Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.mft
File:                     DcXOSilPLJOAqRNe4fBTByikzaY.mft (raw, json)
Hash identifier:          1mOFNazwgchILw3DZ9cnaXgkXkIUjknC4nU8X5E4PpQ=
Subject key identifier:   1D:C2:ED:7F:AA:AF:9C:3B:24:67:4A:E6:2D:AE:D3:EB:A5:61:D8:84
Authority key identifier: 0D:C5:CE:4A:29:4F:2C:93:80:A9:13:5E:E1:F0:53:07:28:A4:CD:A6
Certificate issuer:       /CN=A912B4DB/serialNumber=0DC5CE4A294F2C9380A9135EE1F0530728A4CDA6
Certificate serial:       359D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcXOSilPLJOAqRNe4fBTByikzaY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.mft
Manifest number:          358F
Signing time:             Wed 30 Sep 2026 15:16:31 +0000
Manifest this update:     Wed 30 Sep 2026 15:16:31 +0000
Manifest next update:     Wed 07 Oct 2026 15:16:31 +0000
Files and hashes:         1: DcXOSilPLJOAqRNe4fBTByikzaY.crl (hash: rtdBIbbYoZ1JeMaiFXaEFcbYZJs8B8kp2sPHYTZojzQ=)
                          2: 7FE5F2CEDB9411E9832A463AC4F9AE02.roa (hash: J9d3oCMnh4MCQUF8hvG6C1s4rT5lBz2hVV4fQZpMFs4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.crl
                          rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcXOSilPLJOAqRNe4fBTByikzaY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 Oct 2026 15:16:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13725 (0x359d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B4DB, serialNumber=0DC5CE4A294F2C9380A9135EE1F0530728A4CDA6
        Validity
            Not Before: Sep 30 15:16:31 2026 GMT
            Not After : Oct  7 15:16:31 2026 GMT
        Subject: CN=6abd27cf-60b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:79:82:90:32:ac:4b:73:4e:65:d3:5c:ef:f4:
                    72:04:2c:7f:df:0b:75:60:22:20:01:e1:bf:2e:a9:
                    99:da:d7:58:e5:14:a0:c1:9b:89:91:fb:49:ac:17:
                    48:7f:56:f5:29:8b:75:26:ab:cf:ac:af:fb:2e:01:
                    01:e7:68:a2:fb:8e:1d:94:cc:2b:63:e2:ea:d6:b0:
                    c3:6e:56:dd:d7:c7:d9:86:7e:98:00:13:d7:7d:4e:
                    2e:2f:af:11:0d:b5:4c:5b:d2:57:37:cb:af:ce:6a:
                    66:e8:91:22:1d:6a:5a:36:42:20:66:a5:9c:40:c9:
                    25:05:ee:24:34:81:df:bf:11:79:5e:c9:11:a9:7b:
                    16:4d:fe:26:f5:f7:20:5b:a3:33:e1:e0:f6:e7:2f:
                    97:62:30:6e:23:96:ee:e1:65:b7:6f:24:7c:69:96:
                    39:a3:4f:68:07:24:08:39:65:90:9c:10:ca:87:80:
                    9c:1b:cb:4b:6b:36:d7:89:bf:4c:4a:74:0e:be:48:
                    3c:f8:18:22:98:c2:3d:0b:a3:86:44:a3:24:c1:e4:
                    c4:43:e6:23:0a:8e:42:5b:60:56:c3:c2:09:4e:fe:
                    f7:53:36:89:91:25:cb:64:f5:d9:7f:ac:e8:29:9d:
                    48:2a:c2:2c:c6:3f:94:52:38:be:01:d9:3a:c7:63:
                    c6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:C2:ED:7F:AA:AF:9C:3B:24:67:4A:E6:2D:AE:D3:EB:A5:61:D8:84
            X509v3 Authority Key Identifier:
                keyid:0D:C5:CE:4A:29:4F:2C:93:80:A9:13:5E:E1:F0:53:07:28:A4:CD:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcXOSilPLJOAqRNe4fBTByikzaY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:dc:cc:d2:8e:19:ff:f4:bb:16:89:03:12:db:a0:b8:d9:a8:
         68:57:02:d9:cd:bf:3f:d3:9a:f3:6c:83:d4:91:c6:16:8f:b2:
         64:b6:bd:c1:91:43:ce:7c:4a:ef:35:eb:9a:13:e2:c2:ea:6a:
         84:b6:70:f8:2f:df:e1:9f:c2:e3:fe:5d:f4:e0:f1:4e:81:73:
         d4:25:63:9a:86:2b:90:3c:59:67:9f:23:42:ab:13:ec:aa:6e:
         04:81:ff:16:dc:e4:cf:98:dd:36:99:03:c5:df:49:dc:d8:76:
         b8:34:c2:8a:4b:a7:d5:60:9b:e3:70:0f:77:96:3f:f3:b0:1e:
         d8:8e:85:b7:3a:74:be:32:d3:33:19:51:ed:73:f4:e3:f0:0a:
         10:ce:42:df:cf:36:22:46:29:bd:3b:46:fd:b4:7d:56:da:4f:
         c8:51:10:83:47:38:7b:1f:66:31:09:f8:b0:44:c1:8b:86:95:
         c4:36:27:1e:1e:08:23:1b:38:00:2c:34:d1:f5:ec:8d:3a:b8:
         d1:b8:89:78:91:f5:ba:13:45:bf:5d:e9:33:b6:c1:5c:bf:b4:
         23:55:43:e7:c0:a8:34:b8:49:68:df:dc:85:64:6c:35:48:1a:
         28:7a:05:6b:c2:72:2a:be:1b:74:7b:5b:75:1e:67:6b:75:a8:
         22:cf:a7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 13:08:34 2026 by rpki-client