Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft
File:                     DldBdtqmrGyXcGxmecfiTnC6rVc.mft (raw, json)
Hash identifier:          Iqmn0gEmI78BKOxQ9WcoJDZU/IyXCbN/Oh7JhdEcvj0=
Subject key identifier:   21:0E:A3:60:AB:93:E6:CF:82:C6:9F:9F:DF:4A:DF:D5:2C:E0:14:85
Authority key identifier: 0E:57:41:76:DA:A6:AC:6C:97:70:6C:66:79:C7:E2:4E:70:BA:AD:57
Certificate issuer:       /CN=A91C0BDE/serialNumber=0E574176DAA6AC6C97706C6679C7E24E70BAAD57
Certificate serial:       0A99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DldBdtqmrGyXcGxmecfiTnC6rVc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft
Manifest number:          1476
Signing time:             Sat 26 Sep 2026 19:38:01 +0000
Manifest this update:     Sat 26 Sep 2026 19:38:00 +0000
Manifest next update:     Sat 03 Oct 2026 19:38:00 +0000
Files and hashes:         1: DldBdtqmrGyXcGxmecfiTnC6rVc.crl (hash: KSNH0rTIwgF0FmO+5vBJ/minNb/uVr8f17Q47rGnF3I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.crl
                          rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DldBdtqmrGyXcGxmecfiTnC6rVc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 19:37:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2713 (0xa99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0BDE, serialNumber=0E574176DAA6AC6C97706C6679C7E24E70BAAD57
        Validity
            Not Before: Sep 26 19:38:00 2026 GMT
            Not After : Oct  3 19:38:00 2026 GMT
        Subject: CN=6ab81f19-69b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:7d:2e:90:c3:b5:28:eb:f9:70:1d:73:09:c4:
                    65:8d:db:80:e8:84:0c:4b:c5:2c:03:94:e7:69:37:
                    1e:66:bf:ae:4a:7b:f5:a9:83:17:25:51:1b:04:e5:
                    d8:43:98:60:bb:97:b3:24:97:eb:62:d3:48:27:ec:
                    b4:8f:ca:e6:ae:bf:8a:fe:49:76:f1:18:97:c4:33:
                    bb:0d:34:6b:92:9c:b4:67:e4:cc:05:fe:64:5b:eb:
                    c9:82:b9:61:32:ea:1d:1b:3f:f8:74:c9:cb:c2:46:
                    61:75:c9:3a:56:e4:2d:12:c2:49:c1:35:1b:6f:1e:
                    46:e0:ec:b9:59:5e:42:43:76:6f:e3:b5:ce:f6:b0:
                    fe:0f:28:e9:55:57:33:12:18:ed:1b:9f:bf:23:90:
                    0f:a8:52:46:3b:64:54:a4:da:ae:a6:18:ea:00:03:
                    e0:43:a3:b2:ba:03:22:e5:d1:2f:ed:bc:65:ff:2c:
                    73:fd:38:6f:28:75:fa:5a:0a:86:cc:fa:99:43:2f:
                    cf:37:8f:55:6e:fd:16:c7:e8:74:4d:f9:0c:a6:33:
                    48:16:b8:db:cd:d5:27:da:c2:b6:60:1c:69:d2:12:
                    9c:f1:fd:9e:a5:03:26:77:b4:17:ae:ce:08:12:6b:
                    75:24:3a:01:f7:4f:2f:64:7d:96:8c:23:81:bf:4e:
                    19:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:0E:A3:60:AB:93:E6:CF:82:C6:9F:9F:DF:4A:DF:D5:2C:E0:14:85
            X509v3 Authority Key Identifier:
                keyid:0E:57:41:76:DA:A6:AC:6C:97:70:6C:66:79:C7:E2:4E:70:BA:AD:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DldBdtqmrGyXcGxmecfiTnC6rVc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:c0:56:f1:66:f5:cc:7a:de:9c:0f:78:0a:79:a5:42:8b:50:
         4b:c3:73:9c:f1:6a:f0:4f:06:f1:f1:d9:7e:ad:16:19:5b:5d:
         b0:ad:9c:e9:ec:1e:ef:5e:48:c2:00:43:91:66:c8:32:98:ef:
         e8:cf:de:16:f5:aa:42:d5:6f:41:b4:76:e5:e5:29:18:2d:0a:
         82:5b:81:37:d9:64:04:d9:05:ae:5d:85:23:0a:02:44:b2:12:
         04:4c:ab:75:82:ea:9d:55:fa:39:3b:07:cb:86:b1:f0:17:78:
         78:82:f2:bc:03:a7:aa:a3:21:44:8d:69:a9:40:b6:73:cd:6f:
         16:27:03:8b:fd:27:fb:6d:a5:00:10:d9:a3:1c:63:8d:da:67:
         3e:92:93:a2:91:92:9e:38:92:cc:01:55:db:ae:8f:53:6d:da:
         7c:4b:ef:0f:d9:0d:36:f6:cf:f1:92:c6:1d:b7:16:a4:76:5b:
         4c:56:4c:6b:ba:44:41:bf:14:16:28:e1:11:b4:2a:d8:85:49:
         82:83:23:e0:1a:77:07:c0:bd:06:ef:cf:26:8f:28:72:1f:22:
         3c:c1:fe:4b:d2:fb:fb:1b:de:7c:85:c3:08:87:83:23:1f:11:
         58:24:82:c8:ce:ea:63:c8:07:5f:d7:d1:d1:10:6d:11:f8:78:
         90:a5:a0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:47:36 2026 by rpki-client