Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B25C/6FF20A4A24D711F1881BD2D0AB833773/dPMMxhn9EiAXhJY93VgdB3Lzjhk.mft
File:                     dPMMxhn9EiAXhJY93VgdB3Lzjhk.mft (raw, json)
Hash identifier:          MHJ6+GBC9G42Xh/OnK+rfJBzZQbyCGd3PVcmZJT5hE4=
Subject key identifier:   41:ED:A6:3C:8F:5B:B1:FE:74:82:88:4C:4D:6F:16:88:2F:F3:76:5D
Authority key identifier: 74:F3:0C:C6:19:FD:12:20:17:84:96:3D:DD:58:1D:07:72:F3:8E:19
Certificate issuer:       /CN=A913B25C/serialNumber=74F30CC619FD12201784963DDD581D0772F38E19
Certificate serial:       42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dPMMxhn9EiAXhJY93VgdB3Lzjhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B25C/6FF20A4A24D711F1881BD2D0AB833773/dPMMxhn9EiAXhJY93VgdB3Lzjhk.mft
Manifest number:          42
Signing time:             Mon 27 Jul 2026 10:48:09 +0000
Manifest this update:     Mon 27 Jul 2026 10:48:08 +0000
Manifest next update:     Mon 03 Aug 2026 10:48:08 +0000
Files and hashes:         1: dPMMxhn9EiAXhJY93VgdB3Lzjhk.crl (hash: TleRI9/TNv2GNrFu5PUBqZJplwxqUjfKzUmENoAUfeA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B25C/6FF20A4A24D711F1881BD2D0AB833773/dPMMxhn9EiAXhJY93VgdB3Lzjhk.crl
                          rsync://rpki.apnic.net/member_repository/A913B25C/6FF20A4A24D711F1881BD2D0AB833773/dPMMxhn9EiAXhJY93VgdB3Lzjhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dPMMxhn9EiAXhJY93VgdB3Lzjhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 10:48:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B25C, serialNumber=74F30CC619FD12201784963DDD581D0772F38E19
        Validity
            Not Before: Jul 27 10:48:08 2026 GMT
            Not After : Aug  3 10:48:08 2026 GMT
        Subject: CN=6a673768-506f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:58:92:a4:ab:66:7b:33:a2:07:0c:f3:68:b2:
                    15:d5:d1:c4:b9:2b:68:15:3d:46:54:c8:9b:df:14:
                    10:41:47:56:2c:df:7e:d0:3b:1d:35:a4:ba:db:1c:
                    fd:30:68:a4:54:a2:2a:ff:49:ad:6f:8b:bb:af:72:
                    ff:ee:e8:f4:9b:c0:5a:5b:3a:7e:fe:d9:c0:9d:95:
                    98:c1:55:8c:1a:18:83:19:46:c4:bd:ec:65:fc:80:
                    78:9c:15:29:2c:55:fa:70:50:06:28:b8:1a:b7:b5:
                    1a:63:a8:3d:a5:14:58:09:66:48:46:ea:37:3f:54:
                    8d:01:6c:f7:c1:51:6b:9b:4a:e0:02:ae:b1:46:93:
                    f1:0b:14:ba:f9:2a:b2:2a:47:de:0e:b1:5d:d9:ac:
                    b7:71:96:c8:2d:fa:19:b9:b1:5d:06:dd:c4:04:ce:
                    12:3f:40:08:c6:74:a7:31:6d:5d:d5:54:96:d4:00:
                    9a:73:2c:f0:4f:06:11:dd:88:76:e2:cf:67:4c:ad:
                    7a:c8:9f:26:2b:2c:e9:fb:7f:62:82:32:fc:f1:06:
                    a7:94:1c:90:fc:b7:0a:26:62:c7:2c:6a:06:35:b4:
                    1a:4e:3b:a1:8b:c9:c4:41:99:2b:5d:4f:8e:b3:33:
                    15:5e:e7:b2:a9:c0:f8:6f:c3:7d:c4:8f:d9:62:77:
                    41:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:ED:A6:3C:8F:5B:B1:FE:74:82:88:4C:4D:6F:16:88:2F:F3:76:5D
            X509v3 Authority Key Identifier:
                keyid:74:F3:0C:C6:19:FD:12:20:17:84:96:3D:DD:58:1D:07:72:F3:8E:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B25C/6FF20A4A24D711F1881BD2D0AB833773/dPMMxhn9EiAXhJY93VgdB3Lzjhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dPMMxhn9EiAXhJY93VgdB3Lzjhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B25C/6FF20A4A24D711F1881BD2D0AB833773/dPMMxhn9EiAXhJY93VgdB3Lzjhk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:aa:39:d8:30:91:2a:c0:04:d6:61:69:a9:29:56:56:9e:cd:
         9c:c7:77:95:af:d1:28:10:18:18:0b:d2:56:01:61:ec:44:4c:
         cd:a6:d6:59:2b:b0:f6:e9:7c:cc:3e:85:81:1a:52:ea:b9:34:
         a6:77:9a:e0:f5:50:96:b4:ae:39:fd:60:b0:aa:35:1d:30:96:
         2a:18:11:9e:a4:b4:41:50:0b:1f:c6:b8:90:cf:e4:d4:09:9d:
         a0:d2:36:c9:46:d3:34:28:19:e1:73:54:63:6b:62:2f:ea:fa:
         04:6f:1c:3a:0d:71:62:d7:79:4e:9f:b3:9f:49:3c:d1:be:b5:
         0f:86:a3:f1:31:09:ec:58:58:96:9e:07:76:53:64:79:d9:cd:
         d0:9c:fb:7f:61:16:28:b4:69:bf:ab:88:4d:09:95:da:71:d0:
         4d:a8:e4:ab:d7:62:74:9e:12:ff:99:fc:05:dd:32:c3:ca:36:
         3b:07:af:4f:d7:5e:ae:f6:d8:5c:65:20:76:1c:34:d2:43:b2:
         f3:8a:d0:bc:ff:ec:02:4a:93:11:60:8b:ac:3f:69:8c:ae:ed:
         5a:8c:c1:96:d4:dc:7e:45:f7:d2:76:d3:a0:98:83:41:a2:8d:
         03:11:5c:ea:fb:8e:7e:fa:ad:e5:dc:76:94:b7:ec:31:15:52:
         2f:03:f6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:45:22 2026 by rpki-client