Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/dcqbl6inl-s6eQeL9AfByUJTaa0.mft
File:                     dcqbl6inl-s6eQeL9AfByUJTaa0.mft (raw, json)
Hash identifier:          L198O3jYMIYoplU3soSJ9gCZv/RfN2eUJIBk+cZlPw0=
Subject key identifier:   70:8A:E3:1E:44:A5:10:C4:65:94:80:AF:60:65:C1:E8:F1:73:8C:14
Authority key identifier: 75:CA:9B:97:A8:A7:97:EB:3A:79:07:8B:F4:07:C1:C9:42:53:69:AD
Certificate issuer:       /CN=A91F090C/serialNumber=75CA9B97A8A797EB3A79078BF407C1C9425369AD
Certificate serial:       0B93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dcqbl6inl-s6eQeL9AfByUJTaa0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/dcqbl6inl-s6eQeL9AfByUJTaa0.mft
Manifest number:          0BE8
Signing time:             Sat 10 Oct 2026 19:11:42 +0000
Manifest this update:     Sat 10 Oct 2026 19:11:41 +0000
Manifest next update:     Sat 17 Oct 2026 19:11:41 +0000
Files and hashes:         1: dcqbl6inl-s6eQeL9AfByUJTaa0.crl (hash: Hq/QwZ+KlhS3EPNgtGWOBPJK9VesQ7mDIN23Jd1GlSo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/dcqbl6inl-s6eQeL9AfByUJTaa0.crl
                          rsync://rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/dcqbl6inl-s6eQeL9AfByUJTaa0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dcqbl6inl-s6eQeL9AfByUJTaa0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 19:11:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2963 (0xb93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F090C, serialNumber=75CA9B97A8A797EB3A79078BF407C1C9425369AD
        Validity
            Not Before: Oct 10 19:11:41 2026 GMT
            Not After : Oct 17 19:11:41 2026 GMT
        Subject: CN=6aca8ded-1c53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:35:66:5d:42:3e:fe:8d:fc:cf:36:a5:11:0e:
                    45:c1:2e:df:69:73:1c:46:5c:3a:9c:06:4e:52:65:
                    c0:48:77:75:08:53:1a:48:96:b2:cc:02:57:91:e3:
                    d4:33:26:fc:c8:b1:54:64:46:cb:1b:49:35:23:54:
                    e8:f4:07:aa:9e:29:9a:70:c2:fb:a0:c0:40:77:1a:
                    26:01:33:99:ea:78:5b:e8:77:13:8c:d5:56:03:0b:
                    22:11:25:9a:00:de:d1:d3:d0:58:7c:11:97:48:cf:
                    28:63:d9:6d:10:c1:95:bb:fa:bc:2c:9e:4b:06:2c:
                    80:36:ce:fc:77:51:fd:20:8d:b8:97:fe:46:96:3e:
                    a3:1b:78:9b:6e:3c:69:23:66:26:fb:1d:38:45:2d:
                    cd:fa:f6:1f:ae:36:d6:60:f0:dc:d5:4d:0d:90:c5:
                    3a:52:bf:37:b1:e1:1c:74:35:56:cd:3a:27:bb:c9:
                    9e:76:ce:14:d7:1c:5a:0e:2e:18:b6:b1:0c:85:a1:
                    b2:c4:a0:04:57:60:35:46:1d:53:d1:9a:7c:4e:76:
                    ba:56:1c:6e:b9:5b:b4:6c:31:6b:98:09:0e:54:e2:
                    ce:67:e1:c2:52:c4:eb:5f:e7:98:9e:9e:82:a7:44:
                    ef:93:22:be:6b:a1:bd:ad:a9:2f:ec:37:eb:bf:42:
                    9d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:8A:E3:1E:44:A5:10:C4:65:94:80:AF:60:65:C1:E8:F1:73:8C:14
            X509v3 Authority Key Identifier:
                keyid:75:CA:9B:97:A8:A7:97:EB:3A:79:07:8B:F4:07:C1:C9:42:53:69:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/dcqbl6inl-s6eQeL9AfByUJTaa0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dcqbl6inl-s6eQeL9AfByUJTaa0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/dcqbl6inl-s6eQeL9AfByUJTaa0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:11:5c:bd:ad:97:d5:e8:b1:f5:da:39:fd:6d:3b:86:b0:11:
         05:e1:93:0e:b2:aa:a2:51:35:27:78:ca:07:47:e9:49:8f:fa:
         77:b6:77:12:3f:35:65:87:95:37:6e:26:4e:4c:bd:f6:48:eb:
         0b:df:2c:af:97:2f:7d:b7:f6:48:77:33:8c:64:c8:c1:40:2d:
         10:ac:cd:11:2c:c2:97:fd:0b:d8:74:60:48:9a:2a:16:e3:0f:
         48:23:a8:79:30:3b:98:63:4d:b2:fc:43:82:04:75:f0:ed:50:
         ba:b4:79:4c:69:5f:66:f1:c3:4b:ba:c6:1c:3b:c2:4a:1a:b6:
         6c:73:27:c6:91:0b:d5:c3:96:7e:43:e9:bd:bd:aa:c1:0b:b3:
         2d:02:0b:c3:d6:f6:c7:ab:c9:84:c2:a8:13:4f:a0:7d:53:28:
         6c:e8:70:a4:32:b6:38:6f:6c:dc:8c:b3:92:8c:d0:ca:fc:5a:
         c1:60:9b:93:09:b8:40:05:54:e6:7c:22:96:9f:f0:3c:17:52:
         7b:99:f6:70:a8:78:a2:38:3e:c3:fd:a1:8e:6c:9b:06:0c:83:
         05:00:8b:46:1b:1d:84:a4:00:ae:90:1f:97:78:d5:aa:a5:55:
         00:0d:bd:96:d5:df:8e:49:91:d2:23:8c:2e:82:88:2f:c8:4f:
         09:86:c6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 14:38:38 2026 by rpki-client