Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.mft
File:                     DGlwyrnfjpvRDhw-kYkaCafojCA.mft (raw, json)
Hash identifier:          NLPQneLHmT93XPNtf2mz7SAUalSJSy57eeZPskoAi8I=
Subject key identifier:   C3:4B:10:07:DD:EE:C0:56:CB:5A:84:60:81:7D:E8:5F:CE:8D:1B:13
Authority key identifier: 0C:69:70:CA:B9:DF:8E:9B:D1:0E:1C:3E:91:89:1A:09:A7:E8:8C:20
Certificate issuer:       /CN=A9179672/serialNumber=0C6970CAB9DF8E9BD10E1C3E91891A09A7E88C20
Certificate serial:       0130
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGlwyrnfjpvRDhw-kYkaCafojCA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.mft
Manifest number:          0128
Signing time:             Wed 29 Jul 2026 06:05:55 +0000
Manifest this update:     Wed 29 Jul 2026 06:05:54 +0000
Manifest next update:     Wed 05 Aug 2026 06:05:54 +0000
Files and hashes:         1: DGlwyrnfjpvRDhw-kYkaCafojCA.crl (hash: YXGjCj8rq3R6Ij0e7lo3TYpNK4W+YI6IMNfTZSV9wqE=)
                          2: D1C1AFB2135511F0976BA50CC4F9AE02.roa (hash: cXnna13A37da56cbsTCo0fbmD5n4hI69trG/+73mamk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.crl
                          rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGlwyrnfjpvRDhw-kYkaCafojCA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 06:05:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 304 (0x130)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179672, serialNumber=0C6970CAB9DF8E9BD10E1C3E91891A09A7E88C20
        Validity
            Not Before: Jul 29 06:05:54 2026 GMT
            Not After : Aug  5 06:05:54 2026 GMT
        Subject: CN=6a699842-c321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d7:4a:19:0e:c3:83:83:0a:37:f3:1a:48:6f:
                    f3:8b:6d:7b:64:57:83:31:31:b5:9a:72:31:d4:a8:
                    be:26:74:e2:45:86:a7:d3:14:b4:a5:b2:52:8e:64:
                    e5:91:56:64:61:2d:a4:7b:52:ad:db:06:f4:9e:dd:
                    f9:70:c6:87:09:e8:42:82:14:1c:13:47:16:f3:06:
                    e7:52:74:0c:58:d7:b3:4b:63:e8:3f:33:99:10:65:
                    3d:10:c0:7d:74:a2:34:69:d8:5d:49:a4:67:93:46:
                    04:86:c0:ab:70:54:f7:9f:14:04:31:04:1a:d4:69:
                    fa:f7:88:22:09:f1:ab:f3:8c:f1:c0:a4:76:38:55:
                    5e:3f:fb:97:f6:df:e2:97:cd:14:66:4b:ec:87:00:
                    72:43:d7:b9:4c:b6:bb:22:80:a2:83:0d:86:70:52:
                    b1:a8:35:04:58:13:06:ed:6b:20:18:40:da:16:5a:
                    cf:19:80:98:f6:b5:12:ed:cf:03:18:c8:ac:34:7e:
                    b2:e4:34:6d:6c:84:a5:2d:4a:88:14:2b:34:a7:01:
                    93:2f:85:cf:e6:67:ba:7d:82:ff:3b:d7:5b:78:79:
                    76:0b:5e:9d:6a:ed:60:15:c9:d6:94:2b:9f:59:41:
                    04:50:54:bd:09:12:80:ba:b3:c3:79:2b:b1:43:51:
                    44:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:4B:10:07:DD:EE:C0:56:CB:5A:84:60:81:7D:E8:5F:CE:8D:1B:13
            X509v3 Authority Key Identifier:
                keyid:0C:69:70:CA:B9:DF:8E:9B:D1:0E:1C:3E:91:89:1A:09:A7:E8:8C:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGlwyrnfjpvRDhw-kYkaCafojCA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:3a:39:ca:ad:8d:af:f2:62:3e:18:4d:f8:a7:da:8d:4c:bb:
         6d:ef:cb:52:6c:4c:ae:a5:21:fa:86:1e:1c:2a:3e:b1:fd:69:
         33:11:c2:af:b4:1d:83:34:70:19:e1:08:43:9b:2f:10:95:c7:
         e4:8d:37:7e:5e:fe:e4:91:91:cb:10:53:b5:fb:e2:d8:c4:20:
         4f:26:15:8d:53:d6:1d:1a:a1:c6:73:14:c1:09:d1:0a:3a:93:
         37:4c:e6:bb:cf:27:ad:17:98:5f:ca:f2:f7:19:ad:81:c7:ad:
         26:50:fb:e9:5d:54:38:15:4a:27:e9:b0:0f:dc:7b:52:4d:68:
         16:40:4d:9d:56:0e:00:3d:1f:8a:6f:4a:d6:69:88:42:35:ba:
         99:4f:48:20:9b:48:21:22:a1:ef:8c:23:52:8d:ac:f4:4d:98:
         b6:42:c6:3e:64:f9:75:41:5d:19:fa:8f:81:cd:f4:56:2e:a2:
         bb:5d:d9:a7:be:09:28:0f:f8:b2:bc:a5:fe:d4:3e:41:5b:b1:
         a7:87:b1:24:ce:47:3a:82:dc:ba:7b:b3:43:34:27:66:20:60:
         2a:4f:ce:f5:4a:6f:a9:2e:f2:5a:00:be:61:11:a6:6f:fd:00:
         79:60:22:1e:65:6f:dc:d9:d3:83:16:e0:c7:50:9e:af:24:2e:
         e9:a8:91:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:31:28 2026 by rpki-client