Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.mft
File:                     DWVNb87NM-FRbiDC43NPhUBuckY.mft (raw, json)
Hash identifier:          hY8FvyAYwTtzBgfLsKtvsSsdMYt7j/+YRVUKIHwL9h0=
Subject key identifier:   D5:25:17:7B:36:CA:2F:96:19:D3:D9:84:DE:3A:D4:8F:A6:40:ED:1C
Authority key identifier: 0D:65:4D:6F:CE:CD:33:E1:51:6E:20:C2:E3:73:4F:85:40:6E:72:46
Certificate issuer:       /CN=A91ECB9B/serialNumber=0D654D6FCECD33E1516E20C2E3734F85406E7246
Certificate serial:       057C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWVNb87NM-FRbiDC43NPhUBuckY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.mft
Manifest number:          0574
Signing time:             Sun 04 Oct 2026 23:20:15 +0000
Manifest this update:     Sun 04 Oct 2026 23:20:15 +0000
Manifest next update:     Sun 11 Oct 2026 23:20:15 +0000
Files and hashes:         1: DWVNb87NM-FRbiDC43NPhUBuckY.crl (hash: 3vEN/MX+A0HYwbzJEB8EOY1TY2ED7xJQgkQTwbXB9O8=)
                          2: 48BEEFFEF52F11EDADE1B280C4F9AE02.roa (hash: cOiTv4jIjEC1QGh5pKSW61/U/hcuKiSP4jdxBNCSef0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.crl
                          rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWVNb87NM-FRbiDC43NPhUBuckY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 23:20:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1404 (0x57c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ECB9B, serialNumber=0D654D6FCECD33E1516E20C2E3734F85406E7246
        Validity
            Not Before: Oct  4 23:20:15 2026 GMT
            Not After : Oct 11 23:20:15 2026 GMT
        Subject: CN=6ac2df2f-c292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0c:97:fa:62:d6:9f:1c:8a:80:ac:05:d2:9a:
                    65:f0:70:63:6f:74:bf:0a:22:1b:17:60:d4:92:9c:
                    42:f7:85:cd:bc:13:dd:50:c1:33:cb:57:28:83:83:
                    f2:2b:a0:cb:39:37:d1:8b:59:d6:e4:f3:84:ce:b6:
                    98:d2:09:a4:a1:a9:91:0a:5c:4e:3a:ec:f0:c9:20:
                    b9:93:78:25:2c:3f:6b:f3:e8:10:55:3a:d1:0e:50:
                    fe:ca:63:64:21:5c:51:e2:04:bd:76:0a:2f:76:fd:
                    8a:68:bf:56:04:4e:37:c4:d0:88:9a:88:b9:c4:67:
                    fe:6d:8f:5a:36:81:35:ab:f8:70:73:c6:3d:0a:34:
                    b6:c8:c6:bf:93:53:74:05:b8:c5:30:ff:81:b7:93:
                    44:65:6a:97:5f:06:87:89:19:5c:63:a8:02:1e:eb:
                    51:1b:34:df:cd:3d:13:e6:e2:02:33:fc:4c:45:23:
                    c9:6f:c0:ca:ca:cb:83:13:0b:7a:4e:37:53:65:c7:
                    07:7a:5a:83:89:71:36:63:12:ce:82:6f:fd:27:17:
                    aa:b7:85:12:06:ee:f7:83:e0:68:64:74:d3:21:77:
                    3e:5c:f8:ac:60:2d:ae:11:68:31:db:ca:d9:fe:26:
                    cd:9a:08:be:c1:b6:91:b2:79:a0:4d:00:e6:02:bb:
                    02:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:25:17:7B:36:CA:2F:96:19:D3:D9:84:DE:3A:D4:8F:A6:40:ED:1C
            X509v3 Authority Key Identifier:
                keyid:0D:65:4D:6F:CE:CD:33:E1:51:6E:20:C2:E3:73:4F:85:40:6E:72:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWVNb87NM-FRbiDC43NPhUBuckY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:8b:01:61:81:fb:1f:80:55:8a:df:2f:b5:84:37:6b:28:37:
         0a:88:2c:d1:2e:5c:ff:24:fa:0c:b7:28:e2:ec:1c:56:cd:49:
         3f:4a:c2:f6:59:75:34:64:a8:bf:da:80:54:7d:55:9d:3e:18:
         cd:82:69:e8:7a:35:c0:05:32:f0:f9:73:4c:da:17:8f:82:7d:
         b2:cc:77:d5:f3:d5:55:b7:ce:0f:54:5c:1b:89:21:63:4e:ba:
         74:32:ae:ed:d2:08:0c:9f:d8:f7:aa:9f:29:69:ba:32:b4:d3:
         71:16:41:70:eb:72:d9:c5:14:09:0f:78:80:eb:6d:04:0f:c6:
         da:6b:4d:e4:28:83:25:5a:ad:39:d4:0d:18:72:8a:c5:e3:c6:
         2b:b4:c0:ea:82:a5:c7:a3:5e:8d:f7:b3:aa:ba:51:53:64:48:
         d7:a4:3d:bd:cf:3c:d0:d0:9f:38:ee:3e:d1:1d:07:6d:95:02:
         8d:2b:80:81:22:de:05:b9:f4:50:1f:29:dc:d5:25:6a:d0:4a:
         3c:6c:66:91:ec:43:ba:08:37:8f:2d:67:cc:ab:40:23:cd:9d:
         0f:6c:46:9f:34:07:30:46:21:92:ec:8f:8e:8e:b9:fd:dc:51:
         b2:97:e9:25:db:36:cc:b3:ea:28:1d:44:e5:d8:76:99:00:8c:
         70:36:27:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 15:51:14 2026 by rpki-client