Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/DGhYIowwF0gr3H85geiYuVbaoCk.mft
File:                     DGhYIowwF0gr3H85geiYuVbaoCk.mft (raw, json)
Hash identifier:          00e88CsnMre2NiPCZaZs62pTe/HrrIerDYy9iYRbCCM=
Subject key identifier:   C2:F9:92:CD:C6:4D:AD:9C:4C:CA:74:39:4E:1E:5B:15:50:D9:C0:9B
Authority key identifier: 0C:68:58:22:8C:30:17:48:2B:DC:7F:39:81:E8:98:B9:56:DA:A0:29
Certificate issuer:       /CN=A9170975/serialNumber=0C6858228C3017482BDC7F3981E898B956DAA029
Certificate serial:       CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGhYIowwF0gr3H85geiYuVbaoCk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/DGhYIowwF0gr3H85geiYuVbaoCk.mft
Manifest number:          C8
Signing time:             Sat 13 Jun 2026 06:57:28 +0000
Manifest this update:     Sat 13 Jun 2026 06:57:28 +0000
Manifest next update:     Sat 20 Jun 2026 06:57:28 +0000
Files and hashes:         1: DGhYIowwF0gr3H85geiYuVbaoCk.crl (hash: Ia2TXh20Mpm2P4XDMyLcQwl/cMp/jKe40fzYVJ6bmG4=)
                          2: B12A39803A2A11F09E37DB48C4F9AE02.roa (hash: CoN2ChPQA1qn/Xvwh+q1CXaNL7awqOvoz+KnawFyjQE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/DGhYIowwF0gr3H85geiYuVbaoCk.crl
                          rsync://rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/DGhYIowwF0gr3H85geiYuVbaoCk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGhYIowwF0gr3H85geiYuVbaoCk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 06:57:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 204 (0xcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170975, serialNumber=0C6858228C3017482BDC7F3981E898B956DAA029
        Validity
            Not Before: Jun 13 06:57:28 2026 GMT
            Not After : Jun 20 06:57:28 2026 GMT
        Subject: CN=6a2cff58-c719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:31:36:c7:1a:1c:01:4c:54:cf:ba:5b:a5:01:
                    08:f5:78:5c:dc:04:82:7f:58:82:66:15:d3:32:6f:
                    0b:73:b2:ae:23:79:11:2f:d2:6f:b6:7d:e7:19:34:
                    17:a5:71:d6:63:67:ad:b5:d9:9b:af:ba:e9:27:7a:
                    c9:67:55:d1:97:90:2d:19:7b:41:86:ac:b2:92:ee:
                    e6:4d:7f:c8:03:15:e2:c7:23:2b:79:ac:b2:94:86:
                    92:dd:63:a7:14:17:7f:90:c8:57:74:db:cf:26:29:
                    d1:f0:73:2c:02:35:a0:32:8a:87:4e:0e:e0:4a:83:
                    7c:72:c6:ba:62:10:8f:05:ab:d7:6e:9d:50:fc:a1:
                    92:9d:86:4c:df:be:15:a9:5b:75:09:11:5f:4c:5b:
                    bc:57:88:87:57:c8:33:05:65:87:45:f9:36:37:e4:
                    95:3d:64:a2:f8:a6:af:57:05:8e:6a:20:57:ee:88:
                    52:f8:a7:37:15:7e:14:a1:27:37:8a:56:77:78:46:
                    f7:fa:61:cf:81:c1:b0:c2:3f:ed:a6:9d:64:29:76:
                    00:32:01:9f:40:18:0f:7e:cd:59:f1:1d:79:5f:8a:
                    83:26:0b:84:b8:5f:e0:86:6a:e4:b5:ed:ab:a9:d4:
                    d1:d2:1a:1a:c0:bc:05:4e:a5:2b:71:ef:02:be:2b:
                    af:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F9:92:CD:C6:4D:AD:9C:4C:CA:74:39:4E:1E:5B:15:50:D9:C0:9B
            X509v3 Authority Key Identifier:
                keyid:0C:68:58:22:8C:30:17:48:2B:DC:7F:39:81:E8:98:B9:56:DA:A0:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/DGhYIowwF0gr3H85geiYuVbaoCk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGhYIowwF0gr3H85geiYuVbaoCk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/DGhYIowwF0gr3H85geiYuVbaoCk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:4a:6d:b5:bc:c2:71:93:52:30:92:80:61:46:5d:4f:89:a0:
         44:ee:e9:a1:3f:e8:da:3b:f8:fb:6d:a9:63:19:10:df:70:79:
         40:2d:c3:fa:93:86:c9:63:c6:34:ba:b6:6d:4e:30:16:f1:ea:
         f5:4c:9e:df:f0:b9:7c:fb:e9:1b:c8:03:8e:0c:72:78:56:3b:
         0d:95:75:fe:62:db:44:52:fa:88:4c:5d:19:b8:fb:92:b8:ba:
         d0:7e:94:1c:01:1a:8a:e1:08:df:55:2a:61:0d:36:01:f1:6b:
         58:34:ad:50:41:1a:ff:a8:2d:22:73:ed:ce:d6:00:0d:57:88:
         8f:84:6d:0b:37:50:a9:6d:18:55:6a:8c:2c:1f:a1:81:f5:db:
         8c:bf:17:d7:23:c4:fe:ac:b7:cf:a2:55:37:f1:75:28:a4:4d:
         8c:90:0f:77:2f:6f:ce:3c:f9:f6:9c:86:cc:64:22:b9:51:e8:
         a0:db:14:b4:4e:51:48:f8:a2:e6:87:65:a7:fc:a9:b9:2a:bb:
         61:e3:9f:63:6d:0e:ac:7a:b3:8f:4f:95:4d:af:20:7f:0c:fb:
         08:90:41:b1:53:f5:5a:a4:bf:bc:99:65:75:94:ef:2d:f9:fc:
         a2:1b:d1:bf:d3:7f:9b:00:6a:f2:e7:98:75:e9:92:23:5c:23:
         60:43:12:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:22:14 2026 by rpki-client