Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.mft
File:                     DXj787IdvbDPDE2ILytFm0R8uOg.mft (raw, json)
Hash identifier:          tUyhOC6U0OBpWpUUPZtPalwRiFxLdCSBtDQLsPtfk0Q=
Subject key identifier:   EC:0B:E1:2A:09:3C:44:A8:2C:24:2B:D7:C7:9E:1A:A4:D5:C3:4F:39
Authority key identifier: 0D:78:FB:F3:B2:1D:BD:B0:CF:0C:4D:88:2F:2B:45:9B:44:7C:B8:E8
Certificate issuer:       /CN=A919D766/serialNumber=0D78FBF3B21DBDB0CF0C4D882F2B459B447CB8E8
Certificate serial:       0362
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DXj787IdvbDPDE2ILytFm0R8uOg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.mft
Manifest number:          035B
Signing time:             Sun 27 Sep 2026 00:57:42 +0000
Manifest this update:     Sun 27 Sep 2026 00:57:42 +0000
Manifest next update:     Sun 04 Oct 2026 00:57:42 +0000
Files and hashes:         1: DXj787IdvbDPDE2ILytFm0R8uOg.crl (hash: m/la2xZW6HyycLaQgSG2AscHI7MUgiGtox+o4HhsMok=)
                          2: 8F0A568216A611ED86A3EF0CC4F9AE02.roa (hash: ICK3NKayjlVlRgTm/6KSTdOxybG9EontTf1e6pl2fIU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.crl
                          rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DXj787IdvbDPDE2ILytFm0R8uOg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 00:57:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 866 (0x362)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D766, serialNumber=0D78FBF3B21DBDB0CF0C4D882F2B459B447CB8E8
        Validity
            Not Before: Sep 27 00:57:42 2026 GMT
            Not After : Oct  4 00:57:42 2026 GMT
        Subject: CN=6ab86a06-afe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0f:d2:b4:8e:30:de:cb:77:f8:be:b9:9a:5c:
                    12:6e:a2:25:4f:97:4c:45:23:c4:4c:10:2c:ca:2b:
                    a3:e5:10:06:d8:ba:66:ea:7b:5a:2a:93:9d:09:b0:
                    f9:4d:67:47:dc:95:72:f9:5d:e2:5e:0e:4b:c1:39:
                    1d:41:46:c9:b2:75:0d:25:09:8b:f4:94:c6:4f:31:
                    86:f7:01:d3:63:96:dd:31:ae:2e:0c:bc:51:bc:9a:
                    52:bc:5b:10:70:7c:92:32:6d:2b:5d:29:74:8a:21:
                    59:da:99:87:aa:51:85:c7:49:4f:31:ab:b9:9b:92:
                    14:73:a9:0e:1d:4c:9f:c4:a7:ea:98:c3:a2:35:74:
                    c2:2d:4b:94:e6:cc:7c:ad:78:e3:a6:ec:d7:f9:94:
                    4f:68:09:4e:2b:7f:6c:82:69:a5:42:a8:7c:64:6a:
                    64:8a:e3:cd:08:18:14:cc:3a:a4:35:68:c5:58:23:
                    24:c4:cb:3a:0c:fe:16:56:42:5e:17:1d:38:77:93:
                    0d:f1:4a:97:a3:4d:4c:25:bd:15:6f:4b:75:8a:dd:
                    ec:00:bb:13:4f:5a:54:a7:8c:26:da:ca:41:14:f8:
                    ff:55:3e:f1:a4:ba:26:2e:26:d5:84:77:cd:36:4a:
                    27:36:76:63:5a:78:71:7d:cb:4a:9c:55:f1:95:a0:
                    b8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:0B:E1:2A:09:3C:44:A8:2C:24:2B:D7:C7:9E:1A:A4:D5:C3:4F:39
            X509v3 Authority Key Identifier:
                keyid:0D:78:FB:F3:B2:1D:BD:B0:CF:0C:4D:88:2F:2B:45:9B:44:7C:B8:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DXj787IdvbDPDE2ILytFm0R8uOg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:fc:cf:a9:b2:0f:d7:91:e2:ad:b6:26:a4:b1:93:96:84:1c:
         67:30:77:fc:55:7a:af:28:5e:f5:4b:6f:17:f0:db:f5:e4:01:
         6d:41:df:08:7f:43:29:fd:2c:6a:ec:00:5c:f1:5f:28:95:93:
         52:b4:2f:a2:a7:c0:7b:a1:4f:64:8d:11:b1:99:44:42:ee:09:
         ed:b7:30:f9:39:a0:8f:9b:a3:0d:0f:96:31:f8:f2:ce:fc:c1:
         0f:29:40:b2:33:3c:f0:e6:e5:b2:f6:16:48:ae:60:b6:3b:90:
         a8:cc:f4:bd:50:b9:84:60:6a:98:6a:09:5e:62:17:ac:6f:11:
         4e:d4:36:15:7f:f7:b6:c0:2b:d7:d8:13:f1:d8:a6:b1:23:5f:
         c4:ab:f8:cf:0c:66:ef:81:c5:49:56:c2:01:17:c9:27:2a:2c:
         f0:6d:8b:e3:b0:73:63:64:f0:e3:c2:57:9c:4c:43:69:ca:cb:
         f8:a0:be:00:be:90:12:5f:ca:12:31:fe:53:4b:10:1a:11:bf:
         2e:a0:98:f8:c5:99:e1:77:7e:1c:2a:8c:48:7f:9d:fe:48:2d:
         0d:6a:da:a7:c4:93:57:8b:7f:dd:7b:f8:4f:c8:3d:1c:f2:a3:
         e9:fe:e5:4e:1b:16:55:13:bd:e6:2a:ef:84:2e:7a:12:2e:2e:
         ab:21:81:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:14:18 2026 by rpki-client