Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft
File:                     DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft (raw, json)
Hash identifier:          QE5YOqUY8NqiwIAIKYolp1bT31f7pzAypIbWdsJ1myc=
Subject key identifier:   34:1C:1A:9C:4F:9C:85:57:D8:FB:81:72:CF:BF:FD:2B:CA:10:26:11
Authority key identifier: 0C:CA:B9:44:7A:17:AC:3C:8A:78:7B:E9:47:EC:5D:6F:4A:89:5C:E9
Certificate issuer:       /CN=A91A6EA0/serialNumber=0CCAB9447A17AC3C8A787BE947EC5D6F4A895CE9
Certificate serial:       02C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft
Manifest number:          02BF
Signing time:             Thu 01 Oct 2026 02:05:45 +0000
Manifest this update:     Thu 01 Oct 2026 02:05:45 +0000
Manifest next update:     Thu 08 Oct 2026 02:05:45 +0000
Files and hashes:         1: DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl (hash: t8iRwgY2X9UV5x8+ot4NtVtbmZ3QZ2atI4bs0RDvmPk=)
                          2: 35CFAB068C4111ED8E01DF60C4F9AE02.roa (hash: 0qYn7E3SIHbzT9yJTx6pS9lXwvNIUC0KNk60lEWDjkU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl
                          rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Oct 2026 02:05:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 711 (0x2c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6EA0, serialNumber=0CCAB9447A17AC3C8A787BE947EC5D6F4A895CE9
        Validity
            Not Before: Oct  1 02:05:45 2026 GMT
            Not After : Oct  8 02:05:45 2026 GMT
        Subject: CN=6abdbff9-8ece
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:77:6e:c2:62:4f:12:af:cf:37:60:ea:a8:e9:
                    0e:04:b4:27:23:d5:68:2f:42:a4:79:31:f9:91:54:
                    b1:87:ee:6b:05:97:fa:eb:81:a3:a7:7e:d8:67:fb:
                    b8:1e:f2:31:3c:ca:49:3a:99:13:7c:47:98:c2:24:
                    6c:ab:3a:ba:7f:86:87:b8:6a:71:94:6d:96:8e:df:
                    2a:06:67:31:5e:77:6e:f8:90:cc:0c:8a:ff:8e:ec:
                    cf:a5:25:85:72:3a:9c:44:af:c0:99:d8:ed:b2:03:
                    06:61:20:ed:48:03:ad:18:13:ad:a0:42:f3:4e:67:
                    f7:98:d7:bc:fb:6b:7a:70:93:32:ee:be:68:e9:2a:
                    03:78:5b:8f:12:7a:97:f9:59:34:b5:0e:8b:a1:f2:
                    2f:7e:1e:4c:f4:ff:f1:18:22:bb:e7:5a:6b:a8:8b:
                    c9:ad:40:69:fe:65:c5:01:0a:1b:ef:9c:75:dc:40:
                    34:2c:15:a5:f3:9d:96:98:a9:8f:14:46:00:63:1c:
                    8d:4c:25:ed:7a:e2:a4:fc:3e:7c:75:f8:13:c0:80:
                    94:bd:d5:b6:be:a6:33:df:e8:55:aa:e8:0c:b4:6a:
                    72:bf:b6:5b:1f:23:c4:52:3d:bc:88:c6:91:a5:42:
                    f5:49:ee:6a:d9:f9:35:cd:aa:44:1a:6f:cc:01:b8:
                    88:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:1C:1A:9C:4F:9C:85:57:D8:FB:81:72:CF:BF:FD:2B:CA:10:26:11
            X509v3 Authority Key Identifier:
                keyid:0C:CA:B9:44:7A:17:AC:3C:8A:78:7B:E9:47:EC:5D:6F:4A:89:5C:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:34:93:50:aa:3e:2d:fc:89:19:1c:18:a6:71:e2:37:f7:73:
         25:2a:1c:1b:7f:aa:83:88:95:fb:9d:be:f1:c1:ad:11:fd:c7:
         7e:20:58:5b:9d:4e:0e:18:aa:e4:d6:d5:23:fc:6e:7b:9d:4e:
         67:8e:e3:93:08:b9:08:e5:f6:10:67:99:58:4c:47:ab:06:cf:
         cd:82:0b:cc:40:80:91:79:00:4d:43:9b:72:6a:3c:f4:5b:38:
         a5:aa:0b:e3:e0:56:52:1c:c5:d2:30:4c:2a:b7:d6:2a:db:9a:
         70:75:c7:d3:d1:72:83:32:59:5e:3d:09:66:02:de:2a:cc:00:
         52:e6:c8:ef:12:4a:ac:c2:a2:5f:cd:ab:a1:4e:08:61:f6:70:
         02:0b:85:df:dc:94:6c:46:9e:c0:a7:1e:a2:83:c2:6d:6d:1b:
         71:f9:87:b3:c9:e1:c9:cd:22:e1:64:d8:05:5b:93:c5:99:ad:
         15:b0:3c:34:38:45:67:7e:69:75:70:4c:7c:e4:ce:20:a6:c4:
         ff:9f:d9:d2:f3:f5:10:fd:16:4f:e8:3e:c3:72:09:7d:68:d5:
         ee:fe:5e:71:1d:75:62:e2:e2:dd:6d:ab:98:95:d0:f5:50:56:
         1c:bf:65:52:60:66:3a:b8:e1:c4:9d:79:b2:4b:de:e2:88:7f:
         93:5f:24:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 12:12:55 2026 by rpki-client