Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft
File:                     DYxttID--Lv1xosdQ5bdhfWTwUY.mft (raw, json)
Hash identifier:          DHr8xQU6AsT15fuPLytVX0ERlWn9I24KiRarHFlcezw=
Subject key identifier:   79:40:F2:B1:E9:D6:85:29:DD:0F:3A:76:F4:9D:E0:76:07:F2:BA:D9
Authority key identifier: 0D:8C:6D:B4:80:FE:F8:BB:F5:C6:8B:1D:43:96:DD:85:F5:93:C1:46
Certificate issuer:       /CN=A9150A44/serialNumber=0D8C6DB480FEF8BBF5C68B1D4396DD85F593C146
Certificate serial:       122C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYxttID--Lv1xosdQ5bdhfWTwUY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft
Manifest number:          121F
Signing time:             Tue 28 Jul 2026 17:13:56 +0000
Manifest this update:     Tue 28 Jul 2026 17:13:56 +0000
Manifest next update:     Tue 04 Aug 2026 17:13:56 +0000
Files and hashes:         1: DYxttID--Lv1xosdQ5bdhfWTwUY.crl (hash: uyaWXtwdsP+b0v7yK+AqQAvYUPFa5/elgb4GbjlUVMw=)
                          2: 9F3D07940A3D11E9A4A5D873C4F9AE02.roa (hash: CBq8LWgrgXC9mO0SUvr0TrX8pn6h91JP7Wdayc/HFqk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.crl
                          rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYxttID--Lv1xosdQ5bdhfWTwUY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 17:13:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4652 (0x122c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150A44, serialNumber=0D8C6DB480FEF8BBF5C68B1D4396DD85F593C146
        Validity
            Not Before: Jul 28 17:13:56 2026 GMT
            Not After : Aug  4 17:13:56 2026 GMT
        Subject: CN=6a68e354-bb78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c4:90:82:ea:82:ea:52:16:ef:bb:04:d4:2b:
                    44:06:e7:63:e7:18:6b:52:8c:bc:ef:de:d5:0b:a1:
                    47:2a:e4:e5:8a:12:55:04:69:2c:55:a0:d4:6f:78:
                    40:02:1f:c1:2d:2d:72:2e:7d:2d:56:38:b7:2f:6d:
                    53:cc:a1:8c:d7:e1:9e:81:bd:58:02:c7:a8:a7:40:
                    45:23:23:9d:ba:26:e5:d2:51:be:57:3a:a6:8f:3f:
                    b6:33:86:6f:30:35:94:83:ae:bf:ef:02:b0:67:1f:
                    d2:44:1a:c9:83:32:d3:b4:d7:22:a8:d7:40:13:b8:
                    d1:32:bc:99:cc:1d:95:8f:47:e7:1f:a5:db:49:82:
                    e5:9b:0a:36:04:18:b9:61:93:d5:19:8a:cb:58:ef:
                    f2:2e:b8:5c:79:86:51:97:b0:10:a0:b4:d2:60:cf:
                    7f:7b:ac:7a:2e:af:cc:b1:72:ff:cf:86:4d:a9:3c:
                    c5:05:ff:1e:8a:ad:ec:fd:af:7e:0b:b5:59:d0:fe:
                    5f:a6:08:8f:d5:00:24:3d:7b:b2:b3:9a:79:3e:18:
                    5d:80:5c:58:9d:1d:d9:81:4b:4c:0c:4b:36:b8:00:
                    12:d4:b4:6e:60:27:50:99:57:b4:1a:be:70:86:b7:
                    82:e8:ac:6f:db:ab:ae:b7:39:c1:a7:3e:ab:03:a0:
                    0e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:40:F2:B1:E9:D6:85:29:DD:0F:3A:76:F4:9D:E0:76:07:F2:BA:D9
            X509v3 Authority Key Identifier:
                keyid:0D:8C:6D:B4:80:FE:F8:BB:F5:C6:8B:1D:43:96:DD:85:F5:93:C1:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYxttID--Lv1xosdQ5bdhfWTwUY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:c6:97:12:4c:35:c1:aa:49:58:6e:e2:4f:fc:ee:c2:57:48:
         ed:b3:1a:a8:97:9f:90:b0:16:ef:f6:d4:01:00:63:fa:f7:0a:
         8f:c3:6f:fe:43:34:7b:52:d1:9a:18:87:e8:10:ca:2b:03:36:
         70:ef:dd:78:7c:8a:fd:f4:25:21:05:aa:7d:2c:6c:cc:fe:24:
         d5:20:e0:0d:61:4c:aa:ef:3d:58:cd:db:e7:4f:8c:c8:f6:d8:
         a2:f7:99:db:07:13:b0:b4:e1:65:02:6d:e5:a7:b1:40:65:61:
         dd:c9:5b:9d:ec:e3:e8:93:81:75:ce:d9:01:bd:2f:47:e2:2f:
         59:43:97:b3:d0:7a:4f:e1:2b:09:16:ff:8c:db:1b:5a:a1:91:
         2e:dd:ca:27:73:07:67:bf:99:b3:05:1e:d3:67:34:c8:d5:26:
         84:4c:6b:d4:c8:83:74:4c:28:2a:c4:08:a0:b6:a3:9b:0a:16:
         e5:76:2c:4c:a7:6e:cb:27:71:b9:0f:a7:a7:68:02:79:47:46:
         0f:cc:2f:38:50:55:87:19:93:61:59:62:a3:70:8e:a7:0a:59:
         10:45:3c:55:4a:97:a9:cf:90:af:36:55:bd:c6:15:db:1b:1a:
         3f:05:7b:9b:fc:36:39:e6:2b:34:99:f5:d6:5f:0a:4c:b1:15:
         21:af:04:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:11:46 2026 by rpki-client