Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft
File:                     dK-15U8HPzwgdjJdKsf3AA4uaoY.mft (raw, json)
Hash identifier:          RV4Cj+2S5L7Jc+LfPlBokFS3fwnDUZbAxQjqAR3tF0o=
Subject key identifier:   68:54:82:01:53:CD:8B:2E:30:7E:9A:1D:99:89:5B:45:85:95:D0:32
Authority key identifier: 74:AF:B5:E5:4F:07:3F:3C:20:76:32:5D:2A:C7:F7:00:0E:2E:6A:86
Certificate issuer:       /CN=A916EDC2/serialNumber=74AFB5E54F073F3C2076325D2AC7F7000E2E6A86
Certificate serial:       0436
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft
Manifest number:          042F
Signing time:             Tue 22 Sep 2026 23:53:11 +0000
Manifest this update:     Tue 22 Sep 2026 23:53:10 +0000
Manifest next update:     Tue 29 Sep 2026 23:53:10 +0000
Files and hashes:         1: dK-15U8HPzwgdjJdKsf3AA4uaoY.crl (hash: suMqeMV0IrLwJk4Ye66P95zmif76EY0pBaA0wgsv7bw=)
                          2: 5E8E08E8C26211ECBFC22B20C4F9AE02.roa (hash: C2lCkbVI1XaonZAwyhCohh9dLONbvb2hit8qWW3O4Ec=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.crl
                          rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 23:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1078 (0x436)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916EDC2, serialNumber=74AFB5E54F073F3C2076325D2AC7F7000E2E6A86
        Validity
            Not Before: Sep 22 23:53:10 2026 GMT
            Not After : Sep 29 23:53:10 2026 GMT
        Subject: CN=6ab314e7-4e41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:61:d1:4d:27:6d:5d:de:06:27:96:7d:09:4b:
                    a1:5a:d7:d4:9b:70:16:8b:7f:26:fe:0f:30:39:97:
                    fa:40:e6:ee:72:2a:6f:ee:44:c8:96:a3:5f:eb:cd:
                    ab:a1:23:fe:09:9f:e7:d9:62:c8:1e:d7:d4:a7:9c:
                    dd:49:09:6f:b8:b9:f3:80:13:1d:b0:f7:a9:42:d6:
                    5f:03:73:21:9e:53:15:b6:78:68:33:a3:8d:ba:64:
                    d9:0a:1e:50:f7:9a:6a:6f:80:7c:86:7b:43:c7:2a:
                    a7:a1:ca:df:be:97:13:7b:8f:79:d4:77:e3:08:17:
                    e3:5d:50:d2:20:13:14:55:cc:a8:c8:c3:3d:dd:22:
                    66:50:33:fa:b2:21:93:3b:83:a8:36:01:a6:0a:ee:
                    bf:9a:9a:e8:50:f5:cb:e5:bc:e8:4d:6d:82:d8:b0:
                    4e:67:0a:93:fb:d6:2b:f7:27:af:55:57:10:6f:c6:
                    bc:82:56:e7:58:8d:e3:3e:f2:56:87:23:f9:0e:e7:
                    38:fe:e1:46:af:e4:3e:8e:05:9c:93:00:2e:c7:bc:
                    2d:62:e1:65:70:cd:db:a9:59:6f:e2:b4:07:8f:c2:
                    4c:cd:f1:b5:4f:6f:25:cf:e0:f6:88:cc:ab:dc:9c:
                    0d:46:dc:b3:9c:6c:55:ab:9b:31:1c:57:d3:fc:f0:
                    3a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:54:82:01:53:CD:8B:2E:30:7E:9A:1D:99:89:5B:45:85:95:D0:32
