Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft
File:                     Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft (raw, json)
Hash identifier:          n1NJBGtfSD4GAptgX6A6UzE13Oag7LgZ25hxmXj3xVE=
Subject key identifier:   BA:3E:38:AE:DF:35:FD:92:5E:97:FD:06:E3:A9:89:D7:10:E6:1E:6F
Authority key identifier: 0D:CA:FA:C1:45:B2:2F:15:60:78:01:66:CD:1F:15:15:04:EE:F8:A1
Certificate issuer:       /CN=A917C0CC/serialNumber=0DCAFAC145B22F1560780166CD1F151504EEF8A1
Certificate serial:       D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft
Manifest number:          C7
Signing time:             Wed 23 Sep 2026 06:38:21 +0000
Manifest this update:     Wed 23 Sep 2026 06:38:20 +0000
Manifest next update:     Wed 30 Sep 2026 06:38:20 +0000
Files and hashes:         1: Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl (hash: xKlWttQhfTKlIrK0y1R6UFlUvvRwkQciWwlweKRk+Z0=)
                          2: 6579B1188F5811F0BE083D3DC4F9AE02.roa (hash: HH9ky92fQzGNTYsX0+VQPTLNrW/aQl3+AElKQhw1OdM=)
                          3: D84A5FAC8F5911F081D9D142C4F9AE02.roa (hash: sPIf66/t3nPzaly4TLYXdFQdjV7uJL1S1ZXAusvb7xs=)
                          4: B339551A8F5911F0AFB88342C4F9AE02.roa (hash: eXQMNO4T9SC2XkbTYizwJc2SFGid2A3mIxorvKFCeno=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl
                          rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 06:38:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 216 (0xd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C0CC, serialNumber=0DCAFAC145B22F1560780166CD1F151504EEF8A1
        Validity
            Not Before: Sep 23 06:38:20 2026 GMT
            Not After : Sep 30 06:38:20 2026 GMT
        Subject: CN=6ab373dd-8a1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:cd:ca:a6:6b:9b:36:11:5b:40:79:0b:ae:5c:
                    63:40:b7:48:bd:60:61:ce:2d:ad:d4:31:45:eb:0a:
                    03:d8:7e:23:b2:01:a5:e1:b1:c7:4d:71:1c:ea:19:
                    66:04:68:ff:ae:8c:de:90:f9:3c:52:89:78:e0:2c:
                    51:2a:11:ff:62:8f:88:0a:54:5b:3d:6e:a1:53:9d:
                    91:10:a0:36:04:46:29:07:15:09:a3:4e:9a:f3:3e:
                    e6:dd:c3:73:fd:1b:0c:ab:e7:98:8e:ba:5e:51:18:
                    c2:97:e5:e4:53:fb:4c:c1:32:63:68:7e:1f:59:9c:
                    63:a0:fa:9e:28:43:bf:d1:5c:1a:ef:2d:e6:80:f5:
                    e4:0a:86:36:bb:a3:13:ca:53:7c:b7:34:0e:f4:f7:
                    74:e6:cc:83:d3:a8:dd:4c:71:87:a3:8f:b1:52:8b:
                    88:0c:b7:fa:74:63:0d:1b:c5:cd:8b:6b:22:58:49:
                    b3:3c:9c:d0:37:16:47:ce:f8:2a:22:87:fa:d8:02:
                    53:2b:11:4b:0c:6d:58:1a:c1:d2:fc:c4:d4:80:db:
                    08:3c:49:f8:b7:7f:79:f9:20:65:e2:a8:3d:ce:46:
                    f7:73:94:26:20:17:87:ed:a5:7d:02:36:89:89:59:
