Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft
File:                     mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft (raw, json)
Hash identifier:          9yp3DrAukB5k5jviFEa1CSYQAS8LRHLbh3x7p/VVWfk=
Subject key identifier:   63:34:6C:01:2D:45:87:78:33:20:D3:70:2A:AD:7B:50:BA:E0:DD:DE
Authority key identifier: 9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91
Certificate issuer:       /CN=A912598D/serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
Certificate serial:       016A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft
Manifest number:          DC
Signing time:             Mon 27 Jul 2026 09:53:26 +0000
Manifest this update:     Mon 27 Jul 2026 09:53:26 +0000
Manifest next update:     Mon 03 Aug 2026 09:53:26 +0000
Files and hashes:         1: mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl (hash: F1IfdvG0hEbPpGwNH1IPrpsjtZW3jBQ9f/3hsOj5MPo=)
                          2: 567E4552C91911F0BB194C6DC4F9AE02.roa (hash: BXcg8YArXJ5CmD6evpZM4dq8jMTCCVwQHO6BvkW3b7g=)
                          3: C4EC2A8ED4AB11F08EA0FC57C4F9AE02.roa (hash: AgB/Lpuse8T/z5cV67IzFShDTNVxyKAZ8KwUvRhawFQ=)
                          4: 58EF9BECC91911F080D34C6DC4F9AE02.roa (hash: BGmFZ9dRfD8EZt0V672OP6EF10Q8PY5YgUnIZ7TDMZ4=)
                          5: B2815168C92411F0B6E88126C4F9AE02.roa (hash: CKGad+jxEPQI1Q563YDVR4xdQQ2X4PcTAVEPopEqkPg=)
                          6: B3994B8CC92411F0928E8126C4F9AE02.roa (hash: yEb+i+mak4WjK+zJpb4ckWnaPd4JzdPaxKZm8fn0XYU=)
                          7: 9F9D4E9EC91A11F08745C673C4F9AE02.roa (hash: iYpQ7cVbxOGpGyj+MLYh3y7Qiox2JCzWYbEYeJID7GU=)
                          8: 5537463AC91911F0AFA34C6DC4F9AE02.roa (hash: +Aqpgsv63vqmtQkR3ggdxV7iptUt9Fzgpnq420IOOtc=)
                          9: B4B21A80C92411F099228126C4F9AE02.roa (hash: rjpeXMm4lHb5Ck0Ms0tdS2iF+f13HUBBUzVVJWV4PPM=)
                          10: B40A9A4EC92411F09FAB8126C4F9AE02.roa (hash: 3N14qaLKIE8BN0vWJd2KtmivGDsUthfcKYgKyJWVe3U=)
                          11: 1C2DE6A6D4A311F08D323E54C4F9AE02.roa (hash: tfqU0yp7k06G8a+YLVOyxW/4efWaKePEWJ7Jmic77aU=)
                          12: 9DA31C0EC91A11F0AEDEC673C4F9AE02.roa (hash: DHpdbRF2Zso6P1hxGHzUsRdlrbKQ33Y/CNHuuhJjb5g=)
                          13: A0000D2CC91A11F08D74C673C4F9AE02.roa (hash: sY76HWNe2DtCJtYS74CJx7prfOKVaNPpOF+PUbbT4H0=)
                          14: A87058D8445111F196638493CB833773.roa (hash: hjmeDeK8OqpXBY0QHMz/cAiPa+eSBTe6PN1y5++7MO8=)
                          15: 0CAE2A9E71F411F1A5B2C1D970A30FBC.roa (hash: rlDXqQrWygilY/rnu+YsYCbI9x0JZnN2y8s4ah/lzhg=)
                          16: 9D3B8A8AC91A11F0B4BFC673C4F9AE02.roa (hash: /+8j5V7Q4inRuiyHFTWZNWPR7MOmulWdNP3/6QLql64=)
                          17: 55B2771AC91911F0BA7D4C6DC4F9AE02.roa (hash: hVwh2ep8Iw7o7hX3MNdhNDewDGbex1WLUmhHf+4i9PI=)
                          18: 576F51B8C91911F0AB974C6DC4F9AE02.roa (hash: B7o39MCNiwPkqimijPdHtCcLEzghu38rFNT9tzx72Xo=)
                          19: D008EA4AC92211F0AD92BA21C4F9AE02.roa (hash: C7uwuCI7TqrSFDaQH8Zzgy3OnejNXfnU7UwlS3rMRx4=)
                          20: 230E492ECB6711F0991B7E4FC4F9AE02.roa (hash: tNXsHZohUwAzxEAZYS9aP/mod2gm0YLp4U1BMbJHsAQ=)
                          21: B2F27AFAC92411F09F068126C4F9AE02.roa (hash: 18KHmFviCpW+1MpSyrjZy2QFKZiIGjy/6kV7DRcX0Y8=)
                          22: 7D679C84C92511F09CF68054C4F9AE02.roa (hash: S9XUSJnxKvgsBDvTpONrUcHMGtxkSO4X3tK4EZVr99k=)
                          23: 20151124C8EE11F0BD2FFA4CC4F9AE02.roa (hash: V4KzQo4wZ81qbo+MqiN5pgO8Y+Nc0vatL2esSSR0mec=)
                          24: 9E825176C91A11F0876AC673C4F9AE02.roa (hash: d71K3UhmJpGSIPnHwtXjuIVmSy3U1s/D91e+1fG5beE=)
