Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.mft
File:                     ddHHozMD2o3GQirjUXA_KlKN874.mft (raw, json)
Hash identifier:          dYhbMK1Wq1B20sVirE8pyybMCN3LKKkx7XBD1y+ADpk=
Subject key identifier:   2C:26:74:B0:41:B9:6A:AE:A4:1E:C6:CD:8F:70:15:D0:34:8D:7F:16
Authority key identifier: 75:D1:C7:A3:33:03:DA:8D:C6:42:2A:E3:51:70:3F:2A:52:8D:F3:BE
Certificate issuer:       /CN=A91C5832/serialNumber=75D1C7A33303DA8DC6422AE351703F2A528DF3BE
Certificate serial:       022C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddHHozMD2o3GQirjUXA_KlKN874.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.mft
Manifest number:          021E
Signing time:             Wed 23 Sep 2026 02:48:03 +0000
Manifest this update:     Wed 23 Sep 2026 02:48:02 +0000
Manifest next update:     Wed 30 Sep 2026 02:48:02 +0000
Files and hashes:         1: ddHHozMD2o3GQirjUXA_KlKN874.crl (hash: vb4qqeFR9OgNjtfpA1PwIWGKD89/weWGDwi8pcwW+Pc=)
                          2: 3E6CF84C883311EE8822D90BC4F9AE02.roa (hash: 21MbeL2c4YLwBExJY7PKPByiCkIBI9z7opJchOT4zUE=)
                          3: AC0E54A8C8E311EF98C2B365C4F9AE02.roa (hash: evBEm2b+wO5EWpkoyV0JMMubzQxUV9WEBqLzlOLXTBE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.crl
                          rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddHHozMD2o3GQirjUXA_KlKN874.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 02:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 556 (0x22c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5832, serialNumber=75D1C7A33303DA8DC6422AE351703F2A528DF3BE
        Validity
            Not Before: Sep 23 02:48:02 2026 GMT
            Not After : Sep 30 02:48:02 2026 GMT
        Subject: CN=6ab33de3-1a27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:98:04:2c:21:05:7a:6f:0c:df:fb:ef:9d:9c:
                    f0:d2:1d:3b:ab:f8:12:c3:69:43:d9:e1:03:da:fd:
                    86:65:5d:ff:e8:c6:71:2b:13:fa:ae:9c:99:1a:7c:
                    cd:78:f2:d9:2d:72:e3:24:4d:69:da:9e:a6:b0:1f:
                    c8:4d:c0:3c:a4:3b:d5:f5:ec:2d:21:2b:6f:92:36:
                    0d:ac:b2:f3:a8:5b:85:d7:a9:cf:7d:18:51:e9:72:
                    52:1d:43:52:c5:a9:52:e3:14:64:aa:2e:5f:8f:34:
                    ca:71:5a:7d:4e:79:89:1e:04:4f:b7:ca:89:cd:c8:
                    2c:bd:cc:c0:20:16:c6:78:55:91:ab:a3:5e:4f:cd:
                    0a:d2:ea:e7:b5:f3:45:95:17:38:b4:e0:1d:a7:04:
                    8a:ca:4d:8f:58:48:e5:6f:9e:25:78:73:a8:78:a6:
                    08:78:b7:9a:28:88:28:db:3b:99:3d:18:5f:bc:a7:
                    89:e0:47:38:14:02:79:25:b5:0f:4d:4f:07:4f:68:
                    ca:9a:cc:a3:4a:c9:e5:dc:73:35:a9:2b:15:d6:44:
                    34:c3:f9:31:b3:51:4e:05:20:7a:3e:ca:c0:6d:26:
                    89:bf:06:2f:c2:93:81:14:4e:cf:6a:b8:74:84:84:
                    db:a6:57:59:ba:69:d4:53:51:23:3d:56:0f:b0:3c:
                    d4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:26:74:B0:41:B9:6A:AE:A4:1E:C6:CD:8F:70:15:D0:34:8D:7F:16
            X509v3 Authority Key Identifier:
                keyid:75:D1:C7:A3:33:03:DA:8D:C6:42:2A:E3:51:70:3F:2A:52:8D:F3:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddHHozMD2o3GQirjUXA_KlKN874.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:e5:b9:22:d6:b9:75:bd:5d:33:76:8f:c0:8f:15:79:b9:aa:
         bd:24:4d:cc:5f:03:a5:4a:77:41:c9:3d:40:3f:fa:01:89:74:
         dc:78:36:eb:fd:86:0b:cd:22:40:0d:dd:4d:03:a3:2e:b6:61:
         5e:68:ea:23:89:1e:0c:9b:5c:dd:09:16:32:c7:9e:78:9f:77:
         00:75:6a:5e:40:d4:41:76:cb:13:87:9a:cd:80:ed:4d:73:42:
         d5:3f:36:f1:77:72:1d:1a:98:21:1c:10:91:fd:a0:82:fe:b9:
         3f:9c:42:b4:cd:ca:76:6b:75:b4:0d:99:64:ae:df:f4:bc:81:
         08:ec:6d:23:86:03:75:d3:00:15:bb:c3:77:b0:4c:fa:2d:cd:
         39:5e:6c:c3:c2:10:d8:46:ac:87:b5:34:a0:4b:f8:6a:47:6d:
         c8:83:79:3f:e4:dc:68:47:a8:03:d3:41:a9:a9:18:79:a1:b2:
         ec:02:f8:19:57:ba:b5:95:2d:8e:2d:97:4a:16:80:f2:69:61:
         a9:7b:d9:14:c8:4b:08:c0:2f:ef:4d:10:5d:6f:4e:35:f6:4f:
         fc:0e:b0:fd:6e:b2:de:79:4a:29:6e:a3:48:3b:9f:1a:3f:d4:
         a7:ba:62:fd:3f:0d:98:a1:56:0c:0e:e5:c8:50:28:50:31:0c:
         29:6a:18:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:24:33 2026 by rpki-client