Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.mft
File:                     daduw5hFLfosNmmexaR2zMWB3lc.mft (raw, json)
Hash identifier:          ZIvJtZL+kZNSiDPHExqhNafgL5vGB2e2Ntbpc+KkCjI=
Subject key identifier:   A9:5A:3B:93:C6:60:CA:70:26:2B:A7:C0:AD:96:DC:1A:3A:6F:C2:A0
Authority key identifier: 75:A7:6E:C3:98:45:2D:FA:2C:36:69:9E:C5:A4:76:CC:C5:81:DE:57
Certificate issuer:       /CN=A91D62C9/serialNumber=75A76EC398452DFA2C36699EC5A476CCC581DE57
Certificate serial:       1B54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daduw5hFLfosNmmexaR2zMWB3lc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.mft
Manifest number:          1B54
Signing time:             Tue 22 Sep 2026 16:11:56 +0000
Manifest this update:     Tue 22 Sep 2026 16:11:56 +0000
Manifest next update:     Tue 29 Sep 2026 16:11:56 +0000
Files and hashes:         1: daduw5hFLfosNmmexaR2zMWB3lc.crl (hash: MsE7/jamQE0rIr3SNNJ1IVOAHVRgmmyjdrBFam6gXjM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.crl
                          rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daduw5hFLfosNmmexaR2zMWB3lc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 16:11:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6996 (0x1b54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D62C9, serialNumber=75A76EC398452DFA2C36699EC5A476CCC581DE57
        Validity
            Not Before: Sep 22 16:11:56 2026 GMT
            Not After : Sep 29 16:11:56 2026 GMT
        Subject: CN=6ab2a8cc-5612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:aa:1d:5b:c0:a7:07:ed:3e:83:f3:06:55:29:
                    f7:a2:a9:5c:ab:cd:51:eb:1a:98:9f:3e:fc:6b:97:
                    c0:0d:c9:fe:16:c0:a8:46:9c:d2:42:f8:b7:85:33:
                    ea:9e:d3:25:4f:26:07:1f:5e:c2:61:63:52:d8:be:
                    ce:6f:f3:a5:d3:3d:54:1d:fe:0e:12:f2:f5:f7:72:
                    e5:19:f9:01:74:ea:52:bd:75:ce:3a:d4:f2:c3:9c:
                    c4:8e:04:08:2f:78:f4:82:4f:ef:9c:df:d2:e2:20:
                    09:8a:ed:85:83:39:ad:6e:d6:87:76:63:5c:76:e9:
                    19:6b:65:85:ff:9a:a0:e3:cd:56:d7:2a:d6:d1:b1:
                    43:e2:b0:83:37:86:4e:97:66:a9:63:26:52:ad:4c:
                    51:08:6a:96:b2:a1:18:d6:94:d5:73:5e:05:34:5e:
                    07:d3:76:d5:89:94:9a:2b:ce:19:5c:aa:26:23:9a:
                    2b:e4:22:e9:ce:c6:11:c4:73:08:63:4e:06:c5:04:
                    54:c3:e4:03:84:96:2a:16:b1:75:a3:39:c1:13:aa:
                    c1:38:97:07:08:8d:ee:bb:25:dd:85:78:03:73:b6:
                    e5:03:ce:e5:52:cf:7c:3c:93:76:46:7d:14:7c:57:
                    d7:4b:88:7f:e0:c5:a8:b4:11:73:aa:2d:87:f6:ab:
                    19:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:5A:3B:93:C6:60:CA:70:26:2B:A7:C0:AD:96:DC:1A:3A:6F:C2:A0
            X509v3 Authority Key Identifier:
                keyid:75:A7:6E:C3:98:45:2D:FA:2C:36:69:9E:C5:A4:76:CC:C5:81:DE:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daduw5hFLfosNmmexaR2zMWB3lc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:26:f7:0c:1e:21:4b:c3:49:dd:17:9a:1a:be:65:95:dc:2e:
         ee:c7:5f:1d:87:b1:ef:d5:c0:8f:56:2b:e8:a1:6d:57:f4:fd:
         5f:11:62:16:c8:31:13:57:81:8e:10:ba:37:e2:a6:2b:46:21:
         7c:58:02:1c:09:7d:4b:65:c8:59:19:ff:db:25:0e:8c:92:7c:
         c4:b8:c7:c2:10:62:c8:9a:16:7f:a7:3b:35:27:f1:f7:45:3d:
         43:53:2f:47:02:91:2e:8e:53:ac:b5:09:1a:35:e5:7f:4d:28:
         bb:1c:ae:84:48:1a:90:1e:17:91:ef:51:a0:a0:28:c6:e4:4d:
         7e:8e:3a:6e:ab:c2:22:ba:d0:9a:4b:81:92:ec:87:8e:a0:53:
         d9:62:bd:1a:f2:9a:4c:86:6a:b5:3b:ff:67:05:74:c5:fb:a1:
         ba:d8:36:07:48:38:f3:95:fc:9e:d8:a9:ba:c5:e3:12:e2:8d:
         ec:4b:d9:5c:1c:1c:29:5c:45:6f:25:85:8a:ef:48:7a:9e:92:
         b1:ee:52:c4:aa:b4:7b:41:c1:5d:e9:41:ce:f8:f7:82:09:af:
         ec:54:02:ba:38:97:66:51:e0:68:76:ad:12:ab:b5:a0:f5:c3:
         26:85:d2:b4:f8:83:77:b8:ed:e0:aa:9b:ea:dd:69:58:1e:d2:
         a1:28:88:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:20:55 2026 by rpki-client