Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.mft
File:                     dpU2g0Agk0lSKX69t4GJNXsToUU.mft (raw, json)
Hash identifier:          7IToqn0ZzBh2dmJ4WlCe3YWYf0SZ/wCDcm1dFjz3dMM=
Subject key identifier:   48:11:7B:B9:92:0F:B0:D5:26:47:7D:06:5A:33:CA:A8:9C:E8:08:1B
Authority key identifier: 76:95:36:83:40:20:93:49:52:29:7E:BD:B7:81:89:35:7B:13:A1:45
Certificate issuer:       /CN=A9111623/serialNumber=769536834020934952297EBDB78189357B13A145
Certificate serial:       01DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dpU2g0Agk0lSKX69t4GJNXsToUU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.mft
Manifest number:          01CC
Signing time:             Wed 23 Sep 2026 03:37:55 +0000
Manifest this update:     Wed 23 Sep 2026 03:37:54 +0000
Manifest next update:     Wed 30 Sep 2026 03:37:54 +0000
Files and hashes:         1: dpU2g0Agk0lSKX69t4GJNXsToUU.crl (hash: 2zP4lEoo/MX6ympVrtIhVYyMLqLnjk6x/9fAAXEuoMY=)
                          2: CAE74ADEFD4511EEA97C9D1CC4F9AE02.roa (hash: zvV0e48dwD3IVwxrvC+3E1d2bP8roEkFmj5ckF5v3Ug=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.crl
                          rsync://rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dpU2g0Agk0lSKX69t4GJNXsToUU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 03:37:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 474 (0x1da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111623, serialNumber=769536834020934952297EBDB78189357B13A145
        Validity
            Not Before: Sep 23 03:37:54 2026 GMT
            Not After : Sep 30 03:37:54 2026 GMT
        Subject: CN=6ab34993-ef32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:7b:c6:23:de:50:dc:15:da:24:b6:18:8a:c1:
                    f2:23:0d:07:b0:fc:b3:5e:30:88:8b:43:60:cb:85:
                    cd:4e:52:dc:c9:9b:4b:e9:15:b1:d1:12:92:e3:71:
                    54:9a:c5:4e:05:2b:22:81:11:a2:c9:c8:78:74:17:
                    3e:e4:ed:09:ec:e1:aa:7a:02:61:19:09:ee:4d:b6:
                    8f:12:e8:18:9d:ac:ac:f0:80:3e:4e:68:e4:86:a0:
                    cb:5e:75:4c:e4:25:33:e8:b8:53:49:73:21:69:30:
                    66:17:89:45:2c:bc:2c:39:b9:43:d7:83:3e:b9:0a:
                    0a:dd:0e:9b:24:95:ae:17:23:0a:87:bb:8c:52:bc:
                    e3:69:d5:64:5e:14:8b:4e:ab:a8:e7:a4:6b:0e:6d:
                    0d:b2:6e:89:8d:35:4e:91:80:cf:7e:1b:f6:bf:87:
                    93:e5:b2:94:ae:30:75:8c:23:b2:95:1b:15:aa:26:
                    13:50:80:ee:19:9e:90:cf:a7:ff:15:03:50:a0:f2:
                    55:33:26:1e:b8:bb:46:89:0d:24:97:fb:ba:be:97:
                    10:bf:da:f3:7f:a4:00:9b:53:b1:d6:08:24:1f:c0:
                    dc:3a:49:1f:e7:a2:1c:5f:7b:8d:e6:d5:34:2b:96:
                    e7:1f:19:36:7b:4b:12:5d:8b:65:ea:43:9e:2a:d7:
                    46:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:11:7B:B9:92:0F:B0:D5:26:47:7D:06:5A:33:CA:A8:9C:E8:08:1B
            X509v3 Authority Key Identifier:
                keyid:76:95:36:83:40:20:93:49:52:29:7E:BD:B7:81:89:35:7B:13:A1:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dpU2g0Agk0lSKX69t4GJNXsToUU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:d9:00:4e:8a:15:41:e5:ad:48:8d:35:5b:ad:c0:3c:98:c0:
         a9:2f:93:21:5e:fb:22:7f:01:ed:0f:ec:a6:f6:41:ff:bd:50:
         e7:75:f4:f5:b2:27:66:21:8b:47:d1:64:5b:bd:f4:dd:cd:6e:
         5f:c5:2f:f8:91:69:3b:5d:9e:a7:16:b7:99:e5:e3:4c:ba:e7:
         5c:50:2f:1c:e4:4d:e2:1d:84:f7:4a:98:18:67:c9:57:f4:33:
         64:24:67:d3:c9:82:19:bd:e7:a5:71:dc:92:5d:00:03:b7:f5:
         2f:74:ad:d0:9b:b7:78:da:2b:75:03:be:d6:fe:cc:b7:4f:2a:
         c1:65:ed:2a:ca:70:d5:9a:ec:39:09:21:19:1e:7f:e1:0d:27:
         0c:f6:a3:bf:15:e9:f2:2f:f1:6a:1a:3b:09:d0:6f:35:cc:b9:
         77:8f:28:26:19:66:ca:1c:f0:41:89:b4:7f:07:dd:3b:4b:4c:
         54:00:fa:8b:81:d0:ca:9e:63:71:03:f3:ff:0d:9b:f3:54:99:
         17:bc:8a:51:64:91:e1:8e:3d:66:4c:c7:0d:f6:51:51:bf:f7:
         48:25:7a:4e:77:7b:aa:b8:59:12:44:8a:9f:5e:8f:72:f2:ef:
         e8:c1:39:08:b4:ac:88:a8:f3:16:51:b7:84:cd:03:1f:11:c1:
         dc:f2:d4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:37:19 2026 by rpki-client