Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft
File:                     dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft (raw, json)
Hash identifier:          hS+pzSn/pvHPpz4xI8PR5Tzja7ngOJeFwQvmK9fp2kA=
Subject key identifier:   69:F6:87:1E:F1:3C:0D:A3:1D:33:1D:DA:CC:BC:E4:43:57:BB:53:65
Authority key identifier: 75:11:CB:31:3E:B8:3F:1C:39:02:AA:63:C4:3B:7A:03:6A:CC:63:17
Certificate issuer:       /CN=A91273B6/serialNumber=7511CB313EB83F1C3902AA63C43B7A036ACC6317
Certificate serial:       D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRHLMT64Pxw5AqpjxDt6A2rMYxc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft
Manifest number:          CE
Signing time:             Wed 23 Sep 2026 06:32:56 +0000
Manifest this update:     Wed 23 Sep 2026 06:32:56 +0000
Manifest next update:     Wed 30 Sep 2026 06:32:56 +0000
Files and hashes:         1: dRHLMT64Pxw5AqpjxDt6A2rMYxc.crl (hash: 6p7QF0RNEQhsYUQ0nH7lHnuNQ90vl9McuQ8vWKFIbtY=)
                          2: A7FC3D6C041F11F1A6FA4A091E3D8C67.roa (hash: ylWIppRfoSczR+iYCPUGFki8XOe7Epeyq7vnffvpZ6w=)
                          3: 90034B4C041F11F1953EEBDB1D3D8C67.roa (hash: cGlSTDJBs7ggiw8P/P0gjYbp64oLSYqlIubdlATuF4s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.crl
                          rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRHLMT64Pxw5AqpjxDt6A2rMYxc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 06:32:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 213 (0xd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91273B6, serialNumber=7511CB313EB83F1C3902AA63C43B7A036ACC6317
        Validity
            Not Before: Sep 23 06:32:56 2026 GMT
            Not After : Sep 30 06:32:56 2026 GMT
        Subject: CN=6ab37298-bdb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b7:a1:33:8c:bb:85:16:e9:27:82:ee:fe:92:
                    e7:59:3e:81:92:55:f8:5e:19:49:76:74:09:02:b3:
                    de:83:df:f9:39:1a:74:9c:0d:ac:2e:b2:c1:d2:48:
                    87:c7:f9:ea:86:7f:83:b9:d2:0f:cf:37:4b:50:45:
                    79:bb:4e:ea:3a:34:f4:46:f3:af:3a:9e:51:1f:12:
                    e9:c4:33:e2:d4:67:bc:4c:3d:84:ee:44:03:63:34:
                    50:d9:96:12:e6:51:ab:5c:d9:b3:0b:c4:f6:a1:53:
                    97:d1:41:4a:a4:9e:06:40:d1:ef:8e:0a:06:57:91:
                    c0:35:aa:fc:ca:02:b0:bd:c6:d6:9b:57:48:fe:6e:
                    01:84:d4:f8:d6:63:c5:9f:49:74:12:7b:68:76:0a:
                    7e:c4:23:5b:89:f7:c8:21:cf:af:fc:14:fc:d3:16:
                    a0:f0:87:1b:16:67:e4:1e:50:c6:95:ab:35:ab:33:
                    15:99:98:ff:56:8b:e7:45:ae:d6:c7:16:5a:02:c9:
                    a2:34:81:5e:8e:6f:fe:81:7b:3c:0c:a4:14:f4:59:
                    b4:94:78:bf:0d:97:7d:66:fb:fb:9f:80:f9:c5:e6:
                    30:77:e7:a4:b9:21:e1:e2:2a:b3:c8:9b:8c:7b:23:
                    7d:9f:41:df:42:a3:1e:9b:c6:8d:cf:28:c1:6f:0f:
                    31:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:F6:87:1E:F1:3C:0D:A3:1D:33:1D:DA:CC:BC:E4:43:57:BB:53:65
            X509v3 Authority Key Identifier:
                keyid:75:11:CB:31:3E:B8:3F:1C:39:02:AA:63:C4:3B:7A:03:6A:CC:63:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRHLMT64Pxw5AqpjxDt6A2rMYxc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:a9:69:02:e3:c8:ed:dd:8f:17:f2:a8:a8:76:41:9b:9e:d4:
         e0:e5:ee:d3:bc:49:50:0e:22:1e:9d:14:94:a8:c4:29:ef:b5:
         5d:7f:e9:ca:e7:ef:62:6f:88:9b:dd:7b:eb:49:aa:73:95:9a:
         3b:f3:6a:0e:4a:7b:bf:ad:56:7a:4e:d3:46:80:7a:7f:c8:1e:
         95:46:c0:18:87:77:9e:b6:fe:9f:19:a6:d4:13:30:6e:bd:f3:
         5b:99:0b:d6:46:9d:23:ec:7c:56:e6:67:f8:33:7a:7f:58:b1:
         da:a6:f0:ce:f6:47:2d:d7:d6:b6:16:51:0d:57:77:c1:1c:86:
         44:81:d4:99:b2:ee:2e:b1:0f:05:4f:d2:42:b9:db:6f:4e:83:
         d1:43:c2:5f:1a:14:8b:de:03:15:84:83:d8:19:52:ef:9f:3f:
         3e:86:c0:de:49:d8:d2:b8:91:82:e0:c2:72:39:99:cf:99:cc:
         a5:93:79:0c:0f:c5:26:c2:85:c8:9c:d6:cd:e9:d3:c6:f9:ec:
         31:6d:48:04:f7:0f:13:d6:2a:26:46:84:06:60:72:20:f1:16:
         9e:af:4b:5f:88:08:7c:5a:f7:9f:17:a2:7d:51:5a:2c:a9:77:
         7f:23:bd:31:e4:eb:37:5c:ca:4a:90:ed:fa:72:0b:ba:ac:f4:
         ca:20:9c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:31:04 2026 by rpki-client