Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft
File:                     DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft (raw, json)
Hash identifier:          +0ehzn8YRmtRxFCRp0LeN/xW97rYHjplCCunAkTYN9g=
Subject key identifier:   EA:EB:D5:F1:2C:7D:78:08:8F:6C:B5:DF:8B:BD:CB:A3:43:2B:DA:13
Authority key identifier: 0E:03:D3:C2:E8:F2:C5:35:82:BE:D1:C2:14:C1:FD:3A:AE:A5:AE:5A
Certificate issuer:       /CN=A911418D/serialNumber=0E03D3C2E8F2C53582BED1C214C1FD3AAEA5AE5A
Certificate serial:       0695
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft
Manifest number:          067C
Signing time:             Tue 22 Sep 2026 22:17:42 +0000
Manifest this update:     Tue 22 Sep 2026 22:17:42 +0000
Manifest next update:     Tue 29 Sep 2026 22:17:42 +0000
Files and hashes:         1: DgPTwujyxTWCvtHCFMH9Oq6lrlo.crl (hash: aB9PpQPcObAmTkBtOFYXdkiPlo9oIOWPDn1kduY/+vw=)
                          2: 33392DE2059011F1A8DF17AA3E3D8C67.roa (hash: q1rBnMxJ+DzQAHD3yWNtFqN06AdWDOlKoKntvnfHolI=)
                          3: CB7909B4B26C11F08ED1666AC4F9AE02.roa (hash: 8uzxFmMR3Sr3PxroRuZhI7xinnvv5MK7IdYyanz4uBY=)
                          4: F7AB4FF8058F11F1B7BFF5793E3D8C67.roa (hash: smzhzupHrKLINvK/TUbRvcJq4YEGD40s9iChZgILW3o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.crl
                          rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 22:17:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1685 (0x695)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911418D, serialNumber=0E03D3C2E8F2C53582BED1C214C1FD3AAEA5AE5A
        Validity
            Not Before: Sep 22 22:17:42 2026 GMT
            Not After : Sep 29 22:17:42 2026 GMT
        Subject: CN=6ab2fe86-1911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ad:43:73:88:86:f9:b0:53:50:01:17:a2:21:
                    fa:c8:8c:89:47:ac:05:04:a5:2f:88:86:80:f5:be:
                    30:3b:b9:3d:0a:8c:8d:aa:b4:3a:ef:07:bc:45:42:
                    ab:49:c8:22:7b:2d:5c:a2:c3:14:e3:bd:ef:9f:2d:
                    4f:ef:fb:03:82:cd:64:75:4e:ee:a9:8c:f5:e9:83:
                    e0:4d:43:bd:5b:be:30:83:90:38:ea:51:02:7c:25:
                    dc:69:53:51:59:4c:0a:a1:01:44:9f:99:4c:7a:a7:
                    93:08:7b:1e:39:df:b1:05:36:f7:1e:f6:93:5a:4f:
                    df:f7:7b:99:90:cf:50:6b:77:63:50:d1:a7:c5:0c:
                    34:29:cf:30:07:f8:67:96:c7:10:ac:4b:5a:b0:b9:
                    19:c2:97:24:1e:2a:23:e8:ff:ac:a5:72:b5:dc:dd:
                    0a:f5:81:1a:7a:64:2c:07:5b:19:f0:7e:f5:7e:fb:
                    d3:76:e5:ad:ae:04:69:5a:74:6d:ca:e8:1e:0d:ea:
                    c9:0c:67:b3:e1:a5:a7:59:d4:29:f9:85:99:1f:ed:
                    29:b4:87:46:88:c6:17:6a:f6:aa:14:dd:d9:89:1e:
                    42:16:14:38:03:f0:46:a5:20:11:0a:62:30:3f:22:
                    60:b5:b6:47:86:1a:32:0f:0e:a3:ad:b4:71:fd:8a:
                    c2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:EB:D5:F1:2C:7D:78:08:8F:6C:B5:DF:8B:BD:CB:A3:43:2B:DA:13
            X509v3 Authority Key Identifier:
                keyid:0E:03:D3:C2:E8:F2:C5:35:82:BE:D1:C2:14:C1:FD:3A:AE:A5:AE:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:30:17:4f:87:b7:a7:30:a2:87:e2:01:1d:23:d6:6c:14:fa:
         fa:b7:fd:a4:66:50:d2:f5:ac:2d:46:a7:8d:1b:3d:e3:04:ec:
         35:a2:27:79:e0:58:19:d9:46:b7:06:73:10:8d:3a:24:2e:60:
         1c:69:71:46:8d:4f:a1:4c:5d:a4:31:f1:3f:da:66:4c:8e:9e:
         78:fc:e9:41:02:d8:bd:e3:f4:c5:fa:86:78:5e:62:35:6a:16:
         a6:b3:5f:78:3f:a9:1a:ba:ce:38:54:4a:72:a9:3d:4d:ee:d7:
         af:28:17:b4:9d:c9:c8:b1:e0:03:ae:8e:54:5b:f0:3e:29:50:
         8c:52:2c:14:39:bf:33:b1:28:cb:03:7d:1d:04:91:38:ca:54:
         fc:3a:25:f3:23:2b:3a:7f:35:bc:2b:f7:cd:20:5f:7c:78:d7:
         60:a1:1b:d2:06:18:ae:8c:1c:20:d7:3d:be:01:f2:a8:d9:d2:
         75:e3:15:25:5a:a5:c9:af:66:d7:16:32:a2:cd:21:49:59:55:
         d3:49:9b:aa:ce:b3:ea:e7:8d:fc:3b:71:60:a6:12:f3:c3:ce:
         7b:e1:95:24:d7:26:20:0f:78:6d:b0:fc:fa:26:3f:16:ad:61:
         08:a3:94:e7:88:33:d4:cb:21:7e:a0:f6:17:79:2b:ec:38:b7:
         a0:a4:23:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:57:35 2026 by rpki-client