Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911170F/46064FD09F6A11F1AC7746063611F970/dTtODkQmioFmFCG306CSJ-Xi3K4.mft
File:                     dTtODkQmioFmFCG306CSJ-Xi3K4.mft (raw, json)
Hash identifier:          sOTzekJEB2SiZM7wWaNbd2NlmzYmrVc5c3uyWbTBtgs=
Subject key identifier:   DB:BF:58:53:DE:1D:F2:32:9C:2F:B6:A7:37:E0:70:B0:B1:FA:14:CA
Authority key identifier: 75:3B:4E:0E:44:26:8A:81:66:14:21:B7:D3:A0:92:27:E5:E2:DC:AE
Certificate issuer:       /CN=A911170F/serialNumber=753B4E0E44268A81661421B7D3A09227E5E2DCAE
Certificate serial:       12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dTtODkQmioFmFCG306CSJ-Xi3K4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911170F/46064FD09F6A11F1AC7746063611F970/dTtODkQmioFmFCG306CSJ-Xi3K4.mft
Manifest number:          12
Signing time:             Wed 23 Sep 2026 08:49:37 +0000
Manifest this update:     Wed 23 Sep 2026 08:49:36 +0000
Manifest next update:     Wed 30 Sep 2026 08:49:36 +0000
Files and hashes:         1: dTtODkQmioFmFCG306CSJ-Xi3K4.crl (hash: sark/yNQPJQJYraeKTISbbLjSpuG8lFb12/PS6qKLU4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911170F/46064FD09F6A11F1AC7746063611F970/dTtODkQmioFmFCG306CSJ-Xi3K4.crl
                          rsync://rpki.apnic.net/member_repository/A911170F/46064FD09F6A11F1AC7746063611F970/dTtODkQmioFmFCG306CSJ-Xi3K4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dTtODkQmioFmFCG306CSJ-Xi3K4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 08:49:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911170F, serialNumber=753B4E0E44268A81661421B7D3A09227E5E2DCAE
        Validity
            Not Before: Sep 23 08:49:36 2026 GMT
            Not After : Sep 30 08:49:36 2026 GMT
        Subject: CN=6ab392a1-8758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2b:33:02:c3:6a:b1:2a:d1:c7:ff:af:2a:3d:
                    5c:5e:4a:5f:f3:5c:03:dc:3a:15:a0:c9:0e:72:0c:
                    fe:ab:e7:28:54:61:da:54:e2:66:f1:7c:b8:f0:8c:
                    ec:da:58:f2:1b:21:07:ab:7b:e2:43:e4:76:61:ce:
                    23:e5:ef:6b:7f:c9:2c:50:01:3e:4b:ba:36:36:49:
                    3a:b3:53:0d:27:05:d8:61:f1:41:52:9b:a9:85:82:
                    55:2e:dd:d4:97:98:91:59:5e:2e:da:08:68:5f:d0:
                    bd:e6:83:1e:58:53:9d:57:2b:33:dc:6b:a7:3c:24:
                    50:46:11:b5:49:0e:15:9e:d6:bf:18:c0:a8:6b:a1:
                    de:38:e3:9a:07:be:88:7a:73:d9:2c:6a:51:ce:8a:
                    ab:46:ec:d7:9c:cd:5a:07:49:ca:7f:de:74:8a:db:
                    ce:62:fc:bb:e5:19:18:d4:c0:2e:ab:bc:7a:56:3f:
                    63:51:7f:11:c8:58:3f:22:6d:00:d8:db:46:ab:e9:
                    c6:47:86:1c:81:a8:18:e0:a3:77:d7:a1:71:37:05:
                    3d:f3:bf:71:1a:c0:c4:c2:d7:89:49:17:95:48:ae:
                    05:e5:c8:84:94:ab:89:e3:8d:d2:ac:4e:bd:ee:f8:
                    66:a1:81:c1:27:b6:78:a2:e8:de:ea:4b:74:01:48:
                    e9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:BF:58:53:DE:1D:F2:32:9C:2F:B6:A7:37:E0:70:B0:B1:FA:14:CA
