Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.mft
File:                     DIVZ0jPb-6-9EDIimYXfPfkTSPw.mft (raw, json)
Hash identifier:          eUaM82D7XUc7VbFYr9HELg8bVvwxToth9HYK9DOT+Eo=
Subject key identifier:   63:23:CB:1C:B4:9A:27:99:24:74:09:2A:2E:B0:AA:0A:20:7D:5A:27
Authority key identifier: 0C:85:59:D2:33:DB:FB:AF:BD:10:32:22:99:85:DF:3D:F9:13:48:FC
Certificate issuer:       /CN=A9147BCF/serialNumber=0C8559D233DBFBAFBD1032229985DF3DF91348FC
Certificate serial:       0112
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DIVZ0jPb-6-9EDIimYXfPfkTSPw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.mft
Manifest number:          010F
Signing time:             Mon 27 Jul 2026 08:02:06 +0000
Manifest this update:     Mon 27 Jul 2026 08:02:05 +0000
Manifest next update:     Mon 03 Aug 2026 08:02:05 +0000
Files and hashes:         1: DIVZ0jPb-6-9EDIimYXfPfkTSPw.crl (hash: FrpzCKCwXnqJ+g8YsnOLDHp0JvSc4/OmnmwM2+YU2rk=)
                          2: A7B64E90EA7311EF83DF9312C4F9AE02.roa (hash: kAGTtiStnHMpbONE8q36czkYvOAd/yxjeZDFDMyjrzg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.crl
                          rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DIVZ0jPb-6-9EDIimYXfPfkTSPw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 08:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 274 (0x112)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147BCF, serialNumber=0C8559D233DBFBAFBD1032229985DF3DF91348FC
        Validity
            Not Before: Jul 27 08:02:05 2026 GMT
            Not After : Aug  3 08:02:05 2026 GMT
        Subject: CN=6a67107e-7240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0a:09:d2:e4:96:ac:8b:00:89:a4:39:86:43:
                    c9:4e:be:1f:42:05:e8:5b:0a:15:b1:65:b7:72:f6:
                    81:bf:0e:db:77:fe:3c:ab:44:2f:dc:b3:e7:f2:fd:
                    5d:43:f0:13:5f:dc:83:73:a2:03:60:41:9d:3a:30:
                    a2:e3:47:c0:a2:cf:13:1c:52:75:23:88:4d:35:49:
                    13:fd:b1:f4:4e:03:ac:01:4a:a7:72:21:0b:18:36:
                    06:68:86:81:ff:a2:a0:ca:b7:bb:bb:d5:ac:c3:fb:
                    0e:df:84:5b:4c:09:4d:00:c8:12:fc:a4:76:e9:d3:
                    62:3c:30:6d:49:a9:2a:9b:96:d6:35:7d:6f:e7:13:
                    45:03:5a:bd:0b:7c:dc:0f:a6:d1:ef:f5:d2:d3:79:
                    c4:08:fc:0d:63:28:05:0c:77:f7:b3:9c:20:3f:06:
                    5c:2c:b4:18:69:34:51:b1:86:3c:87:ee:7b:e7:76:
                    e5:1a:04:f9:99:09:35:c0:10:14:86:06:1e:62:9b:
                    30:83:d1:65:3d:2f:71:4a:63:d9:08:07:87:23:6a:
                    18:c6:28:66:ff:cf:b5:ab:01:58:b3:62:bb:d1:19:
                    a3:9d:ee:a3:36:5c:09:ca:38:7a:d2:49:30:bb:79:
                    12:4d:1b:17:02:1d:5d:c4:22:ed:7e:8b:de:c3:30:
                    10:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:23:CB:1C:B4:9A:27:99:24:74:09:2A:2E:B0:AA:0A:20:7D:5A:27
            X509v3 Authority Key Identifier:
                keyid:0C:85:59:D2:33:DB:FB:AF:BD:10:32:22:99:85:DF:3D:F9:13:48:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DIVZ0jPb-6-9EDIimYXfPfkTSPw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:f9:43:b4:24:36:58:ba:5e:07:cf:7e:bd:1a:d0:49:25:98:
         41:d6:d2:ad:47:b9:33:51:fb:32:bb:e7:38:6a:96:02:c1:27:
         dc:a3:be:8e:ab:01:9c:e6:ec:1d:2c:f0:53:28:47:2b:4c:76:
         9b:a5:eb:8a:4b:6f:2d:2f:9a:e2:1b:8d:d0:40:44:c1:a6:ee:
         2d:94:f0:b4:62:92:54:d1:d8:68:6e:d8:e5:b0:b1:3d:21:0b:
         37:ba:e8:21:77:bc:b6:b3:bc:98:fb:5e:2c:dd:86:87:eb:14:
         6f:5d:34:d1:08:d0:e8:83:ca:69:e1:e4:9f:40:b3:84:b3:13:
         4f:e3:8f:bf:5a:9f:ce:f4:fc:06:50:b6:76:90:b3:86:65:25:
         ca:3b:b0:81:b6:ba:f4:b3:b0:f2:61:d6:27:e7:08:ec:89:21:
         c1:0b:61:50:26:67:7f:b9:fb:f0:a1:bf:ac:00:6a:77:1e:99:
         ee:59:fc:11:c5:64:b2:57:28:35:1a:c5:b4:ec:ab:71:fc:a1:
         fc:cb:01:0a:3f:b1:ee:f6:5d:59:0b:f1:c9:33:11:1b:db:ca:
         0b:b3:b9:63:6d:3e:78:ab:70:51:41:42:05:9b:49:ed:25:d9:
         c9:c4:56:3d:e9:c7:7d:07:a5:43:e6:01:80:48:39:57:f7:9b:
         0f:50:fa:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:05:44 2026 by rpki-client