Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft
File:                     dfDxcTIKeOUHAm-fL1T0smcMYhE.mft (raw, json)
Hash identifier:          nh0lhS0BplszK9B350M3qfDKw9NwYsw7lZfrG7ngaLk=
Subject key identifier:   FA:D0:73:4C:FB:D6:AA:86:78:C7:75:B1:19:89:4D:94:67:24:C1:A6
Authority key identifier: 75:F0:F1:71:32:0A:78:E5:07:02:6F:9F:2F:54:F4:B2:67:0C:62:11
Certificate issuer:       /CN=A91C9161/serialNumber=75F0F171320A78E507026F9F2F54F4B2670C6211
Certificate serial:       1B72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft
Manifest number:          1B63
Signing time:             Tue 06 Oct 2026 16:17:05 +0000
Manifest this update:     Tue 06 Oct 2026 16:17:05 +0000
Manifest next update:     Tue 13 Oct 2026 16:17:05 +0000
Files and hashes:         1: dfDxcTIKeOUHAm-fL1T0smcMYhE.crl (hash: VSnHMd7qDluz5xCre50M+ksQnjMtjObzcZ3K+W7BsYA=)
                          2: 95A226D0EF3C11E9A7190355C4F9AE02.roa (hash: vU7FtIOGdlgFzN2R+Yvnm21XMTi9xqbV3l1GIS0tOqA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.crl
                          rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 16:17:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7026 (0x1b72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9161, serialNumber=75F0F171320A78E507026F9F2F54F4B2670C6211
        Validity
            Not Before: Oct  6 16:17:05 2026 GMT
            Not After : Oct 13 16:17:05 2026 GMT
        Subject: CN=6ac51f01-3303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ec:13:43:56:be:bc:30:d4:65:bb:47:44:9b:
                    9a:93:d9:fd:89:ee:f9:45:29:d7:db:4e:57:0b:f2:
                    5d:18:2c:28:6c:a2:18:26:90:66:72:58:57:fa:58:
                    d2:2f:47:84:9f:58:e8:e9:45:4b:89:64:c5:66:31:
                    6a:99:5f:0d:a5:ce:5a:b3:48:20:ba:0b:dd:9f:e1:
                    be:1e:d7:52:a4:62:38:8f:0f:19:7a:2a:86:09:ff:
                    45:1f:b4:92:c5:07:c9:37:34:c7:e7:6a:9f:2c:ae:
                    c2:17:f5:a1:d7:29:60:e2:fe:e5:05:41:2b:26:04:
                    28:b6:52:b3:e5:15:26:5b:48:94:6d:67:6e:c3:89:
                    9e:f1:c3:d4:dc:2b:25:95:d0:6a:2e:d9:a8:f9:fd:
                    d4:bb:a6:f3:89:14:07:22:a0:dd:57:b2:48:b2:19:
                    a1:6f:36:27:23:29:bc:47:a3:46:fc:ae:4e:56:79:
                    2b:89:a9:a5:d6:75:9d:c8:2d:c5:94:5d:21:ef:07:
                    b0:55:72:42:f1:eb:f1:b1:c5:19:a5:44:84:89:64:
                    d6:37:98:1d:ff:11:fd:1a:b4:45:b8:83:a3:8c:a1:
                    f7:8c:d4:b3:6e:d5:d2:23:87:50:c5:8e:1c:37:8c:
                    02:84:1a:eb:14:62:44:0e:30:05:b1:bc:f8:95:23:
                    59:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:D0:73:4C:FB:D6:AA:86:78:C7:75:B1:19:89:4D:94:67:24:C1:A6
            X509v3 Authority Key Identifier:
                keyid:75:F0:F1:71:32:0A:78:E5:07:02:6F:9F:2F:54:F4:B2:67:0C:62:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:2a:61:97:b1:5b:df:7f:49:29:32:2a:2f:80:24:4a:69:d8:
         0c:fb:7c:81:26:fc:f5:46:b8:68:5e:eb:9c:96:58:38:eb:1f:
         0a:1c:58:9d:bc:b1:f2:6c:60:10:64:d2:b3:87:d8:7e:ce:7c:
         f8:0d:18:02:1a:59:dd:1f:86:e2:34:db:30:5f:92:4c:e2:aa:
         d6:43:4e:d3:40:94:33:6a:65:9e:19:a7:76:bc:13:e1:c3:3d:
         50:c2:2a:c5:23:01:a8:32:9e:f4:b1:ea:26:64:6f:61:bc:1f:
         1d:e4:1b:50:79:7b:c0:ee:58:20:24:6d:54:4a:09:0d:6e:1d:
         2e:a2:5f:86:33:53:3b:cb:a1:ae:00:03:2f:b6:8d:97:36:c5:
         ba:8d:19:ae:69:7a:bc:56:2b:49:66:1e:45:2e:e6:a4:c4:32:
         da:ab:81:26:57:ed:aa:4a:12:a3:41:b3:5d:31:da:f7:96:26:
         42:53:47:66:53:29:ba:0b:b5:85:7f:00:eb:d2:fd:a8:89:40:
         c2:fb:ab:36:f1:1c:63:5d:9f:9f:19:67:a1:7b:5b:ae:2d:5c:
         15:2a:44:7e:b1:f9:f4:09:35:52:96:cd:ce:3f:b8:73:fd:55:
         43:c1:04:0e:48:9b:0f:f1:f8:c4:b8:47:1d:16:a6:98:b1:97:
         03:8c:81:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:21:38 2026 by rpki-client