Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.mft
File:                     DOpooCxSn4h1LGQt4NL--fXXoUo.mft (raw, json)
Hash identifier:          VlOKXAi203TxP+//R8WOT/O7NCpZXmgzQIeEdC9UJZ4=
Subject key identifier:   B7:B2:B0:97:91:F4:20:26:02:2E:6E:66:56:96:F2:A8:C8:43:B6:D9
Authority key identifier: 0C:EA:68:A0:2C:52:9F:88:75:2C:64:2D:E0:D2:FE:F9:F5:D7:A1:4A
Certificate issuer:       /CN=A913025C/serialNumber=0CEA68A02C529F88752C642DE0D2FEF9F5D7A14A
Certificate serial:       07BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOpooCxSn4h1LGQt4NL--fXXoUo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.mft
Manifest number:          07AB
Signing time:             Tue 28 Jul 2026 21:59:40 +0000
Manifest this update:     Tue 28 Jul 2026 21:59:39 +0000
Manifest next update:     Tue 04 Aug 2026 21:59:39 +0000
Files and hashes:         1: DOpooCxSn4h1LGQt4NL--fXXoUo.crl (hash: +h1FtL2j4Hl1hOt+Kzh1TYLjjbtr9ifDBM5JbczBExk=)
                          2: 6E69B614870111F194514C90ABEE528E.roa (hash: hGXMwyeITPCkvuW8Dizb4qlthJ4dx/zSl/E63jMkq4M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.crl
                          rsync://rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOpooCxSn4h1LGQt4NL--fXXoUo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 21:59:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1982 (0x7be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913025C, serialNumber=0CEA68A02C529F88752C642DE0D2FEF9F5D7A14A
        Validity
            Not Before: Jul 28 21:59:39 2026 GMT
            Not After : Aug  4 21:59:39 2026 GMT
        Subject: CN=6a69264b-87f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:23:8f:dc:9e:0c:99:ce:ac:58:3d:44:5f:fc:
                    11:c6:84:39:d2:b2:d3:bf:bc:3e:c4:03:38:db:26:
                    21:3e:ae:0a:c6:26:73:f3:8c:7a:50:bc:5c:d4:7c:
                    5e:79:8e:f3:15:f8:67:ab:f3:60:bd:36:5e:7e:4e:
                    ed:d6:3e:2f:e9:0a:b6:4a:66:d8:3b:29:aa:3e:a8:
                    2b:e5:42:58:81:f4:d4:a1:53:c3:62:a7:9f:a5:67:
                    4d:41:08:aa:50:bd:7d:36:96:cf:16:54:f0:47:a8:
                    e3:97:85:61:23:13:97:05:a9:b3:81:06:e3:28:7c:
                    a1:8d:de:16:be:5e:14:b1:76:e9:19:06:19:52:11:
                    b2:da:d8:fb:72:86:d7:85:e2:b0:4c:85:8d:77:fe:
                    80:b8:39:08:ed:66:cb:5d:aa:45:37:42:0a:d8:ca:
                    c1:6c:13:f0:bd:15:15:bf:5c:c8:3f:dd:d4:76:36:
                    3d:8e:32:b2:9a:30:08:6a:0c:0d:89:08:0c:4d:e2:
                    0f:92:a3:99:19:ba:e6:4d:cd:fd:5d:1f:04:8f:7a:
                    0d:d8:a7:01:73:a2:ec:3e:d3:f7:a1:28:79:04:fd:
                    c8:75:05:52:47:89:13:6c:13:1e:98:36:fe:cc:fc:
                    db:a3:f9:3c:29:6d:a6:17:e6:3c:c9:9a:24:9d:cf:
                    20:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:B2:B0:97:91:F4:20:26:02:2E:6E:66:56:96:F2:A8:C8:43:B6:D9
            X509v3 Authority Key Identifier:
                keyid:0C:EA:68:A0:2C:52:9F:88:75:2C:64:2D:E0:D2:FE:F9:F5:D7:A1:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOpooCxSn4h1LGQt4NL--fXXoUo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:06:cb:3d:76:02:c1:5d:22:8b:78:fc:61:53:b3:ba:ae:57:
         d8:c3:e4:36:43:a5:25:33:6a:3c:7a:1f:e2:29:7e:d9:b1:9d:
         64:6e:16:db:9b:5b:40:98:80:37:af:23:b9:7e:21:e3:19:af:
         76:a7:01:2f:05:ed:1d:70:e1:27:1b:c8:f6:6a:a0:88:1e:9e:
         ec:d5:da:46:dd:b1:65:0c:82:3c:32:92:2d:ab:9c:a6:0d:21:
         0a:c6:24:a7:c8:c4:cb:9e:07:64:ec:83:06:10:ff:7c:09:65:
         87:3a:14:cb:54:96:22:dc:3c:9c:8e:8f:5e:f6:27:b3:d2:9e:
         e3:88:01:91:ea:af:a1:fc:ab:66:f9:5e:47:6d:4d:63:74:ba:
         3e:45:60:88:3e:2d:df:fc:73:d7:8e:dd:da:3d:ca:8f:85:8f:
         9a:b8:9d:77:86:52:b0:44:ba:71:f9:dd:95:ca:0f:b5:a9:5a:
         f8:89:2b:e5:e1:42:ed:5d:31:bc:ef:b0:44:b2:d6:ab:9e:00:
         67:73:c5:b3:34:f0:79:5f:08:8a:2b:8b:bb:e4:08:d7:7f:c6:
         09:ef:3b:96:e3:15:3b:86:3c:8f:50:30:03:9f:9c:f4:be:b8:
         8b:aa:a8:e9:fa:dd:66:6a:08:5e:01:02:3a:08:90:fd:09:55:
         37:64:e5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:22:20 2026 by rpki-client