Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.mft
File:                     DpNmGsFhVPZdKi94GgMfNckxAQM.mft (raw, json)
Hash identifier:          zkOj+532LbGAhgcxW651qycNQU7D3FpgVargxv4d18c=
Subject key identifier:   AE:13:88:5C:AA:7D:E7:53:71:4B:BA:A6:87:4D:B1:29:C0:BF:B5:64
Authority key identifier: 0E:93:66:1A:C1:61:54:F6:5D:2A:2F:78:1A:03:1F:35:C9:31:01:03
Certificate issuer:       /CN=A9138959/serialNumber=0E93661AC16154F65D2A2F781A031F35C9310103
Certificate serial:       014F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DpNmGsFhVPZdKi94GgMfNckxAQM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.mft
Manifest number:          0145
Signing time:             Sun 27 Sep 2026 05:52:30 +0000
Manifest this update:     Sun 27 Sep 2026 05:52:29 +0000
Manifest next update:     Sun 04 Oct 2026 05:52:29 +0000
Files and hashes:         1: DpNmGsFhVPZdKi94GgMfNckxAQM.crl (hash: Jgoq3MQ/pDQYvD6+Tt9bn2Y0bAWCqVovJPjFEleKMpY=)
                          2: B534A848E2CE11EFA7030E56C4F9AE02.roa (hash: DkhuldH+A9mYCIox+Ay4O9Fu6YyyyV2CawGamuW15Qk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.crl
                          rsync://rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DpNmGsFhVPZdKi94GgMfNckxAQM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 05:52:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 335 (0x14f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138959, serialNumber=0E93661AC16154F65D2A2F781A031F35C9310103
        Validity
            Not Before: Sep 27 05:52:29 2026 GMT
            Not After : Oct  4 05:52:29 2026 GMT
        Subject: CN=6ab8af1d-38cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:af:cb:9f:ca:3c:97:6e:77:16:5e:a2:af:88:
                    70:4c:8e:be:3a:55:fb:d9:eb:07:21:63:7c:89:8f:
                    26:11:a9:fc:cf:18:3f:73:4f:6b:42:90:4d:09:99:
                    5b:8e:b5:62:93:54:10:e5:99:ac:db:0e:0e:a6:b9:
                    9e:35:8b:02:e3:48:da:6e:26:ad:a1:3b:2c:67:b9:
                    9b:0e:37:24:0d:4e:89:18:31:42:e8:f5:4a:8b:c4:
                    ad:cf:b5:ce:93:da:52:fd:30:48:20:07:d1:5d:1b:
                    96:bb:ee:9e:ca:98:23:5d:f5:a4:b3:38:e7:c9:85:
                    0a:da:35:b1:2f:3e:f3:7a:fe:bd:11:b3:80:68:13:
                    a1:5b:0c:3c:14:71:f3:a6:df:22:69:7b:1d:44:57:
                    21:16:a7:9d:58:32:63:be:66:d0:80:2c:7d:58:cb:
                    26:b7:66:ac:e4:6e:c5:59:f6:b5:56:81:1f:18:d7:
                    77:94:a6:a3:c9:3d:b3:12:46:47:f1:d4:f1:56:5e:
                    e5:ee:f7:9d:26:ce:cf:06:33:8c:37:0e:01:0f:e5:
                    33:78:b7:a7:bd:70:e2:46:2d:26:b3:9a:7e:56:79:
                    5c:75:1b:df:f7:39:e0:3f:36:5a:db:7b:89:bf:21:
                    d8:37:72:c9:65:54:0c:a6:1f:d8:1b:66:c1:1a:15:
                    a8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:13:88:5C:AA:7D:E7:53:71:4B:BA:A6:87:4D:B1:29:C0:BF:B5:64
            X509v3 Authority Key Identifier:
                keyid:0E:93:66:1A:C1:61:54:F6:5D:2A:2F:78:1A:03:1F:35:C9:31:01:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DpNmGsFhVPZdKi94GgMfNckxAQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:c1:90:4c:57:5e:e5:2c:e3:b3:49:50:0f:cd:73:2b:ce:ee:
         86:78:bb:96:4f:8e:67:ed:e5:19:1d:5a:2e:1e:e3:99:23:d5:
         73:3f:07:74:fc:ab:9f:05:88:92:ea:68:5d:5f:8e:88:99:99:
         ab:1a:96:bb:9a:14:ac:ff:15:67:7a:b2:2c:b9:7c:e4:3f:ef:
         76:27:6f:e8:ab:a9:66:fe:de:c1:8f:8e:55:1a:d8:61:c0:94:
         cb:74:e5:4e:32:98:2f:7f:c7:37:9d:d7:5b:bb:64:58:58:b2:
         ce:05:de:3f:d3:d2:d8:01:3d:99:f9:6d:75:6b:84:f7:84:dc:
         0f:ee:1e:b5:95:84:8d:7f:46:f7:10:89:bc:e3:dc:2f:11:fb:
         12:43:80:3c:d7:f0:75:0b:5e:0a:db:5a:57:84:f2:92:4b:4b:
         2c:d3:04:14:8d:fc:c7:81:52:75:fe:e7:89:54:76:48:49:ae:
         bb:40:ec:ae:71:aa:cf:1c:fc:84:2b:4f:63:3f:74:cd:bc:cd:
         08:43:1a:22:15:56:d5:c0:19:bb:df:15:d7:46:d2:63:0f:7a:
         67:ef:7e:60:3d:c7:05:c5:6a:57:27:c9:02:65:07:42:07:23:
         95:33:ac:0b:50:28:07:d0:45:3b:c6:00:72:c6:64:08:fc:4c:
         a1:c7:8f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:56:15 2026 by rpki-client