Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft
File:                     DZhBj4TCLONROV4eXE1dka5g_h8.mft (raw, json)
Hash identifier:          Vc45pvsfC/D6/Lqz+Kc/IyS5qL2tn/D9sDH68vbwfwY=
Subject key identifier:   11:ED:50:57:26:66:62:D1:45:3C:78:4F:45:0F:CB:F3:C1:97:B1:FF
Authority key identifier: 0D:98:41:8F:84:C2:2C:E3:51:39:5E:1E:5C:4D:5D:91:AE:60:FE:1F
Certificate issuer:       /CN=A91DED5A/serialNumber=0D98418F84C22CE351395E1E5C4D5D91AE60FE1F
Certificate serial:       0426
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DZhBj4TCLONROV4eXE1dka5g_h8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft
Manifest number:          0419
Signing time:             Fri 25 Sep 2026 00:11:04 +0000
Manifest this update:     Fri 25 Sep 2026 00:11:04 +0000
Manifest next update:     Fri 02 Oct 2026 00:11:04 +0000
Files and hashes:         1: DZhBj4TCLONROV4eXE1dka5g_h8.crl (hash: GXTw7ceEY5Y5zDkWNfeEWOeLvd5R0KvCZ+frhBdDnlI=)
                          2: C7513D2484CC11F18B5F25E597A30FBC.roa (hash: qjU7k0c2AFRf9V00UA42zSZWvTGD4WQ9W16GHJB9dqo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.crl
                          rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DZhBj4TCLONROV4eXE1dka5g_h8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 00:11:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1062 (0x426)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DED5A, serialNumber=0D98418F84C22CE351395E1E5C4D5D91AE60FE1F
        Validity
            Not Before: Sep 25 00:11:04 2026 GMT
            Not After : Oct  2 00:11:04 2026 GMT
        Subject: CN=6ab5bc18-901d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b6:12:f2:27:6a:5b:b2:d7:61:0d:35:d5:d3:
                    b9:c0:cb:fd:eb:03:53:ec:7e:99:16:c6:41:0f:dc:
                    af:33:45:15:ca:45:e2:26:f6:f0:97:17:53:4a:5c:
                    ad:5f:7a:be:0d:18:fc:8a:18:cf:3c:4d:c3:52:71:
                    4b:59:f2:cf:5e:21:ca:cc:f6:0b:e1:d5:e9:9b:86:
                    df:fb:95:d0:a6:49:e1:42:b2:13:76:ad:af:45:1e:
                    91:fc:58:39:76:e5:ef:b6:92:98:a7:12:96:9b:1b:
                    70:a4:1b:42:51:57:ef:8a:96:26:91:a2:2b:aa:8c:
                    18:e3:d0:20:b3:11:bc:71:51:1b:d2:4a:6a:4b:61:
                    e4:b1:a7:3e:22:a5:85:96:27:71:1d:f8:e9:04:22:
                    bf:97:e3:19:74:8d:2f:a5:69:c9:64:55:6d:70:df:
                    fd:02:92:8b:f9:3b:d2:f3:2c:a2:f8:f8:a2:1a:a4:
                    3f:cc:72:d2:fa:9d:41:b0:d3:40:33:73:30:93:97:
                    42:e6:9e:af:8f:73:d6:93:24:82:e8:6e:b8:be:4e:
                    bd:cc:7c:95:69:04:f5:8b:eb:29:11:95:9f:98:f6:
                    d2:92:16:96:e3:0f:27:5b:28:2a:27:c3:34:85:fd:
                    4d:73:eb:fb:72:76:0d:fc:ae:19:1a:41:c6:a7:1a:
                    0d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:ED:50:57:26:66:62:D1:45:3C:78:4F:45:0F:CB:F3:C1:97:B1:FF
            X509v3 Authority Key Identifier:
                keyid:0D:98:41:8F:84:C2:2C:E3:51:39:5E:1E:5C:4D:5D:91:AE:60:FE:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DZhBj4TCLONROV4eXE1dka5g_h8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:c2:ed:57:6e:9b:81:74:4f:8f:0e:23:5f:88:a9:58:3e:ea:
         e6:e5:f1:b9:25:92:37:e1:b8:c4:b0:61:e1:83:13:56:3e:f9:
         d6:7f:de:15:a8:b2:8a:0d:c3:a2:7c:ef:6b:14:eb:60:28:2e:
         d9:7b:57:cd:41:c8:69:17:9d:25:62:e3:89:9c:43:a5:69:b0:
         42:d3:7b:b1:78:c1:25:b0:9e:83:0e:e5:1b:b4:17:fe:8d:81:
         bc:ac:ab:8c:c8:9c:b3:05:e7:08:40:ba:d2:ff:aa:2f:08:0f:
         be:39:2a:60:14:14:5c:16:f0:79:a5:cf:99:2d:e1:d7:f7:86:
         5f:f6:2c:58:d3:07:32:39:f4:dd:5b:89:5c:cd:54:dd:cc:fa:
         53:47:5b:30:26:74:a1:e2:43:bd:2f:ef:c5:8f:9f:50:1d:88:
         5d:c7:8f:67:a5:f0:a3:f3:ab:b8:3f:94:c1:5b:9b:bb:46:f5:
         c3:20:a8:f9:ef:bd:8c:fa:4f:41:3b:09:b7:c3:8f:35:93:12:
         88:90:78:c7:ce:39:03:5b:58:9a:bf:2a:de:87:cf:48:81:12:
         19:82:98:95:7b:9d:54:63:dd:6c:cc:52:24:22:38:a4:70:83:
         9d:4a:8c:67:88:73:31:36:63:fe:c4:e5:a5:94:67:d4:e0:df:
         3a:1f:23:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:31:23 2026 by rpki-client