Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
File:                     dmhXuj98cotoBSWsQfp84qHwCS0.mft (raw, json)
Hash identifier:          nE0UMBZ78BgceFtPZVckYVxoCaM1MiNqMAe8ym6DAbE=
Subject key identifier:   13:6F:93:13:6E:D4:B5:A9:7E:6C:B0:63:66:80:CC:93:77:74:56:AD
Authority key identifier: 76:68:57:BA:3F:7C:72:8B:68:05:25:AC:41:FA:7C:E2:A1:F0:09:2D
Certificate issuer:       /CN=A9148AC0/serialNumber=766857BA3F7C728B680525AC41FA7CE2A1F0092D
Certificate serial:       0245
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
Manifest number:          0232
Signing time:             Mon 27 Jul 2026 04:10:00 +0000
Manifest this update:     Mon 27 Jul 2026 04:09:59 +0000
Manifest next update:     Mon 03 Aug 2026 04:09:59 +0000
Files and hashes:         1: dmhXuj98cotoBSWsQfp84qHwCS0.crl (hash: PiXz96YFuBW5kJ5dWV9Iau/N+2s1ot2RzPQ3B9sXquY=)
                          2: 5D313B1C31DA11EEBE28A546C4F9AE02.roa (hash: 0AY62NK98rk5TGBieSIptVBTxWIVtw7dVGDsaIJvGI8=)
                          3: 5C9259B631DA11EEBE28A546C4F9AE02.roa (hash: mxJVviu3Hptch60PLa/XEKp8ctUzhsRUSvChZ9yr8zw=)
                          4: 47854B9031DB11EEA02CF647C4F9AE02.roa (hash: GGFJyDNXeKU9lT+bTxvAzkG1O7Dgf7yckhosYzf3b1Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.crl
                          rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 04:09:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 581 (0x245)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148AC0, serialNumber=766857BA3F7C728B680525AC41FA7CE2A1F0092D
        Validity
            Not Before: Jul 27 04:09:59 2026 GMT
            Not After : Aug  3 04:09:59 2026 GMT
        Subject: CN=6a66da18-3211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1a:e9:f1:06:5e:9d:48:45:39:57:05:20:66:
                    e8:6a:cb:3d:ee:b7:30:39:b1:5e:66:ab:ce:0a:a0:
                    2a:ed:4b:0b:d2:c8:85:44:d3:e4:13:85:b9:2e:61:
                    b7:21:1b:0f:94:cd:19:b2:3b:76:f0:db:ae:e3:d5:
                    1b:0a:5e:77:be:24:bd:ec:e6:d7:24:d6:ab:9b:dd:
                    bc:7e:94:ee:73:f0:68:76:fc:cb:8c:28:ef:eb:b4:
                    9d:aa:4a:bb:ec:23:cb:7b:5f:28:86:4b:f9:3f:cc:
                    5f:f4:88:fb:00:a1:19:4c:3f:e9:63:c0:a7:bd:40:
                    98:5a:3c:3a:01:83:81:71:b0:c3:a9:78:b2:b6:f9:
                    d2:f0:0b:a6:e6:f4:7e:d5:19:64:ec:d6:3f:e4:50:
                    9f:03:dc:d8:d4:3f:66:2f:8d:a5:d5:8e:4b:95:5e:
                    aa:82:ae:ad:5d:c4:ef:46:6b:6c:c8:c6:d1:84:0a:
                    d5:bc:b2:22:3c:87:07:9f:cc:b3:6a:06:d8:27:41:
                    ae:44:80:d0:94:8c:76:fa:6f:d2:32:be:62:28:58:
                    d5:00:67:e9:b9:5c:1f:f1:c8:fb:fd:5c:bd:77:0e:
                    70:85:cd:7f:18:a3:35:1e:2e:8e:16:37:b6:b2:5d:
                    cb:d2:f0:d9:26:4b:aa:25:0a:f4:dc:d3:b8:e4:08:
                    9b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:6F:93:13:6E:D4:B5:A9:7E:6C:B0:63:66:80:CC:93:77:74:56:AD
            X509v3 Authority Key Identifier:
                keyid:76:68:57:BA:3F:7C:72:8B:68:05:25:AC:41:FA:7C:E2:A1:F0:09:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:98:dc:8e:70:87:4d:9b:01:88:f6:6f:57:5e:99:7e:0f:f5:
         ac:22:d6:2b:e8:6e:42:0e:b8:e2:d4:c2:8f:a5:f7:96:b2:cd:
         d3:79:43:5e:bd:c7:66:49:1c:4d:b5:bb:fe:3c:d0:ac:77:8f:
         71:68:ce:29:87:da:a4:05:48:2f:54:d3:72:0b:8a:91:6b:a8:
         aa:eb:ac:0b:56:ba:8f:a2:87:40:dd:eb:19:97:4a:f9:fb:21:
         58:04:8d:a9:dd:d1:22:0a:2d:64:00:45:da:f2:97:a2:b1:08:
         6e:c2:8f:31:90:4f:8e:af:a6:60:c7:74:9b:b8:00:34:45:96:
         b2:3a:f1:ec:4f:cc:f2:c9:83:f1:27:05:8a:6c:8b:a9:bf:81:
         37:24:2f:0c:aa:04:b9:50:fb:77:a2:4b:f5:c4:fd:54:03:65:
         5d:8a:b4:cb:b2:07:ed:15:0a:ee:d7:1f:9d:88:5b:9a:d4:fe:
         40:9c:3d:3e:32:b8:93:4d:54:61:5e:a5:08:22:80:18:eb:e1:
         87:44:4d:c6:a3:26:00:4a:f9:cc:ea:5d:cf:cb:e4:f7:65:56:
         fa:9d:d0:34:6d:ee:06:c5:62:b1:8f:cf:b4:22:fd:03:17:22:
         3e:f2:28:27:9f:7a:41:26:52:ac:54:c5:08:0e:b1:23:09:ac:
         f2:bc:bf:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:06:15 2026 by rpki-client