Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft
File:                     DHYrLJAks0yYhILx1x10mufcSus.mft (raw, json)
Hash identifier:          VokDKO/KBcUFTBDIgOEqwiAJoMnz5bqJBUc2h4O+MC0=
Subject key identifier:   3C:D8:3B:9F:0B:11:44:1F:15:22:B8:3F:76:FF:88:DE:A9:35:AF:6C
Authority key identifier: 0C:76:2B:2C:90:24:B3:4C:98:84:82:F1:D7:1D:74:9A:E7:DC:4A:EB
Certificate issuer:       /CN=A91348C9/serialNumber=0C762B2C9024B34C988482F1D71D749AE7DC4AEB
Certificate serial:       0213
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft
Manifest number:          01F1
Signing time:             Wed 23 Sep 2026 03:18:43 +0000
Manifest this update:     Wed 23 Sep 2026 03:18:42 +0000
Manifest next update:     Wed 30 Sep 2026 03:18:42 +0000
Files and hashes:         1: DHYrLJAks0yYhILx1x10mufcSus.crl (hash: KwHzrGwBu20LTc+mtvcskd8coMJo2toSoLylKwphNOY=)
                          2: F8B24A3C127911F09BCB8B7AC4F9AE02.roa (hash: 1cBkJAATgAnAWpkL5ephYU2tTfXe7A7jghvap9dsu7Q=)
                          3: 9B6126AEE1D811EF881A2765C4F9AE02.roa (hash: phsa0aOE8eqCOpQqL6MkEfoEn022+mvXBZ0Y/k/Gb6A=)
                          4: 5D31D17ACE9811EE9392467BC4F9AE02.roa (hash: z+lohyQaMeb0DYcM3/qn4iEQ+VpTj1TLsiVBPUy6pZk=)
                          5: 79F7221E892911EF896D1145C4F9AE02.roa (hash: 4HsEjdA6ll0rAi2M5nFxa1SGJVN7pNCKPiFzJN7imik=)
                          6: F278C026892911EFB08D7746C4F9AE02.roa (hash: wlRisXvx0zTP/TvUTz15M4hS2Jw5htErhvvetPP2grU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.crl
                          rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 03:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 531 (0x213)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91348C9, serialNumber=0C762B2C9024B34C988482F1D71D749AE7DC4AEB
        Validity
            Not Before: Sep 23 03:18:42 2026 GMT
            Not After : Sep 30 03:18:42 2026 GMT
        Subject: CN=6ab34513-1c72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f6:6b:70:76:31:05:f2:03:01:c4:2f:d1:c5:
                    f4:a8:63:33:32:fb:c3:69:0e:c2:cc:ba:bb:5e:72:
                    f3:d3:2f:39:3e:e4:08:6d:63:e9:49:04:2e:cb:35:
                    b9:d0:10:1b:c5:cd:1d:c8:0d:19:17:c7:04:89:59:
                    ad:3f:46:ac:ba:ce:79:cb:34:c0:fd:66:f8:35:53:
                    54:e6:99:62:2e:20:30:cf:4f:9d:72:33:3a:6c:70:
                    6e:7e:a7:ca:5f:11:e6:0c:8b:64:cb:f1:34:29:d0:
                    74:e6:44:2d:e4:a4:88:2c:f5:1f:1b:64:fd:9a:fb:
                    db:46:36:40:0f:d3:7f:c0:79:60:bf:c3:6e:9c:27:
                    15:e5:47:05:2a:34:fb:53:f0:7a:d6:fa:9d:a3:ec:
                    74:76:ca:2a:c5:83:1c:d5:ad:7e:f1:ff:0f:51:c1:
                    fa:32:f1:6c:06:b4:4b:1b:97:6e:1e:e6:89:5d:d5:
                    af:ec:75:0c:a1:07:0f:5a:46:16:e4:33:2e:ef:fc:
                    1e:f4:09:2c:4e:8b:be:42:cf:e5:80:11:12:27:45:
                    44:e8:51:e5:1d:5e:b0:6c:c5:9e:f3:00:9b:c8:63:
                    38:51:02:48:86:b9:81:80:14:74:df:32:d1:4d:ec:
                    37:d4:50:67:08:2d:67:42:d7:ef:c6:4a:fe:19:b7:
                    41:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:D8:3B:9F:0B:11:44:1F:15:22:B8:3F:76:FF:88:DE:A9:35:AF:6C
            X509v3 Authority Key Identifier:
                keyid:0C:76:2B:2C:90:24:B3:4C:98:84:82:F1:D7:1D:74:9A:E7:DC:4A:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:01:d7:de:05:7f:b6:74:1f:25:95:97:93:60:05:db:0a:f8:
         f7:51:07:d9:2c:44:1d:dd:49:52:d3:3e:9e:a6:bd:57:41:c9:
         7f:e9:65:46:4b:37:ec:95:c6:f5:f1:fe:1d:ca:67:57:cd:92:
         7e:86:8f:0e:50:2c:b2:c1:60:fa:f3:d6:b8:f5:3e:4f:95:45:
         97:19:81:00:fb:ce:fd:4d:50:af:8e:6b:61:e2:47:7c:2c:56:
         48:1e:a7:16:20:55:5c:09:40:07:e4:7a:55:ff:bd:02:f5:f3:
         c5:ed:73:2e:53:ea:6d:ec:e8:11:9b:6f:f5:e7:8b:2e:8a:3e:
         bb:78:bc:7e:bb:93:c2:05:eb:d7:5c:ca:19:b5:11:a2:31:8f:
         24:84:5f:d2:dc:2c:4c:a8:4f:2e:96:f7:23:bf:78:cc:a4:df:
         83:f1:e4:24:41:e7:1b:8a:cc:5c:54:53:4c:8c:88:83:dc:ea:
         01:b8:18:ca:64:f6:0f:87:00:e2:bc:d1:21:46:ea:09:09:0d:
         f4:2a:30:96:1e:42:ec:ed:3f:2f:75:4b:ab:bb:74:cc:60:ec:
         7b:ed:6b:63:09:99:2c:80:26:d5:75:3b:12:87:89:37:93:ca:
         25:5b:73:f5:10:0d:9d:28:88:3f:18:e7:90:bc:06:65:77:98:
         27:95:4c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:35:02 2026 by rpki-client