Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.mft
File:                     DfmeMksOOlPo5W1wIP9vvFvxywI.mft (raw, json)
Hash identifier:          rie7BN5I64c3frCrO0WBJf37pX7Ab8iFxFvS6e+XT0c=
Subject key identifier:   FE:BF:F7:C6:7D:AC:EA:93:FF:0D:54:DB:08:0B:2B:1F:E0:0C:E4:FE
Authority key identifier: 0D:F9:9E:32:4B:0E:3A:53:E8:E5:6D:70:20:FF:6F:BC:5B:F1:CB:02
Certificate issuer:       /CN=A91D72CC/serialNumber=0DF99E324B0E3A53E8E56D7020FF6FBC5BF1CB02
Certificate serial:       0EED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfmeMksOOlPo5W1wIP9vvFvxywI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.mft
Manifest number:          102A
Signing time:             Tue 22 Sep 2026 17:34:21 +0000
Manifest this update:     Tue 22 Sep 2026 17:34:20 +0000
Manifest next update:     Tue 29 Sep 2026 17:34:20 +0000
Files and hashes:         1: DfmeMksOOlPo5W1wIP9vvFvxywI.crl (hash: imWss1OcCAPohHi52QDrDfgQ6NaQyFAeyDEnFLJmnf4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.crl
                          rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfmeMksOOlPo5W1wIP9vvFvxywI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 17:34:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3821 (0xeed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D72CC, serialNumber=0DF99E324B0E3A53E8E56D7020FF6FBC5BF1CB02
        Validity
            Not Before: Sep 22 17:34:20 2026 GMT
            Not After : Sep 29 17:34:20 2026 GMT
        Subject: CN=6ab2bc1c-baf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1f:2d:93:05:dc:60:8f:f4:ca:e3:f6:5f:19:
                    8a:24:85:1c:1b:a6:8c:06:b6:22:a8:12:41:e8:0a:
                    35:b6:b8:11:09:c0:57:79:90:98:ea:92:f9:18:39:
                    f2:3d:eb:43:e4:e6:e0:58:58:70:82:81:63:19:9f:
                    a8:ab:b9:15:91:66:94:e9:bb:83:5c:28:2f:ad:65:
                    29:b0:fa:fc:45:ec:bb:f2:aa:0b:43:f3:94:7b:7c:
                    d6:ee:03:a1:2d:c1:e9:d1:43:ed:bd:ad:4f:76:0e:
                    59:2d:56:68:09:51:96:95:bb:b8:d9:3c:b8:16:71:
                    ba:82:84:8a:a9:4a:66:87:17:1c:a9:8e:51:01:6a:
                    74:f7:23:00:b2:c2:f5:41:5e:30:d1:0b:23:80:a0:
                    73:41:71:7f:75:22:06:4f:2f:59:72:d9:8f:2a:e6:
                    37:61:0f:fa:a6:2d:41:4e:7b:59:52:38:89:d3:66:
                    76:ef:6e:e1:56:d4:d0:e6:9a:47:fa:44:8c:2c:56:
                    9e:95:2e:bd:a8:fd:f2:e7:0b:80:d3:1c:7d:e2:78:
                    c7:fb:cb:5b:c1:06:35:cf:b2:39:d1:dd:8f:34:d9:
                    52:6d:f9:5e:c5:e5:06:6b:8b:92:58:52:09:d8:dc:
                    80:69:f4:a3:70:3e:81:a8:5d:30:d0:fc:cb:30:d2:
                    5f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:BF:F7:C6:7D:AC:EA:93:FF:0D:54:DB:08:0B:2B:1F:E0:0C:E4:FE
            X509v3 Authority Key Identifier:
                keyid:0D:F9:9E:32:4B:0E:3A:53:E8:E5:6D:70:20:FF:6F:BC:5B:F1:CB:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfmeMksOOlPo5W1wIP9vvFvxywI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:9f:0f:85:95:13:0b:7a:5d:83:9f:58:fc:f3:02:92:9d:57:
         5a:7a:a8:34:c8:eb:26:8e:f9:ed:3f:b1:e6:ef:77:6b:2a:03:
         8f:75:1d:33:de:4f:3e:b5:4e:72:42:e5:1b:d1:6c:67:ac:43:
         a0:8b:79:18:a0:a1:e2:90:93:f3:76:c2:47:86:89:1b:bd:15:
         b6:50:90:bc:cb:45:e9:3d:8e:10:d9:b5:e8:9c:b2:67:d1:3c:
         4a:af:18:c5:c1:89:ac:bf:89:5d:6c:1e:bd:56:ec:a8:7e:27:
         04:d4:16:36:57:60:5f:9a:ea:d6:06:a4:fe:10:46:1d:28:18:
         1f:11:1a:3f:61:54:6c:d5:56:a0:f0:2a:74:37:6c:15:68:8b:
         14:7a:e0:b4:07:28:59:d6:68:d1:0d:f4:56:51:0d:26:e3:1c:
         94:4b:1f:a9:60:0f:45:b7:6b:fa:8d:77:d9:98:ac:d2:71:bb:
         c6:38:3b:9d:97:b9:41:dc:c8:1a:f5:78:86:b4:72:85:ed:9b:
         9e:38:a6:bc:7c:d3:e6:d7:86:f8:6f:1d:d3:bb:93:15:9d:10:
         75:48:0c:8c:ac:8d:b7:e7:96:50:87:ef:7b:be:aa:2e:19:94:
         cd:42:aa:55:3b:f0:0c:91:ce:94:87:78:0b:a5:78:1a:4b:01:
         de:e7:7b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:55:39 2026 by rpki-client