Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.mft
File:                     DmpDAZVo-XcRTm1GWwpvVWn1OD4.mft (raw, json)
Hash identifier:          tcIDJfLJ4/+wEXIdAYsH4KyzQ+sIaMwDgxxJPlgzmmo=
Subject key identifier:   9D:64:50:17:AA:9E:40:00:3A:29:C5:9E:ED:7E:8E:EC:E8:8E:4F:01
Authority key identifier: 0E:6A:43:01:95:68:F9:77:11:4E:6D:46:5B:0A:6F:55:69:F5:38:3E
Certificate issuer:       /CN=A912FE31/serialNumber=0E6A43019568F977114E6D465B0A6F5569F5383E
Certificate serial:       0ADC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmpDAZVo-XcRTm1GWwpvVWn1OD4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.mft
Manifest number:          0AD1
Signing time:             Tue 28 Jul 2026 19:43:50 +0000
Manifest this update:     Tue 28 Jul 2026 19:43:49 +0000
Manifest next update:     Tue 04 Aug 2026 19:43:49 +0000
Files and hashes:         1: DmpDAZVo-XcRTm1GWwpvVWn1OD4.crl (hash: IV5COGl7W8xNQl1fdTRmyrG+aK5eX6hg+W3GnXVWBM0=)
                          2: A42489D8799211EAA230E17FC4F9AE02.roa (hash: ISmZrMAJhwcmsro9bEaqHnNsjBknpoO3JY21muedtdI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.crl
                          rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmpDAZVo-XcRTm1GWwpvVWn1OD4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:19:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2780 (0xadc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FE31, serialNumber=0E6A43019568F977114E6D465B0A6F5569F5383E
        Validity
            Not Before: Jul 28 19:43:49 2026 GMT
            Not After : Aug  4 19:43:49 2026 GMT
        Subject: CN=6a690676-d417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fd:b2:bd:31:42:5f:c7:bc:0b:83:c9:c7:7d:
                    e4:48:72:8a:98:79:e9:b1:02:cb:a8:4e:4e:ae:1c:
                    ff:48:ce:1f:d0:41:32:bb:10:4d:75:ff:ef:bd:c9:
                    d0:ac:87:b9:6a:59:eb:07:e1:6f:f7:3c:fd:50:80:
                    63:6c:66:59:79:18:b4:96:93:6f:9d:27:83:43:6c:
                    85:87:d3:77:04:b7:b1:32:4c:6b:1a:d8:3e:4b:b2:
                    18:bf:86:bc:07:e5:38:1c:d4:d4:fc:d4:8a:4b:5c:
                    5e:28:6c:f0:0e:f0:3f:f2:4f:17:f3:ee:2b:fe:97:
                    83:72:a4:a8:1f:1a:7d:9e:9a:6b:a5:6f:cb:d4:9f:
                    4f:73:84:a0:c1:98:2d:7e:2e:e1:e0:9d:33:be:70:
                    18:4e:6e:5e:6a:a7:e2:0f:43:4d:9a:36:de:84:21:
                    7a:b5:56:1d:2d:a9:de:19:2c:ee:ea:9e:a5:96:67:
                    3f:8d:6c:18:9a:7c:a3:38:7e:1c:bd:a9:2c:4c:6e:
                    77:74:8b:12:58:ee:01:5b:77:6b:54:2f:29:90:50:
                    e6:7b:df:cb:de:e5:3c:5f:f0:b3:67:d7:61:25:61:
                    3e:d1:38:f6:36:d1:38:5c:0d:d0:be:91:40:4a:68:
                    d6:24:4a:16:1a:15:a2:c6:2d:28:e9:21:4f:0f:fd:
                    c2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:64:50:17:AA:9E:40:00:3A:29:C5:9E:ED:7E:8E:EC:E8:8E:4F:01
            X509v3 Authority Key Identifier:
                keyid:0E:6A:43:01:95:68:F9:77:11:4E:6D:46:5B:0A:6F:55:69:F5:38:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmpDAZVo-XcRTm1GWwpvVWn1OD4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:62:74:62:e2:f6:8f:74:b5:b6:d5:26:f4:e4:49:db:5c:b3:
         0e:fc:fe:dd:a2:60:cc:fa:2f:b1:eb:6f:93:d3:aa:72:1a:bb:
         8d:b7:64:61:7c:0d:2a:a9:37:4d:be:59:b5:1c:ef:76:53:24:
         20:80:48:f5:b3:e9:94:4a:f8:98:a0:b0:f4:e6:29:2a:89:db:
         b6:ec:83:10:99:54:9e:96:5b:a5:ba:f0:3d:95:c9:a0:8b:33:
         e4:72:70:ae:9e:4b:ad:1f:e2:5a:64:79:58:3d:f8:24:b6:85:
         9e:e7:22:fb:0d:9a:77:28:11:e5:56:01:ac:72:22:08:38:74:
         d3:08:8f:9f:dd:cd:36:12:e1:3d:32:ae:72:5e:84:8e:e6:52:
         ac:6a:be:b9:92:63:43:11:c1:bc:01:d8:0c:2e:58:0b:47:c9:
         0f:7a:38:7e:f7:eb:c7:7c:b1:f5:29:46:b1:2e:81:0e:b6:f9:
         fd:ca:9a:fc:fb:0e:68:5c:43:40:ed:33:c6:4d:88:df:0c:f9:
         a9:19:69:c4:54:f3:b2:55:63:9e:0f:33:69:ea:bb:4d:b5:ac:
         ba:b8:09:c3:6b:b7:bd:3f:07:17:66:00:bc:aa:e2:7e:9e:54:
         50:a9:f3:cd:04:35:0d:72:d0:79:5d:14:96:bc:16:9b:f2:94:
         0f:34:ed:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:51:33 2026 by rpki-client