Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft
File:                     dK62Py8dqVfWWCCWT_ed8PWTgAw.mft (raw, json)
Hash identifier:          yB9q5KCUe4G70o6wMVqGmvaHxE4LS/Jf6ibvczVf6eA=
Subject key identifier:   89:5E:1F:F7:B0:15:C6:1B:31:71:77:5F:31:EE:6D:EE:D5:CD:63:81
Authority key identifier: 74:AE:B6:3F:2F:1D:A9:57:D6:58:20:96:4F:F7:9D:F0:F5:93:80:0C
Certificate issuer:       /CN=A914661C/serialNumber=74AEB63F2F1DA957D65820964FF79DF0F593800C
Certificate serial:       038F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft
Manifest number:          034F
Signing time:             Mon 21 Sep 2026 00:56:18 +0000
Manifest this update:     Mon 21 Sep 2026 00:56:17 +0000
Manifest next update:     Mon 28 Sep 2026 00:56:17 +0000
Files and hashes:         1: dK62Py8dqVfWWCCWT_ed8PWTgAw.crl (hash: 5XXryBkWckxvhCQ2SgUdhKBJesNP3EflaBqr/XB/UEU=)
                          2: 9ABAA0F2860711F1825B87C479A30FBC.roa (hash: NOJB3Hv2pMFrhKnZajYeAs3Ut2mtOF2q/wUaov9o1Gw=)
                          3: 3329AB14860611F188D398BD79A30FBC.roa (hash: s9MG4AtqSHdsd3gX5TM+FCq3eB5Ek6aWf3JSkbBd0xo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.crl
                          rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 00:56:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 911 (0x38f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914661C, serialNumber=74AEB63F2F1DA957D65820964FF79DF0F593800C
        Validity
            Not Before: Sep 21 00:56:17 2026 GMT
            Not After : Sep 28 00:56:17 2026 GMT
        Subject: CN=6ab080b1-ca76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:94:e4:c2:7a:68:47:e5:ed:d0:2b:0b:5c:bd:
                    0e:b0:ea:7b:66:78:1a:7f:3e:a4:dd:b3:9c:c9:49:
                    77:b5:3e:8c:fa:5e:bc:ce:33:5f:41:5c:50:ed:2a:
                    83:37:41:03:09:22:2d:cc:05:1a:64:a2:f7:00:bd:
                    83:cf:0c:66:11:1e:4d:41:45:75:e0:ba:de:55:2e:
                    e8:63:c4:d7:66:79:a1:97:25:64:63:98:c9:a1:ea:
                    aa:07:e1:e2:d3:a5:d3:f2:d1:a3:d1:42:4b:0b:be:
                    4a:40:b7:dd:1b:2a:91:f4:b2:b4:42:2d:b2:64:82:
                    ec:d4:7d:8c:d3:ba:9f:b6:0f:7d:63:bc:ad:48:48:
                    a7:45:a2:f3:83:18:41:43:2f:b7:61:8d:24:d5:6e:
                    26:72:69:4e:e4:64:cc:32:29:7f:de:fd:8e:0c:f4:
                    b3:ee:ad:49:c8:3c:c4:b0:d2:29:ca:8f:1e:f5:cb:
                    a6:ac:bc:9f:02:e1:4e:af:95:37:1e:d2:b2:77:cb:
                    ef:f1:54:79:83:e6:e2:ac:6a:b2:27:f8:d7:46:a6:
                    76:a0:a0:28:b2:17:2a:30:4f:6f:1e:fd:7a:71:da:
                    e1:21:34:5a:13:7f:c6:91:e8:3d:17:4b:25:d2:65:
                    5a:b2:39:a0:20:c9:a1:0f:1d:79:6b:24:bd:17:de:
                    60:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:5E:1F:F7:B0:15:C6:1B:31:71:77:5F:31:EE:6D:EE:D5:CD:63:81
            X509v3 Authority Key Identifier:
                keyid:74:AE:B6:3F:2F:1D:A9:57:D6:58:20:96:4F:F7:9D:F0:F5:93:80:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:0a:9f:89:31:08:5b:89:2f:24:d6:e8:75:43:f7:cc:03:85:
         63:a3:6c:48:e5:1c:62:8e:2f:45:e4:fa:de:c7:a2:7b:4a:9f:
         f1:76:dc:fa:c3:94:fc:1e:3f:62:25:62:a0:f7:40:a4:b8:2f:
         23:74:bc:50:b3:a2:d8:c8:37:c3:29:a1:78:0a:67:a8:67:1e:
         4c:39:f6:d2:40:e4:ab:34:90:c7:2f:47:05:97:08:bd:84:49:
         c5:64:82:f0:66:fa:9e:e1:a1:64:71:7c:63:4b:79:27:a8:e3:
         fd:8b:30:19:39:8e:83:60:ec:4e:68:dc:66:e3:07:89:58:ff:
         96:13:88:fb:34:db:8e:4d:a3:91:76:e9:dc:42:fb:78:e6:05:
         e8:73:4a:86:26:b1:54:7e:db:2c:08:bf:e9:0c:d4:e5:a2:ba:
         a4:40:b6:5c:cb:25:6d:ba:93:43:1b:75:36:80:58:1e:90:a1:
         d2:63:1a:8a:35:c6:bf:15:32:f3:20:18:39:39:19:61:94:c7:
         73:2f:d0:8d:10:76:b3:b9:e1:8c:56:18:6f:e2:e0:22:b2:2a:
         8f:9c:02:dc:4d:9e:0f:95:a8:85:42:3c:ed:d8:a1:a4:f0:a5:
         83:bc:c5:72:c5:f0:b5:7f:fc:00:60:af:52:71:f0:b1:61:96:
         61:a1:d7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:41:54 2026 by rpki-client