                          25: 9F196B2EC91A11F0AAB4C673C4F9AE02.roa (hash: tyQ+cSqsH2Qv0ddD7XoDmKPDoTkmyW/CRBZ+upSwUfo=)
                          26: B1E31BF6C92411F087908126C4F9AE02.roa (hash: GQFH/AinoWYWy/+S33nOX1sOOYYuDreBoZl3vsEFu7k=)
                          27: 9E1FAF62C91A11F08AC0C673C4F9AE02.roa (hash: k/R5dEj2eRfr7v4Cwra7e+lRrjtz7qmR7/pXUFo+/fk=)
                          28: 86DAE3A04A8C11F188553DBDAC833773.roa (hash: /cmAtIFJsaYzPWu1xv/Moo/JrJ9wB/SowewT12UuOCc=)
                          29: 57F3E1BCC91911F083BE4C6DC4F9AE02.roa (hash: 5dwmeSZ0SRVIGYAiO2cL5WhMdIRKKwW4wqbG2GaMUhM=)
                          30: 2486E3E0D4B011F0A4E6361AC4F9AE02.roa (hash: ZW6jL59jikFz0FLaafnNnq4L3V9q7AF9K/n1i2MST+s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl
                          rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:53:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 362 (0x16a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912598D, serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
        Validity
            Not Before: Jul 27 09:53:26 2026 GMT
            Not After : Aug  3 09:53:26 2026 GMT
        Subject: CN=6a672a96-f0e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:02:71:82:0b:11:4a:b4:47:54:9d:a6:1a:bb:
                    c4:35:56:91:09:50:b9:0b:ee:57:a9:85:ad:bf:75:
                    5b:25:41:05:22:4f:67:23:4d:39:e8:1d:06:8b:58:
                    9c:bf:bc:b8:8a:18:10:78:b6:58:34:fd:b2:aa:84:
                    53:fc:af:c0:ed:ec:97:74:8b:d4:bd:9a:a2:9d:7d:
                    0d:af:f6:86:44:48:4a:50:ff:93:76:b9:b7:14:e6:
                    1e:4b:1b:4c:61:70:6d:07:57:5f:25:6f:84:97:b6:
                    54:8a:da:a8:5b:2e:c1:cd:df:1b:4a:d0:e9:7b:fc:
                    0f:a2:c2:3b:6d:6d:0e:28:6d:aa:50:9d:6c:58:1a:
                    8e:95:5f:39:4c:10:35:7d:88:1d:d6:5f:87:a5:5d:
                    6e:15:18:3e:d2:20:e0:b4:52:83:22:21:01:42:0c:
                    f9:b0:86:4d:6b:88:48:53:8f:c1:1c:46:23:b7:7c:
                    d5:54:b0:21:0c:eb:bb:b9:11:86:52:3c:35:45:15:
                    c9:7e:fb:63:55:47:55:64:52:85:11:83:7f:12:cb:
                    2b:42:e9:00:f4:e7:a0:e4:18:9a:9d:f5:d6:51:e8:
                    86:a3:dc:d4:db:1e:99:12:2d:4a:31:0b:8b:b0:eb:
                    ac:f9:db:b5:ce:d5:df:b2:31:27:6f:39:43:81:5a:
                    e3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:34:6C:01:2D:45:87:78:33:20:D3:70:2A:AD:7B:50:BA:E0:DD:DE
            X509v3 Authority Key Identifier:
                keyid:9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:e0:bc:ec:29:f7:6b:f5:48:1a:ec:93:0a:0e:03:0f:0b:da:
         0f:85:2e:a3:4e:47:25:29:b9:3c:de:55:55:4c:e0:fb:ba:f5:
         e1:a8:22:98:84:9e:c3:d1:75:b7:20:3c:ff:09:61:78:76:89:
         e5:75:e8:55:39:81:91:e0:9b:93:5e:c0:54:63:a1:72:08:03:
         5e:8a:eb:1b:b6:38:d7:ca:be:91:b6:ec:68:22:33:3f:46:fe:
         0c:c4:c1:9c:95:d0:e3:75:ca:5d:8d:5d:bd:ad:d9:76:75:b1:
         d8:23:c7:a8:1a:4f:ac:d0:50:e7:a3:b2:f7:72:ee:ae:3c:d4:
         44:e6:f6:e3:fe:36:d9:2c:3f:78:b7:ba:e9:f7:d3:09:43:68:
         28:a8:c6:41:8c:9d:ff:46:4b:ca:2a:83:6a:34:d0:d4:ed:7f:
         e1:55:ab:3a:9e:38:d2:e3:a9:ff:af:d4:eb:ad:dd:1f:b6:6f:
         97:85:c6:51:1d:12:4b:49:cf:54:c0:40:50:f3:79:d5:ae:ef:
         d3:f5:5d:eb:59:03:43:f9:bc:1c:a4:60:40:48:cc:ad:a6:aa:
         f7:9e:97:b1:b7:e5:b5:51:78:47:34:08:7d:86:2a:e2:46:94:
         b3:11:f0:f7:d6:e8:d9:18:8b:10:b8:27:dc:b7:82:21:09:b5:
         e4:ca:61:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:11:55 2026 by rpki-client