Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.mft
File:                     DDegHLYzYjRPtzlnYP2U2cm5fHo.mft (raw, json)
Hash identifier:          mMjm7qdmQtt4C3Jx/Gp5girAUhFdzd4PgVIJVsMjewI=
Subject key identifier:   D8:57:CF:AE:8B:53:5A:CE:D9:DD:33:12:A1:93:71:F3:DF:98:CA:80
Authority key identifier: 0C:37:A0:1C:B6:33:62:34:4F:B7:39:67:60:FD:94:D9:C9:B9:7C:7A
Certificate issuer:       /CN=A912B64D/serialNumber=0C37A01CB63362344FB7396760FD94D9C9B97C7A
Certificate serial:       0249
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDegHLYzYjRPtzlnYP2U2cm5fHo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.mft
Manifest number:          0243
Signing time:             Sun 27 Sep 2026 02:48:19 +0000
Manifest this update:     Sun 27 Sep 2026 02:48:18 +0000
Manifest next update:     Sun 04 Oct 2026 02:48:18 +0000
Files and hashes:         1: DDegHLYzYjRPtzlnYP2U2cm5fHo.crl (hash: k7WzvqEI53voIkxdaQqP/Fdjiqnzt3aO9xW1hBgeUmc=)
                          2: 865B3F7C467C11EEBDE3D43CC4F9AE02.roa (hash: tuCN6O3U0PhqHjOU2y8CruvRTIpfP/U+Bw2TGt25+Ik=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.crl
                          rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDegHLYzYjRPtzlnYP2U2cm5fHo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 02:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 585 (0x249)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B64D, serialNumber=0C37A01CB63362344FB7396760FD94D9C9B97C7A
        Validity
            Not Before: Sep 27 02:48:18 2026 GMT
            Not After : Oct  4 02:48:18 2026 GMT
        Subject: CN=6ab883f3-a744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f8:22:5a:2b:d9:b0:4a:a1:90:74:19:da:2d:
                    a2:62:34:9c:e4:54:12:fd:83:46:4a:7e:1a:df:95:
                    d9:22:0b:81:b5:67:27:e1:dc:9d:84:7d:10:ee:6d:
                    ef:0e:1f:a1:b0:d2:10:a0:dd:94:d0:e7:ff:ba:ba:
                    9e:9e:89:3a:92:e5:ec:43:d4:b8:fb:99:1d:62:1e:
                    f2:34:e3:42:6e:aa:e7:b7:c0:1e:e8:7f:3f:34:02:
                    f7:17:58:4e:46:4e:9f:c0:b2:f8:02:c0:5f:5c:d4:
                    b1:c1:6a:2a:a5:f0:ef:60:c7:d0:46:46:98:83:28:
                    5d:5c:c7:d2:d2:de:41:41:16:e9:92:d6:47:c8:1f:
                    ce:59:06:0c:5b:fe:e5:00:98:5b:c2:3b:46:18:2e:
                    33:36:7b:cd:de:35:f8:49:e2:0d:ba:b9:7e:aa:ac:
                    93:a7:f1:bd:d2:49:11:fa:f9:1a:9d:5b:27:b1:61:
                    71:dc:90:d8:93:0f:b4:3a:50:9a:6e:63:1a:39:c4:
                    30:32:1e:19:a1:cf:93:04:80:dd:2a:b3:e0:a8:16:
                    2a:d4:97:31:18:ea:1a:f7:fc:2b:28:68:07:cd:d1:
                    3e:3e:f4:cc:8f:33:5d:18:25:4b:0a:35:ce:3e:9c:
                    84:8a:e1:8f:f7:96:e3:48:bf:e3:44:a2:87:00:a9:
                    eb:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:57:CF:AE:8B:53:5A:CE:D9:DD:33:12:A1:93:71:F3:DF:98:CA:80
            X509v3 Authority Key Identifier:
                keyid:0C:37:A0:1C:B6:33:62:34:4F:B7:39:67:60:FD:94:D9:C9:B9:7C:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDegHLYzYjRPtzlnYP2U2cm5fHo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:9a:5c:cd:e7:cf:5c:df:cc:b7:35:a3:d0:fa:2c:ed:c8:eb:
         03:9b:ef:e6:a1:23:a0:85:db:c6:81:17:5e:b4:93:c1:2d:df:
         ef:a9:c3:77:26:17:75:ac:1a:49:55:88:74:3c:85:3d:65:57:
         4c:19:9e:40:c4:56:48:52:5a:47:99:99:3d:f3:30:fb:45:48:
         41:b4:38:15:d3:ff:da:9e:eb:ff:1e:44:1d:09:11:1f:e0:e1:
         e2:b9:ec:ac:49:ae:d6:fe:c7:f0:53:3f:34:17:9c:b9:d3:38:
         93:f3:8c:df:f9:b3:70:e5:88:13:46:87:b3:10:0e:94:99:be:
         54:79:ca:77:6e:ee:44:26:b0:e1:f5:6f:81:87:36:ef:87:64:
         2a:61:c9:40:30:8a:a9:c3:18:a1:61:28:d6:e4:f2:3f:47:74:
         be:11:1a:24:e7:69:21:ad:f7:fe:79:d5:45:9c:10:79:13:8f:
         1d:c3:02:08:cf:5d:f6:bd:cf:b0:63:03:b5:55:bf:66:03:e8:
         1f:46:02:92:fb:f6:09:d8:ee:79:92:c2:ae:af:fa:f2:8c:57:
         ba:60:b9:a8:c7:ea:b2:ea:c4:8f:33:15:c2:ea:45:9c:fa:3b:
         c6:0c:04:7c:c2:47:10:66:03:87:57:8f:c2:59:1c:8a:3c:57:
         20:8a:6c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:30:20 2026 by rpki-client