:7A:AB:CC:AA:23:C4:8B:3F:01
            X509v3 Authority Key Identifier:
                keyid:3C:39:A5:D1:91:8C:F6:5A:B2:56:33:22:F0:F5:F1:43:09:A6:7B:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2F2C/FFB761FA967811EA840F0029C4F9AE02/PDml0ZGM9lqyVjMi8PXxQwmme48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDml0ZGM9lqyVjMi8PXxQwmme48.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2F2C/FFB761FA967811EA840F0029C4F9AE02/PDml0ZGM9lqyVjMi8PXxQwmme48.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:49:fc:32:2d:09:af:31:25:da:55:19:70:b4:f0:51:de:c3:
         83:bd:77:84:b3:f4:b2:be:3c:42:70:cd:3a:ee:e4:b8:18:44:
         f3:09:0e:55:a4:11:82:b8:bd:3b:13:80:76:9c:02:39:55:71:
         1f:d1:cd:26:67:47:fe:d0:4d:cb:08:23:c1:e3:dd:9a:e1:7f:
         bc:ad:8f:55:94:25:02:f1:af:c2:4e:ef:0d:53:25:0b:22:82:
         31:71:d6:67:a2:8a:82:b8:e2:83:7d:01:12:e9:fc:76:f5:a8:
         4f:d1:4c:81:66:2a:87:4a:6c:9e:b7:69:88:a4:cb:47:d6:f9:
         77:b9:eb:18:f1:42:eb:fa:81:a2:94:b6:75:e8:0c:f3:72:95:
         5b:72:2d:fe:c2:53:9a:c0:50:28:58:d6:15:cf:7e:a5:35:f4:
         8a:d1:2d:57:e3:d4:9b:27:ca:04:ab:ce:13:ec:1f:cc:03:75:
         bd:d1:cb:6a:fe:b5:7e:29:6c:cf:bb:a3:37:12:56:2a:28:99:
         47:0a:a2:3f:d5:ea:fe:42:49:8e:ce:45:e1:66:76:1a:c5:d8:
         ca:d6:81:b6:b0:92:0b:50:78:21:50:db:1e:43:19:44:83:37:
         55:1f:22:fa:97:11:36:11:eb:fc:3c:6e:4b:14:11:45:1a:a6:
         16:a4:a8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:41:48 2026 by rpki-client