            X509v3 Authority Key Identifier:
                keyid:75:3B:4E:0E:44:26:8A:81:66:14:21:B7:D3:A0:92:27:E5:E2:DC:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911170F/46064FD09F6A11F1AC7746063611F970/dTtODkQmioFmFCG306CSJ-Xi3K4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dTtODkQmioFmFCG306CSJ-Xi3K4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911170F/46064FD09F6A11F1AC7746063611F970/dTtODkQmioFmFCG306CSJ-Xi3K4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:4d:47:be:04:bc:1e:ce:9c:eb:39:ba:7c:50:52:25:e2:a0:
         66:c2:aa:e4:f2:92:7f:69:03:d6:b6:74:dd:d0:16:c1:52:ea:
         8c:d5:93:78:62:17:bf:a6:6e:d9:5b:b3:1a:4b:c5:41:a5:0b:
         e9:1a:31:69:18:bb:28:8b:e7:e6:a4:81:10:55:b9:34:fa:df:
         5a:e9:5f:95:70:27:e0:ac:e5:cd:34:7c:ec:ce:db:a7:08:73:
         66:16:6c:34:5e:f8:39:95:9c:5f:a4:d4:93:6b:78:dd:84:f1:
         79:6b:e1:05:12:da:77:a7:b1:d5:a4:4a:8e:e5:db:c8:16:15:
         d0:ca:08:a6:98:00:0a:9f:e4:0b:38:5b:e1:38:2a:17:80:90:
         f4:92:7a:50:12:b8:44:79:49:7d:a1:ce:b7:b4:f2:49:2d:60:
         c2:1d:fb:22:0d:fe:79:af:1f:b9:10:6f:93:fa:62:b7:a3:cd:
         82:d3:09:e5:a1:b0:a8:be:b8:62:d3:c3:98:08:b3:7e:31:ee:
         43:9f:95:2a:81:66:c9:7b:2d:02:49:f0:8f:ca:0b:9d:87:aa:
         05:b4:7b:14:94:9d:cd:68:80:a0:0a:95:bc:ef:1b:5c:0f:81:
         0a:4d:fe:cb:66:fe:1f:fd:df:32:00:eb:60:64:b2:c2:c3:33:
         63:99:3f:40
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
MTcwRjExMC8GA1UEBRMoNzUzQjRFMEU0NDI2OEE4MTY2MTQyMUI3RDNBMDkyMjdF
NUUyRENBRTAeFw0yNjA5MjMwODQ5MzZaFw0yNjA5MzAwODQ5MzZaMBgxFjAUBgNV
BAMTDTZhYjM5MmExLTg3NTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDIKzMCw2qxKtHH/68qPVxeSl/zXAPcOhWgyQ5yDP6r5yhUYdpU4mbxfLjwjOza
WPIbIQere+JD5HZhziPl72t/ySxQAT5LujY2STqzUw0nBdhh8UFSm6mFglUu3dSX
mJFZXi7aCGhf0L3mgx5YU51XKzPca6c8JFBGEbVJDhWe1r8YwKhrod4445oHvoh6
c9ksalHOiqtG7NeczVoHScp/3nSK285i/LvlGRjUwC6rvHpWP2NRfxHIWD8ibQDY
20ar6cZHhhyBqBjgo3fXoXE3BT3zv3EawMTC14lJF5VIrgXlyISUq4njjdKsTr3u
+GahgcEntnii6N7qS3QBSOm9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU279YU94d
8jKcL7anN+BwsLH6FMowHwYDVR0jBBgwFoAUdTtODkQmioFmFCG306CSJ+Xi3K4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTExNzBGLzQ2MDY0RkQwOUY2
QTExRjFBQzc3NDYwNjM2MTFGOTcwL2RUdE9Ea1FtaW9GbUZDRzMwNkNTSi1YaTNL
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZFR0T0RrUW1pb0ZtRkNHMzA2Q1NKLVhpM0s0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEx
NzBGLzQ2MDY0RkQwOUY2QTExRjFBQzc3NDYwNjM2MTFGOTcwL2RUdE9Ea1FtaW9G
bUZDRzMwNkNTSi1YaTNLNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAaTUe+BLwezpzrObp8UFIl4qBmwqrk8pJ/aQPWtnTd0BbBUuqM1ZN4Yhe/pm7Z
W7MaS8VBpQvpGjFpGLsoi+fmpIEQVbk0+t9a6V+VcCfgrOXNNHzsztunCHNmFmw0
Xvg5lZxfpNSTa3jdhPF5a+EFEtp3p7HVpEqO5dvIFhXQygimmAAKn+QLOFvhOCoX
gJD0knpQErhEeUl9oc63tPJJLWDCHfsiDf55rx+5EG+T+mK3o82C0wnlobCovrhi
08OYCLN+Me5Dn5UqgWbJey0CSfCPygudh6oFtHsUlJ3NaICgCpW87xtcD4EKTf7L
Zv4f/d8yAOtgZLLCwzNjmT9A
-----END CERTIFICATE-----
Generated at Wed Sep 23 16:56:09 2026 by rpki-client