Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.mft
File:                     DO-JBd1l6R5Qazs5nCCiIork_T8.mft (raw, json)
Hash identifier:          SYVTfPi/6ezhBCApt4+fk5+BxIW4VRQJjpTUNZi7M6Q=
Subject key identifier:   81:4D:CC:82:E8:7E:61:FA:C5:67:53:A5:01:5C:3C:70:B8:A7:8F:30
Authority key identifier: 0C:EF:89:05:DD:65:E9:1E:50:6B:3B:39:9C:20:A2:22:8A:E4:FD:3F
Certificate issuer:       /CN=A91DB421/serialNumber=0CEF8905DD65E91E506B3B399C20A2228AE4FD3F
Certificate serial:       0A27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO-JBd1l6R5Qazs5nCCiIork_T8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.mft
Manifest number:          0A1F
Signing time:             Thu 24 Sep 2026 19:41:40 +0000
Manifest this update:     Thu 24 Sep 2026 19:41:39 +0000
Manifest next update:     Thu 01 Oct 2026 19:41:39 +0000
Files and hashes:         1: DO-JBd1l6R5Qazs5nCCiIork_T8.crl (hash: CXcjXZShHOH/oi9lgWG6nGokFt+4OasXlKGQXv4R5oI=)
                          2: A9511B7AA0B511EA94365A38C4F9AE02.roa (hash: Odh6PwT4fG9VLouXcIwHNY2NadEY9PU7kLIfNQ4Io5U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.crl
                          rsync://rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO-JBd1l6R5Qazs5nCCiIork_T8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 19:41:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2599 (0xa27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB421, serialNumber=0CEF8905DD65E91E506B3B399C20A2228AE4FD3F
        Validity
            Not Before: Sep 24 19:41:39 2026 GMT
            Not After : Oct  1 19:41:39 2026 GMT
        Subject: CN=6ab57cf4-faec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0f:9d:7f:a3:7a:63:7c:7a:ed:93:30:a0:1a:
                    51:ac:e1:45:63:10:b0:c1:d9:c3:55:df:bf:a9:79:
                    89:b1:5e:b6:94:f2:9a:fd:cc:c8:c3:eb:9d:93:5c:
                    cd:d4:63:69:5a:45:80:59:07:fb:a3:78:51:73:2b:
                    ed:38:20:7d:b1:69:2a:32:23:ed:b4:c1:cb:c0:87:
                    1f:56:1b:c4:a1:e3:43:7c:64:42:ae:4a:f3:69:5b:
                    b8:95:30:49:4f:9b:83:d0:1f:09:37:8c:68:a3:d3:
                    e1:79:34:d0:95:be:bd:97:fb:e7:22:51:52:89:83:
                    8c:a7:77:9b:f8:ec:ea:51:42:8d:11:75:d8:6c:64:
                    de:6a:b6:e2:e9:9c:cb:8a:c1:bb:f2:40:ae:4d:09:
                    8e:79:4a:f5:80:67:68:28:04:1f:7a:70:23:21:d3:
                    3b:91:52:89:af:b5:d2:43:f1:d6:6c:61:c7:6a:29:
                    8f:6f:d0:3c:b4:75:d2:2a:94:c4:80:ef:54:80:95:
                    88:0c:4e:08:5e:ee:aa:cd:33:6a:c5:83:70:4f:d3:
                    04:a1:d0:69:95:19:95:72:f7:95:c8:c3:88:b9:50:
                    5e:0e:e5:27:7b:db:11:3b:e2:3e:3f:20:14:7b:c7:
                    1f:8b:c4:d6:e6:20:b4:97:c3:61:a2:bb:9e:0b:15:
                    89:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:4D:CC:82:E8:7E:61:FA:C5:67:53:A5:01:5C:3C:70:B8:A7:8F:30
            X509v3 Authority Key Identifier:
                keyid:0C:EF:89:05:DD:65:E9:1E:50:6B:3B:39:9C:20:A2:22:8A:E4:FD:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO-JBd1l6R5Qazs5nCCiIork_T8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:0f:d4:6f:76:e0:b9:70:86:41:dd:cf:73:63:c8:93:d4:d3:
         12:ad:a3:7d:6f:7c:12:d7:f1:7b:9f:9f:cc:06:73:21:67:79:
         97:bb:97:53:3d:6c:e2:be:d8:b8:ae:9a:dc:71:d4:5e:b4:44:
         aa:33:87:3b:aa:b5:44:dc:5d:ee:62:62:3c:56:ea:51:3e:c9:
         49:5c:34:00:d1:be:05:74:21:a1:e2:27:7c:5a:a5:2b:b5:ce:
         e8:4e:c9:09:dc:24:67:db:9d:ea:bf:7e:70:fa:83:5f:cf:5f:
         7b:d9:a1:7e:1f:11:a9:be:3e:f1:c5:f7:44:e3:57:68:3a:0c:
         3f:15:7b:79:c2:26:de:89:51:d9:32:e2:e0:99:65:c5:30:57:
         88:a4:42:ba:5d:2f:45:a6:7e:aa:f4:94:86:9e:0f:87:1a:42:
         09:94:e3:fe:9e:8c:9d:61:13:a5:47:94:56:ef:0c:2a:2e:74:
         46:4f:f4:3f:43:33:f9:3b:cb:b5:b0:a5:2a:8e:15:f0:62:25:
         bd:50:e3:60:87:1b:e8:af:a1:a6:b9:12:47:08:7b:53:e9:53:
         60:8b:a2:b1:69:77:27:37:84:bf:c7:c9:9d:9d:f6:7e:5f:db:
         18:4c:19:1f:73:61:f3:6b:04:35:f9:7a:c2:f9:35:35:d3:db:
         65:81:45:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:58:18 2026 by rpki-client