                    62:7c:aa:3c:81:df:ac:5d:8e:59:a5:1d:05:89:99:
                    f0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:3E:38:AE:DF:35:FD:92:5E:97:FD:06:E3:A9:89:D7:10:E6:1E:6F
            X509v3 Authority Key Identifier:
                keyid:0D:CA:FA:C1:45:B2:2F:15:60:78:01:66:CD:1F:15:15:04:EE:F8:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:3b:5e:c4:ab:d2:35:08:48:12:58:95:99:bd:77:2e:b0:54:
         ee:a4:22:2f:1c:09:8e:28:31:00:cd:c3:be:4a:e8:f6:f5:d3:
         1c:94:bb:de:df:52:2a:44:0a:bc:f5:b5:4b:d8:f8:ed:72:d3:
         6b:e5:c6:f0:34:d1:fa:80:72:ad:68:58:8e:99:3b:f3:2e:50:
         95:28:11:4d:3a:66:90:fb:a9:19:c7:53:b7:f5:08:f4:c7:d5:
         fa:d9:92:3e:84:82:38:f4:b6:d0:8e:a7:88:dc:19:83:ab:4a:
         8e:21:ae:f9:88:15:2a:10:27:18:27:73:c0:ab:f1:4d:29:ad:
         6d:5d:b7:1a:c9:42:82:f3:98:20:0d:8b:84:f9:ef:c8:21:59:
         21:b3:64:22:74:66:e9:a9:cc:e7:a7:19:06:26:55:2f:fa:f6:
         a1:cb:7e:56:54:dc:33:a9:bf:ff:1f:86:b3:08:29:80:0e:66:
         1c:42:3e:e5:96:ab:e8:52:38:89:ff:21:f1:6c:b8:66:0a:ac:
         4c:4d:90:d4:b7:15:4e:b7:e0:75:41:09:5e:59:96:7f:67:f6:
         98:ec:b9:db:e7:6c:25:0d:15:ee:cf:67:cc:43:09:38:d9:39:
         af:73:a5:1c:90:cf:34:29:1b:00:07:18:87:e0:4a:0b:bc:e0:
         a1:fa:ee:8c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0MwQ0MxMTAvBgNVBAUTKDBEQ0FGQUMxNDVCMjJGMTU2MDc4MDE2NkNEMUYxNTE1
MDRFRUY4QTEwHhcNMjYwOTIzMDYzODIwWhcNMjYwOTMwMDYzODIwWjAYMRYwFAYD
VQQDEw02YWIzNzNkZC04YTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAis3KpmubNhFbQHkLrlxjQLdIvWBhzi2t1DFF6woD2H4jsgGl4bHHTXEc6hlm
BGj/rozekPk8Uol44CxRKhH/Yo+IClRbPW6hU52REKA2BEYpBxUJo06a8z7m3cNz
/RsMq+eYjrpeURjCl+XkU/tMwTJjaH4fWZxjoPqeKEO/0Vwa7y3mgPXkCoY2u6MT
ylN8tzQO9Pd05syD06jdTHGHo4+xUouIDLf6dGMNG8XNi2siWEmzPJzQNxZHzvgq
Iof62AJTKxFLDG1YGsHS/MTUgNsIPEn4t395+SBl4qg9zkb3c5QmIBeH7aV9AjaJ
iVlifKo8gd+sXY5ZpR0FiZnwSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLo+OK7f
Nf2SXpf9BuOpidcQ5h5vMB8GA1UdIwQYMBaAFA3K+sFFsi8VYHgBZs0fFRUE7vih
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzBDQy84RkNDQzdGODhG
NTcxMUYwOUM1MUVDM0JDNEY5QUUwMi9EY3I2d1VXeUx4VmdlQUZtelI4VkZRVHUt
S0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RjcjZ3VVd5THhWZ2VBRm16UjhWRlFUdS1LRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QzBDQy84RkNDQzdGODhGNTcxMUYwOUM1MUVDM0JDNEY5QUUwMi9EY3I2d1VXeUx4
VmdlQUZtelI4VkZRVHUtS0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbTtexKvSNQhIEliVmb13LrBU7qQiLxwJjigxAM3Dvkro9vXTHJS73t9SKkQK
vPW1S9j47XLTa+XG8DTR+oByrWhYjpk78y5QlSgRTTpmkPupGcdTt/UI9MfV+tmS
PoSCOPS20I6niNwZg6tKjiGu+YgVKhAnGCdzwKvxTSmtbV23GslCgvOYIA2LhPnv
yCFZIbNkInRm6anM56cZBiZVL/r2oct+VlTcM6m//x+GswgpgA5mHEI+5Zar6FI4
if8h8Wy4ZgqsTE2Q1LcVTrfgdUEJXlmWf2f2mOy52+dsJQ0V7s9nzEMJONk5r3Ol
HJDPNCkbAAcYh+BKC7zgofrujA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 03:32:53 2026 by rpki-client