Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft
File:                     dRH-79yX09DgVRW7QMF431FGqcQ.mft (raw, json)
Hash identifier:          ajSsEb6IS9ehD8AZDaamUc6pX7YelPKvtx4sbS4y6zI=
Subject key identifier:   2D:62:41:CF:F5:14:EE:DD:D5:E6:C6:A7:36:2E:FA:60:56:8C:49:5B
Authority key identifier: 75:11:FE:EF:DC:97:D3:D0:E0:55:15:BB:40:C1:78:DF:51:46:A9:C4
Certificate issuer:       /CN=A9131F8A/serialNumber=7511FEEFDC97D3D0E05515BB40C178DF5146A9C4
Certificate serial:       0F5E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRH-79yX09DgVRW7QMF431FGqcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft
Manifest number:          0F4A
Signing time:             Thu 24 Sep 2026 17:32:22 +0000
Manifest this update:     Thu 24 Sep 2026 17:32:22 +0000
Manifest next update:     Thu 01 Oct 2026 17:32:22 +0000
Files and hashes:         1: dRH-79yX09DgVRW7QMF431FGqcQ.crl (hash: w1Rc4ef0IIhk8Vyft20m+OP/LTqZJ85z2aOqLnSawjE=)
                          2: 251E7880A1FA11E9AF723E1BC4F9AE02.roa (hash: EgdNpKJv5qTrYsCD4ruXe4GnFpA9Meqmqv0UvPzJUpo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.crl
                          rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRH-79yX09DgVRW7QMF431FGqcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 17:32:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3934 (0xf5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131F8A, serialNumber=7511FEEFDC97D3D0E05515BB40C178DF5146A9C4
        Validity
            Not Before: Sep 24 17:32:22 2026 GMT
            Not After : Oct  1 17:32:22 2026 GMT
        Subject: CN=6ab55ea6-a038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:31:e0:21:cf:19:ac:fe:98:d4:b2:f7:07:23:
                    84:1a:dc:43:c5:c8:98:7e:1f:57:3c:23:d0:9a:be:
                    b2:aa:7d:c4:d4:a4:cd:65:05:02:93:78:98:fd:09:
                    8a:7f:ad:fa:38:d4:ed:a6:09:9c:7b:fc:fe:2c:2a:
                    0e:73:aa:d5:f9:1a:36:0b:64:ed:0a:76:83:05:6f:
                    c9:7d:fb:7e:08:dc:d9:b8:cb:7f:c3:a0:2e:7c:2d:
                    f3:e4:5c:79:03:ec:45:d0:04:50:b0:7d:d0:7f:99:
                    81:59:99:a9:b3:1a:82:dd:05:9b:f0:05:20:e5:e1:
                    6b:b8:9a:92:bc:12:f0:c6:ec:eb:31:b8:16:34:32:
                    14:ce:b2:b9:cd:ca:ec:d7:c9:bc:94:ed:a6:e9:07:
                    1a:ca:a8:02:dc:a9:fb:93:2c:c3:b0:ed:0d:51:fb:
                    1a:ef:ca:60:ac:52:27:ed:92:b9:7a:a3:3f:40:1b:
                    77:34:25:72:a8:c2:5a:e5:ed:0b:4d:7c:8b:87:c2:
                    12:d2:71:f1:77:8e:e4:58:5e:dd:48:91:8a:ec:a3:
                    a2:58:7a:ea:1c:09:08:e2:76:c1:54:37:41:b0:1d:
                    c4:d4:fb:60:b5:1a:59:52:4d:51:00:cc:75:5c:21:
                    7c:a8:30:e5:52:0d:56:f1:31:dc:5b:cb:33:f9:a3:
                    33:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:62:41:CF:F5:14:EE:DD:D5:E6:C6:A7:36:2E:FA:60:56:8C:49:5B
            X509v3 Authority Key Identifier:
                keyid:75:11:FE:EF:DC:97:D3:D0:E0:55:15:BB:40:C1:78:DF:51:46:A9:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRH-79yX09DgVRW7QMF431FGqcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:00:44:1c:ae:51:b7:3a:3f:63:b3:77:eb:03:43:c0:36:4a:
         9f:83:2c:e4:f3:f8:23:ad:ce:34:54:02:c1:38:83:68:79:f2:
         de:31:f7:b6:c0:25:ee:a6:fe:15:6b:0e:52:75:8a:ba:30:02:
         c1:4a:36:70:2e:89:e2:ab:09:71:41:6c:ea:46:41:b9:b5:c8:
         6d:5f:8a:df:d5:12:db:1b:e1:48:8a:1c:34:c1:b4:cf:ed:28:
         d4:6b:91:4a:dc:22:27:b8:36:99:5e:91:f2:31:76:7f:5f:8b:
         d6:cd:02:6c:16:e1:f3:81:19:47:3f:71:5a:01:9e:91:30:13:
         4c:50:f1:76:72:bb:9b:b9:9d:0e:46:ac:db:6e:22:97:79:c0:
         a6:5b:a9:dc:02:2b:02:f3:ef:3f:c1:75:66:06:47:f7:d5:a5:
         03:81:a4:64:18:d7:cb:f7:ee:e4:8e:91:75:2b:f0:f8:33:06:
         c7:e6:17:e3:f3:99:66:ca:83:80:ec:70:d6:98:75:2c:fc:93:
         55:52:dd:10:80:87:6e:d8:34:f6:f0:0c:22:03:f8:a4:4b:78:
         ff:73:2b:b9:cc:a8:15:ef:5d:22:21:1e:e1:97:03:4d:36:59:
         82:86:14:5b:4e:89:3a:b3:0e:8f:a1:2d:c2:35:30:58:0c:7e:
         9f:76:2e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:53:41 2026 by rpki-client