Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft
File:                     dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft (raw, json)
Hash identifier:          eYKOLbpPgopVHQHjhVxRdSNrKzQT9H0O58T8qd/sQUs=
Subject key identifier:   5F:47:66:80:E0:21:9B:75:5C:E5:5E:D0:86:6E:B9:7A:B7:FE:03:0B
Authority key identifier: 74:A1:16:69:C4:3E:53:B0:F2:1D:4B:41:3F:92:D9:EA:91:31:55:03
Certificate issuer:       /CN=A9178424/serialNumber=74A11669C43E53B0F21D4B413F92D9EA91315503
Certificate serial:       01AC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dKEWacQ-U7DyHUtBP5LZ6pExVQM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft
Manifest number:          01A5
Signing time:             Wed 23 Sep 2026 04:01:24 +0000
Manifest this update:     Wed 23 Sep 2026 04:01:23 +0000
Manifest next update:     Wed 30 Sep 2026 04:01:23 +0000
Files and hashes:         1: dKEWacQ-U7DyHUtBP5LZ6pExVQM.crl (hash: Z0KSAJYa0yxTbu3Nfw7ed0wdxxn2O+ic3L8ZZtoma6o=)
                          2: D672BC9638E411EF8BF0C15EC4F9AE02.roa (hash: 2Pw8KaLRV6aBD082BqEQ7VHZ0JNyhO7oJeP00MvVoik=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.crl
                          rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dKEWacQ-U7DyHUtBP5LZ6pExVQM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 04:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 428 (0x1ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178424, serialNumber=74A11669C43E53B0F21D4B413F92D9EA91315503
        Validity
            Not Before: Sep 23 04:01:23 2026 GMT
            Not After : Sep 30 04:01:23 2026 GMT
        Subject: CN=6ab34f14-9ba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:18:b5:46:4c:9c:1c:27:62:27:29:7b:67:d1:
                    e6:69:da:5a:3f:e1:24:e7:73:28:cd:34:a9:63:cb:
                    f3:18:57:3c:54:d8:47:e8:8a:d9:1b:7b:8a:aa:b6:
                    f5:b9:ba:c2:72:63:94:c6:af:2f:2e:86:43:88:18:
                    33:71:de:cf:fb:c9:b9:d9:91:46:22:09:2b:dc:83:
                    28:67:a7:1e:00:ee:e0:eb:01:0d:f7:f1:67:14:4d:
                    b1:33:d3:06:ef:b5:d0:cc:ed:b3:70:d7:80:9b:35:
                    f2:62:d6:22:12:0e:e1:9c:0c:7e:39:32:16:2b:44:
                    14:36:d1:ba:2d:bb:c5:ec:31:73:03:42:20:d8:3d:
                    0e:6c:36:97:1e:90:35:5d:82:c0:de:e3:79:be:e8:
                    26:2c:26:fc:55:e9:dd:8d:30:43:93:23:29:d2:14:
                    b6:10:95:8c:54:13:ec:5d:73:9d:e6:bd:50:1b:25:
                    90:aa:cb:20:44:a7:42:77:46:57:77:a1:e9:b4:04:
                    5a:a3:80:a0:8f:ae:e8:03:b9:1e:0e:0c:4a:58:a8:
                    ef:92:14:83:aa:6a:df:4d:d9:61:32:83:63:d7:cc:
                    c5:6d:08:bb:fc:99:b9:28:75:bd:f7:07:9f:bc:c9:
                    f4:fe:fe:36:67:71:81:0e:cb:b2:42:26:53:a2:9f:
                    c0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:47:66:80:E0:21:9B:75:5C:E5:5E:D0:86:6E:B9:7A:B7:FE:03:0B
            X509v3 Authority Key Identifier:
                keyid:74:A1:16:69:C4:3E:53:B0:F2:1D:4B:41:3F:92:D9:EA:91:31:55:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dKEWacQ-U7DyHUtBP5LZ6pExVQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:94:4f:8a:87:3f:d7:1b:06:d6:22:04:9f:2a:e7:69:9c:ae:
         9b:af:ea:b2:bb:8e:b7:6c:53:70:c3:77:d4:46:16:b4:c9:bd:
         d7:76:dc:c8:9e:e0:52:8b:c0:77:29:af:00:50:87:53:79:38:
         8d:96:34:2d:ef:96:d2:0a:f0:36:bd:bf:34:00:55:2e:5d:66:
         77:c7:4a:11:11:fc:bd:9f:ae:13:db:e4:bf:b4:5f:c3:9e:ac:
         ff:2c:64:32:d1:e3:97:69:aa:c0:69:9f:a5:56:78:24:a6:11:
         66:83:a5:bd:40:da:82:70:80:b2:fb:7d:b4:f6:c4:71:1f:bf:
         5a:37:01:13:0f:22:00:cf:11:a0:c0:49:23:55:8a:47:84:38:
         57:cb:79:44:8e:58:a4:5a:25:c9:90:3f:16:8b:37:d1:b1:b9:
         1d:ee:1b:df:ce:5b:93:dc:8f:5d:f3:9d:ac:87:af:d1:d3:ed:
         26:1e:bf:0f:19:8d:d7:69:59:54:02:d3:40:b8:0c:f6:e7:cc:
         b1:61:d9:3e:32:3d:27:47:87:a0:10:c9:2f:46:02:9b:7c:70:
         5c:91:e3:1c:f4:f5:c9:5d:9d:52:f2:fa:0e:79:bd:2f:d3:09:
         55:19:36:62:c9:90:ed:82:9d:97:fb:33:a3:cc:a2:fb:45:66:
         73:83:9d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:15:51 2026 by rpki-client