Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft
File:                     DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft (raw, json)
Hash identifier:          yXzlxK8TCUM1B2XU83PqMR3K03pVLC7CufeMMn1AV3E=
Subject key identifier:   29:3B:05:9C:2B:E1:A8:35:0D:DD:66:EC:74:6E:C7:94:EE:F7:BD:CB
Authority key identifier: 0C:EE:0D:96:77:3D:5D:DA:D4:67:9E:0E:83:9A:8D:C1:26:69:E2:32
Certificate issuer:       /CN=A9132742/serialNumber=0CEE0D96773D5DDAD4679E0E839A8DC12669E232
Certificate serial:       04B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft
Manifest number:          04B1
Signing time:             Wed 29 Jul 2026 00:36:03 +0000
Manifest this update:     Wed 29 Jul 2026 00:36:02 +0000
Manifest next update:     Wed 05 Aug 2026 00:36:02 +0000
Files and hashes:         1: DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl (hash: 8M8rb9zXP+ZYDE0rysUpr0xbUPBWMcVk9kcM+MYhRzY=)
                          2: 41A312C684BB11EC95CF1D6DC4F9AE02.roa (hash: d5iSZj62C8juxE8auMNyD5ksUnuDKMjscM3w2qSQY9g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl
                          rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 00:36:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1208 (0x4b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132742, serialNumber=0CEE0D96773D5DDAD4679E0E839A8DC12669E232
        Validity
            Not Before: Jul 29 00:36:02 2026 GMT
            Not After : Aug  5 00:36:02 2026 GMT
        Subject: CN=6a694af3-4d8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:15:6d:84:38:a9:e2:1b:12:0b:ea:04:89:f8:
                    0d:72:7e:a3:56:bc:6f:ec:c7:e5:5f:2f:1b:36:c7:
                    fb:99:a1:e3:8a:65:5d:8b:a4:c7:6a:5d:8c:a5:f5:
                    9a:79:c8:18:25:53:63:42:ee:6d:ca:a4:ce:33:d4:
                    bc:a8:33:97:b8:23:5f:fa:85:c1:78:07:b3:0b:e3:
                    c5:c8:a2:9e:f5:f4:02:4f:08:02:f1:35:9f:37:df:
                    f9:9b:31:f9:d9:53:5b:03:93:8c:07:2f:09:19:5a:
                    76:09:d6:05:b1:56:09:b8:54:8e:08:d8:22:24:29:
                    ac:a9:61:3e:51:e6:89:fd:e8:fa:bb:22:fd:59:99:
                    fa:d3:c3:7d:84:40:dc:78:19:3d:b7:05:2d:64:be:
                    54:06:ac:da:79:30:0b:fb:8a:c1:2e:be:e6:65:fd:
                    5a:fe:f4:0d:5a:19:f0:e4:6b:a0:aa:f5:d1:ef:f6:
                    f5:84:a4:a9:bd:40:39:90:e3:15:ba:d3:e2:4f:7c:
                    32:88:e2:70:59:cc:f5:8f:12:62:25:ce:85:73:63:
                    e7:b0:c8:f7:75:f9:f1:42:49:59:71:dc:84:88:ad:
                    ad:43:68:17:7b:3f:57:46:76:53:4b:72:84:20:bf:
                    e1:a8:08:47:0c:89:cf:b6:60:3c:f7:2b:72:d0:be:
                    13:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:3B:05:9C:2B:E1:A8:35:0D:DD:66:EC:74:6E:C7:94:EE:F7:BD:CB
            X509v3 Authority Key Identifier:
                keyid:0C:EE:0D:96:77:3D:5D:DA:D4:67:9E:0E:83:9A:8D:C1:26:69:E2:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:5d:b5:d3:0e:dc:6a:b8:63:76:25:21:9b:6e:9a:59:b2:a5:
         2d:5e:41:4d:5a:b8:67:d0:5c:1c:ca:06:31:d6:ab:40:63:38:
         24:14:33:21:1b:74:fb:eb:45:4f:e5:c5:aa:8f:98:f9:94:dd:
         14:e3:ef:6f:14:db:fc:f7:01:33:a0:f1:55:5a:f1:8a:d6:e3:
         6d:aa:3f:ce:fe:ca:2c:7a:f3:de:1a:20:9e:e8:8e:27:bb:63:
         82:d2:88:bf:f2:ef:38:f3:73:4a:e6:5a:07:30:52:63:1f:75:
         21:20:4c:0f:96:1d:47:e3:61:bd:7c:fc:f9:fc:bb:64:06:78:
         17:ed:1b:de:5c:60:5b:bf:7e:21:ba:13:03:98:fe:dc:89:f3:
         02:35:5e:51:25:34:ab:71:54:1e:1c:c5:be:c6:50:84:6d:6a:
         4b:2d:cb:54:ec:86:c8:9d:01:a7:91:7c:9c:56:b9:ad:00:29:
         2c:f4:d2:32:b4:da:7d:2d:74:12:ce:b0:3d:af:d6:c2:2b:2f:
         61:08:bf:fc:d3:c4:81:1f:81:0c:db:b6:8e:fd:80:81:e9:85:
         3a:51:d6:72:dc:66:a7:52:85:fa:be:96:e4:26:51:7a:3e:53:
         dd:04:66:12:a9:74:a0:56:87:16:70:06:66:7c:4a:25:8b:a0:
         16:e9:b0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:48:13 2026 by rpki-client