            X509v3 Authority Key Identifier:
                keyid:74:AF:B5:E5:4F:07:3F:3C:20:76:32:5D:2A:C7:F7:00:0E:2E:6A:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:1b:38:73:3c:d9:52:22:9c:5b:a8:bf:54:3b:bd:5f:ed:a2:
         4b:3c:7f:7d:f9:8a:c5:66:d9:9c:1d:1c:a4:a0:ab:d3:fa:08:
         eb:8d:58:e5:8f:22:60:1d:ab:8c:0d:70:62:d9:20:e4:8c:d1:
         f4:6a:9b:db:8a:4f:1f:61:0e:85:1c:57:4d:1b:9f:02:e2:f1:
         d9:d6:92:0c:54:0c:2f:cb:fe:64:70:76:58:ae:d8:f4:16:ea:
         fb:be:01:50:e6:33:6e:4e:25:d0:ad:78:68:66:b1:7e:86:e5:
         01:13:16:88:dc:26:f4:a5:be:d4:ce:aa:35:89:ba:43:70:c5:
         17:f6:88:d0:53:bb:eb:40:07:f6:ea:62:1a:25:bd:fb:8c:e5:
         07:f8:96:44:be:be:76:03:a3:93:19:b1:63:d7:b7:1c:41:87:
         53:86:47:22:d7:b9:95:8f:be:da:1d:71:ea:c6:63:5e:80:65:
         7a:05:fe:2d:6b:6f:f9:2f:c3:e1:88:94:69:5e:a7:d7:b4:d7:
         5c:87:68:9a:99:98:e6:39:35:f3:24:14:bf:b6:32:b4:a1:49:
         f1:c3:e4:31:d1:8e:b2:f4:7d:3b:98:2e:54:2b:78:47:fd:b0:
         14:f4:6b:01:07:70:7a:a0:ad:9a:9b:d8:53:11:5a:bb:16:2a:
         ce:c0:4d:24
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBDYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkVEQzIxMTAvBgNVBAUTKDc0QUZCNUU1NEYwNzNGM0MyMDc2MzI1RDJBQzdGNzAw
MEUyRTZBODYwHhcNMjYwOTIyMjM1MzEwWhcNMjYwOTI5MjM1MzEwWjAYMRYwFAYD
VQQDEw02YWIzMTRlNy00ZTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr2HRTSdtXd4GJ5Z9CUuhWtfUm3AWi38m/g8wOZf6QObucipv7kTIlqNf682r
oSP+CZ/n2WLIHtfUp5zdSQlvuLnzgBMdsPepQtZfA3MhnlMVtnhoM6ONumTZCh5Q
95pqb4B8hntDxyqnocrfvpcTe4951HfjCBfjXVDSIBMUVcyoyMM93SJmUDP6siGT
O4OoNgGmCu6/mproUPXL5bzoTW2C2LBOZwqT+9Yr9yevVVcQb8a8glbnWI3jPvJW
hyP5Duc4/uFGr+Q+jgWckwAux7wtYuFlcM3bqVlv4rQHj8JMzfG1T28lz+D2iMyr
3JwNRtyznGxVq5sxHFfT/PA6TwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGhUggFT
zYsuMH6aHZmJW0WFldAyMB8GA1UdIwQYMBaAFHSvteVPBz88IHYyXSrH9wAOLmqG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RURDMi8zNkVCMjMyOEMy
NUYxMUVDOEMzQjAwMURDNEY5QUUwMi9kSy0xNVU4SFB6d2dkakpkS3NmM0FBNHVh
b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RLLTE1VThIUHp3Z2RqSmRLc2YzQUE0dWFvWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RURDMi8zNkVCMjMyOEMyNUYxMUVDOEMzQjAwMURDNEY5QUUwMi9kSy0xNVU4SFB6
d2dkakpkS3NmM0FBNHVhb1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASxs4czzZUiKcW6i/VDu9X+2iSzx/ffmKxWbZnB0cpKCr0/oI641Y5Y8iYB2r
jA1wYtkg5IzR9Gqb24pPH2EOhRxXTRufAuLx2daSDFQML8v+ZHB2WK7Y9Bbq+74B
UOYzbk4l0K14aGaxfoblARMWiNwm9KW+1M6qNYm6Q3DFF/aI0FO760AH9upiGiW9
+4zlB/iWRL6+dgOjkxmxY9e3HEGHU4ZHIte5lY++2h1x6sZjXoBlegX+LWtv+S/D
4YiUaV6n17TXXIdompmY5jk18yQUv7YytKFJ8cPkMdGOsvR9O5guVCt4R/2wFPRr
AQdweqCtmpvYUxFauxYqzsBNJA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 03:28:14 2026 by rpki-client