Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/DsmozWa374HQeaCEKyY5Zf50-NA.mft
File:                     DsmozWa374HQeaCEKyY5Zf50-NA.mft (raw, json)
Hash identifier:          5TmckDl3ogWG+0hwN7WNfInMj8x9dMEixqiLD4sVcOc=
Subject key identifier:   A5:D1:F2:4B:58:9E:F8:56:47:75:8A:1D:D4:BB:8D:6C:5F:C3:60:38
Authority key identifier: 0E:C9:A8:CD:66:B7:EF:81:D0:79:A0:84:2B:26:39:65:FE:74:F8:D0
Certificate issuer:       /CN=A91614E3/serialNumber=0EC9A8CD66B7EF81D079A0842B263965FE74F8D0
Certificate serial:       5A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DsmozWa374HQeaCEKyY5Zf50-NA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/DsmozWa374HQeaCEKyY5Zf50-NA.mft
Manifest number:          56
Signing time:             Thu 01 Oct 2026 09:40:44 +0000
Manifest this update:     Thu 01 Oct 2026 09:40:44 +0000
Manifest next update:     Thu 08 Oct 2026 09:40:44 +0000
Files and hashes:         1: DsmozWa374HQeaCEKyY5Zf50-NA.crl (hash: UFc699KChXW2vGtLe0MkvSiuUzWhwry30QpDbjMFijg=)
                          2: 5A98E30A42CB11F1992134BCC5833773.roa (hash: A2UYdaAyeRv93KkABaSgrqSGjF16Qsj6+LJRZzldEFU=)
                          3: FE7346D642CC11F1A52BA276C6833773.roa (hash: tvwf4DAv3iIkKDVBaLvU4xQwNZROIguZpPcMUL1yZRw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/DsmozWa374HQeaCEKyY5Zf50-NA.crl
                          rsync://rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/DsmozWa374HQeaCEKyY5Zf50-NA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DsmozWa374HQeaCEKyY5Zf50-NA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Oct 2026 09:40:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91614E3, serialNumber=0EC9A8CD66B7EF81D079A0842B263965FE74F8D0
        Validity
            Not Before: Oct  1 09:40:44 2026 GMT
            Not After : Oct  8 09:40:44 2026 GMT
        Subject: CN=6abe2a9c-eb69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3d:3b:27:d6:8d:8c:6a:68:4a:27:b1:0b:04:
                    46:02:6c:4d:9f:aa:12:aa:5d:a4:5b:38:dc:34:c8:
                    94:73:52:95:10:9a:0c:ae:a9:fa:75:a3:92:3c:c8:
                    3b:fb:fe:23:4b:40:65:b6:99:d3:05:d1:81:35:be:
                    b4:2c:f6:bb:f4:19:f7:9b:0e:f9:dd:e7:4f:03:52:
                    86:a6:21:03:33:13:eb:ca:cd:2e:68:d2:52:90:42:
                    52:f8:2f:4e:60:fa:2b:4e:d8:dc:2c:cf:c6:80:4d:
                    33:7c:a6:bf:72:89:ab:7d:c8:c8:bd:79:b7:a1:0d:
                    96:82:d1:7a:67:4e:15:f1:b6:17:c0:34:08:11:ea:
                    6e:4f:7b:f1:ec:ae:b1:57:75:d4:e7:73:ae:55:6d:
                    91:f1:fb:a7:a8:ee:e0:28:cb:fc:69:d5:27:9a:db:
                    cd:83:72:20:40:a4:41:fd:58:7a:3e:fe:6c:70:41:
                    1f:fc:bb:a7:5e:f9:31:d8:d4:e5:28:82:66:75:5e:
                    93:57:a9:fc:20:fc:60:02:15:b6:96:35:82:cc:51:
                    71:5f:6a:b7:34:f6:53:10:f3:be:c2:ae:cc:28:d0:
                    97:14:f5:d2:a4:b7:60:9e:22:af:b9:eb:cd:88:91:
                    fb:12:a4:ee:ee:18:5a:03:7e:06:6f:76:22:93:30:
                    3c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:D1:F2:4B:58:9E:F8:56:47:75:8A:1D:D4:BB:8D:6C:5F:C3:60:38
            X509v3 Authority Key Identifier:
                keyid:0E:C9:A8:CD:66:B7:EF:81:D0:79:A0:84:2B:26:39:65:FE:74:F8:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/DsmozWa374HQeaCEKyY5Zf50-NA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DsmozWa374HQeaCEKyY5Zf50-NA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/DsmozWa374HQeaCEKyY5Zf50-NA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:75:8d:65:7b:04:02:11:b3:4e:27:3d:56:fd:76:26:4a:c4:
         d2:66:88:f2:d5:97:cb:14:08:6d:d2:e8:e1:bd:2e:0c:0c:38:
         47:8b:d6:4a:df:28:1d:de:dd:40:bc:a7:3a:27:00:0d:d8:e1:
         4b:5c:e5:ca:d3:9c:d0:f2:6a:c3:4b:4a:2d:62:4e:7e:32:3e:
         67:d4:b4:ac:d5:c9:08:a9:c5:03:b7:a5:20:26:22:02:b5:97:
         06:ab:a2:8d:6f:05:7c:6f:df:eb:d3:ad:25:34:6c:cb:5d:cb:
         73:34:15:c2:3e:a9:6a:14:de:a1:ea:3f:4a:b8:9a:39:dc:01:
         f0:51:68:32:9c:51:8f:4c:c1:5a:69:52:4a:74:ca:c7:62:a7:
         7a:d2:19:78:0c:b1:03:51:2e:2f:b8:ca:94:ad:aa:17:f2:63:
         e7:e2:d2:d9:b8:c3:ca:6f:f9:c0:ef:5d:3f:21:00:eb:47:da:
         c2:d7:f6:fa:03:8f:7a:70:79:0b:34:26:2a:45:77:5e:d6:0b:
         83:53:82:78:67:4e:bc:e8:10:35:8b:db:40:13:e2:63:04:52:
         b4:8a:54:bd:01:50:b5:b2:aa:95:8e:bd:97:94:1f:93:32:9f:
         79:8b:fc:82:4b:e1:12:e7:dd:30:f1:c8:30:48:47:91:b7:7a:
         5b:59:9b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:19:25 2026 by rpki-client