Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.mft
File:                     dyPYVuUggiTyvImjgJd39SgzEvw.mft (raw, json)
Hash identifier:          w8aYtX7WjasbOsyP9tWPNZ11+exDntIwLs61xRcDDtY=
Subject key identifier:   E7:BF:BA:04:8F:37:FA:E7:05:10:A3:E9:15:78:CF:15:FE:9C:79:BE
Authority key identifier: 77:23:D8:56:E5:20:82:24:F2:BC:89:A3:80:97:77:F5:28:33:12:FC
Certificate issuer:       /CN=A9163EDF/serialNumber=7723D856E5208224F2BC89A3809777F5283312FC
Certificate serial:       0212
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyPYVuUggiTyvImjgJd39SgzEvw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.mft
Manifest number:          020D
Signing time:             Sun 27 Sep 2026 03:25:18 +0000
Manifest this update:     Sun 27 Sep 2026 03:25:17 +0000
Manifest next update:     Sun 04 Oct 2026 03:25:17 +0000
Files and hashes:         1: dyPYVuUggiTyvImjgJd39SgzEvw.crl (hash: ibVu4D0sP5BHeRY3JpMZXn3IZyqZH6DE79kEbqYYJzQ=)
                          2: 7FB5CBF097DB11EE8E67BA41C4F9AE02.roa (hash: rxO58g4ckfnjnAl8Td7NyVk2cfGa6poPhda8R1ciKog=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.crl
                          rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyPYVuUggiTyvImjgJd39SgzEvw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 03:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 530 (0x212)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163EDF, serialNumber=7723D856E5208224F2BC89A3809777F5283312FC
        Validity
            Not Before: Sep 27 03:25:17 2026 GMT
            Not After : Oct  4 03:25:17 2026 GMT
        Subject: CN=6ab88c9e-ed76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7b:3c:e3:ef:c4:06:a6:c0:a1:ed:d0:d5:33:
                    d2:bb:c9:91:37:e4:df:0c:f0:c2:34:61:5d:21:19:
                    10:78:1c:aa:05:8f:38:d6:98:9a:be:cb:f2:2c:b2:
                    34:eb:82:ce:3d:f0:bc:8e:d6:e0:2d:8b:4c:ad:84:
                    49:86:d5:d1:9f:04:92:f3:12:db:f2:07:20:e7:c9:
                    62:0c:de:63:79:46:ca:85:5f:27:16:41:6e:ae:0e:
                    c7:49:18:5b:d7:9c:52:22:8d:4b:46:dd:75:73:e3:
                    06:57:8d:65:a9:21:92:f2:89:17:6b:e0:68:3b:93:
                    dd:45:0e:4c:00:e4:7f:26:08:29:9d:bb:7c:86:e7:
                    08:e2:6c:f9:06:ae:88:8b:0c:ba:98:80:3a:99:8b:
                    14:1b:e8:a2:cd:88:b2:a5:08:d7:96:fa:a2:6f:5e:
                    fc:b8:ee:2d:66:c5:d5:d6:09:4f:61:34:44:d9:8e:
                    58:65:b7:72:f7:d8:e7:d0:af:a6:4a:93:e9:9f:30:
                    87:b9:9d:7c:ea:d9:ae:e6:02:c9:35:b6:a1:11:d3:
                    d0:4a:52:18:85:d9:b6:30:1c:60:31:71:9f:97:df:
                    23:ee:94:60:94:03:d2:70:a9:d3:5c:95:87:d4:9e:
                    2c:54:63:4d:c3:d9:3d:b0:57:9c:c0:60:d0:eb:cc:
                    5a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:BF:BA:04:8F:37:FA:E7:05:10:A3:E9:15:78:CF:15:FE:9C:79:BE
            X509v3 Authority Key Identifier:
                keyid:77:23:D8:56:E5:20:82:24:F2:BC:89:A3:80:97:77:F5:28:33:12:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyPYVuUggiTyvImjgJd39SgzEvw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:d8:02:5b:a0:81:58:91:45:c7:7d:7c:b4:11:a8:e8:af:30:
         af:e5:43:32:c8:bc:64:4b:d6:c2:68:1c:f7:28:28:bb:27:c4:
         af:d0:99:a9:8d:9d:3b:c0:39:7c:6f:b6:34:c1:7f:19:0d:f7:
         05:c1:53:cf:a2:46:f3:14:fd:20:1d:de:bd:92:1a:82:e1:6a:
         ba:e4:7f:a1:dd:93:4c:95:cb:48:26:66:6b:5b:6d:29:9c:8c:
         77:a6:0f:e7:5f:5b:35:ac:c4:cb:4b:17:e5:b6:81:b1:e6:75:
         b7:e9:19:7f:4a:42:89:d5:17:62:08:d7:41:7a:5b:fe:46:cf:
         89:8c:93:38:49:07:31:f0:61:46:3c:de:86:1f:16:44:a2:aa:
         30:58:6c:ca:fd:c8:11:cb:73:cc:d9:72:ef:86:bb:e5:0d:b7:
         da:47:79:9b:98:a8:34:1e:78:c8:3b:2f:4d:dc:24:39:17:df:
         d1:7b:07:22:5e:8c:b0:9a:01:b0:e8:d6:c2:89:e7:77:1e:6d:
         f3:c5:87:d1:f6:67:8b:59:05:7f:39:4a:83:39:4b:64:4c:6a:
         90:51:52:39:84:82:ad:75:c9:0d:ad:26:ff:e7:88:74:ec:52:
         1e:dd:d4:9f:4f:ad:0a:0a:94:01:d6:6c:81:ca:18:1b:0e:d0:
         92:17:3e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:20:41 2026 by rpki-client