Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft
File:                     dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft (raw, json)
Hash identifier:          UgMd02woq+eqfERn/5WJVyHqvEiNJza1yl0Upj2G3DQ=
Subject key identifier:   C6:FA:EC:0D:E4:C9:B0:AD:89:F8:53:62:5E:56:A9:86:DE:4E:5B:4F
Authority key identifier: 76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4
Certificate issuer:       /CN=A912C8AF/serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4
Certificate serial:       0C97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft
Manifest number:          0C11
Signing time:             Sun 26 Jul 2026 19:38:44 +0000
Manifest this update:     Sun 26 Jul 2026 19:38:44 +0000
Manifest next update:     Sun 02 Aug 2026 19:38:44 +0000
Files and hashes:         1: dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl (hash: jwWnBMaxkUHAQmUFXlyoEvstRRGFbBnOi7lUTWj0kyk=)
                          2: 305F24342A0811EE9D810010C4F9AE02.roa (hash: xTnjKFEkhv3ieLQOrP9C6yTVSU56UseqdjRyAJkV7Io=)
                          3: 50448A72911411EF9CAF3E55C4F9AE02.roa (hash: PUCwcVB7mOMKNLxgaPflJNHZ7wfZlaCCwrgkjtHbLlA=)
                          4: 9E173D98C3A011F09FB4B135C4F9AE02.roa (hash: Du9re4YnGbzI32FEa+5SNfgxUVGqyoMQw5ZZIhqirTQ=)
                          5: DCFFE916452611EDA4853E62C4F9AE02.roa (hash: llpJTFb5gbR6BmRuVyy4JWW+914NmVxABUKSPBGS9YM=)
                          6: DC2FC844C39F11F0B36A6414C4F9AE02.roa (hash: V2qlmV4XkoxlRoXJX3GJoP5zWEsqS91ZCQdcyts5qHo=)
                          7: 261A2BA2F39611EDA98C5D4DC4F9AE02.roa (hash: Uvg+BnkN8k4fglRUul1hQWU8OMx515TnEmaoTVsiH3Q=)
                          8: FC895C72C39F11F095CC9914C4F9AE02.roa (hash: oeoqWRtwQTgBkvjilvWPRZDpoi0Ors8C695fBl0ectw=)
                          9: 9D060E183ED611ED8963B549C4F9AE02.roa (hash: 0+4o+E6SOsFpjtUX15g9YSzD9JvjowUL7y6x/I96FSg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl
                          rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 19:38:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3223 (0xc97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C8AF, serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4
        Validity
            Not Before: Jul 26 19:38:44 2026 GMT
            Not After : Aug  2 19:38:44 2026 GMT
        Subject: CN=6a666244-ff83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9d:f1:14:20:a4:0c:0f:7b:08:2d:20:d0:eb:
                    fa:1b:50:5b:19:27:38:80:f4:8e:61:a4:6a:d0:e5:
                    e5:20:a7:14:5d:79:37:a3:0c:3f:c2:78:e0:b2:49:
                    80:b5:7f:a0:44:92:3d:ac:2c:af:1f:12:7f:ae:f1:
                    65:b9:f0:e7:a3:a6:15:8d:13:9b:e9:58:5b:9b:b2:
                    2d:c9:e6:c4:08:fd:41:e2:d3:83:94:b5:92:7e:fd:
                    b2:06:b2:b5:49:89:88:83:85:32:ec:86:12:0f:78:
                    7b:84:9b:44:9a:67:45:58:d3:eb:11:c8:83:a5:92:
                    d3:b9:a2:9e:99:3c:55:6e:e0:25:83:e1:b1:f0:6d:
                    30:a3:11:b9:82:93:34:be:3e:2e:ff:77:0e:e3:ea:
                    ff:6d:2a:28:2e:13:8f:e1:71:4f:18:ab:4a:2b:2c:
                    c5:3c:72:54:8d:8f:a7:83:31:88:0a:dc:98:29:11:
                    73:79:0c:76:5a:e5:0a:ad:95:6d:74:c2:54:be:ec:
                    c2:f1:3c:59:2c:c2:8d:60:09:f9:7c:4d:be:9a:4c:
                    04:77:5d:4d:75:56:6e:b7:d1:9b:a4:2c:6a:cb:b9:
                    fc:d4:6f:3b:a5:4b:ea:c1:7f:8d:e0:5c:d6:d1:86:
                    a1:74:c1:4c:05:34:8a:6e:3f:54:4d:5a:b6:82:cf:
                    14:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:FA:EC:0D:E4:C9:B0:AD:89:F8:53:62:5E:56:A9:86:DE:4E:5B:4F
            X509v3 Authority Key Identifier:
                keyid:76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:88:07:8e:27:14:67:e4:6e:df:c8:ad:8d:57:89:2b:aa:a0:
         e4:a1:c7:22:fd:67:88:07:44:42:cf:91:30:46:19:03:60:91:
         1d:ca:f1:24:e9:63:74:49:66:9a:80:1a:3b:5c:b0:25:4b:b5:
         58:42:1d:a1:94:66:df:f8:3a:27:ec:cd:cb:8c:a9:99:61:15:
         3f:72:ee:63:4d:3b:64:dc:bb:e1:e1:c0:60:01:49:15:f4:b3:
         ca:8d:17:d0:90:2f:fa:e8:f9:a4:ac:e3:59:60:41:65:27:12:
         63:2c:48:27:71:6f:25:56:53:a4:51:38:bf:b1:6e:4b:b7:2d:
         05:4e:8a:be:87:76:04:51:83:9a:e3:51:ba:91:94:db:4e:24:
         27:29:c3:90:55:a2:40:73:9c:24:b5:63:46:b8:1f:45:cb:fe:
         bc:45:72:61:3f:02:ec:97:48:8b:10:c4:10:c8:33:a1:12:8f:
         39:a3:78:ee:b6:9b:70:6b:f3:e1:0c:77:44:f1:35:0a:7a:4b:
         c1:02:92:fe:3f:58:4f:a4:ae:78:b3:0f:c8:0e:03:83:c0:1f:
         04:67:f2:39:9f:49:2e:ba:09:02:7f:9e:5e:d6:9b:2d:99:45:
         42:14:16:72:c8:6b:85:69:c1:3b:1c:3f:c6:eb:d6:8a:3c:ee:
         1c:30:1f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:11:51 2026 by rpki-client