Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft
File:                     dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft (raw, json)
Hash identifier:          zWF8aHffXf5v34LL8AKBP9hE4krj+z6vNLkEaPRk0Ow=
Subject key identifier:   06:69:ED:9F:5F:FB:50:3E:90:BC:98:1A:97:37:46:E2:C3:95:C6:B7
Authority key identifier: 76:52:A2:2F:C2:50:FA:AA:E3:AB:2C:0C:2A:FD:D0:4E:30:47:E5:07
Certificate issuer:       /CN=A917ADD1/serialNumber=7652A22FC250FAAAE3AB2C0C2AFDD04E3047E507
Certificate serial:       0232
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft
Manifest number:          022C
Signing time:             Mon 27 Jul 2026 04:13:06 +0000
Manifest this update:     Mon 27 Jul 2026 04:13:05 +0000
Manifest next update:     Mon 03 Aug 2026 04:13:05 +0000
Files and hashes:         1: dlKiL8JQ-qrjqywMKv3QTjBH5Qc.crl (hash: 5unhpDM+n4HycQAcOhqXnpGLIdoWsJWC2BFPD7bGNwU=)
                          2: 8D0C1E0E37EF11EE82AF270BC4F9AE02.roa (hash: txUGRxDyqzvCkcHCojyp0uZqvLDabS3/HKOkSFV3MOY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.crl
                          rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 04:13:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 562 (0x232)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ADD1, serialNumber=7652A22FC250FAAAE3AB2C0C2AFDD04E3047E507
        Validity
            Not Before: Jul 27 04:13:05 2026 GMT
            Not After : Aug  3 04:13:05 2026 GMT
        Subject: CN=6a66dad2-fa7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ea:da:c7:7b:7c:a5:67:4b:ea:9b:47:ec:6d:
                    75:f6:2e:1e:c1:b1:b9:51:ba:fe:80:e4:38:28:9f:
                    4a:b2:a7:e9:90:14:fe:8d:47:04:28:9d:2b:ae:96:
                    fb:f8:e4:27:b8:e6:f1:9f:99:5c:b2:96:25:41:07:
                    e5:a6:4a:1e:88:7c:2d:c1:0c:8b:27:57:1d:86:c1:
                    98:0b:c6:fd:57:70:f6:52:8f:ae:4c:bb:78:f6:98:
                    f8:54:30:f6:40:d5:97:bb:26:29:96:29:9b:c9:5d:
                    3f:c0:89:5e:5b:7a:19:73:bd:54:67:62:44:a0:96:
                    39:7b:3f:92:27:6e:d3:b6:09:36:b8:5c:3b:77:50:
                    86:f4:ed:25:27:39:3f:91:df:7a:5d:25:59:03:65:
                    41:bd:bb:b8:4f:2d:d2:3b:3a:32:d8:96:a7:66:a9:
                    1a:fb:da:f1:3a:93:f1:3a:85:29:e5:21:6e:c6:2c:
                    db:ff:46:6e:8b:2d:8d:cd:63:1e:9c:76:4f:02:46:
                    62:5e:92:f2:f0:6a:97:40:6b:3e:ae:4e:eb:7b:52:
                    f7:bc:18:30:29:4b:d3:e6:20:2a:4d:ec:74:e9:1c:
                    fe:d4:4f:98:b9:12:85:bb:8d:01:f6:c6:5a:a9:61:
                    16:62:94:f8:76:3e:86:05:ae:18:96:e8:1c:bd:7a:
                    bd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:69:ED:9F:5F:FB:50:3E:90:BC:98:1A:97:37:46:E2:C3:95:C6:B7
            X509v3 Authority Key Identifier:
                keyid:76:52:A2:2F:C2:50:FA:AA:E3:AB:2C:0C:2A:FD:D0:4E:30:47:E5:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:25:45:41:d6:56:ab:6c:e9:c7:b5:a6:5d:f7:47:2d:c0:d7:
         30:9e:4c:54:c0:77:d6:58:5b:62:d4:93:97:3d:da:cc:6d:1c:
         07:6c:14:ae:51:b7:b5:87:9e:09:c2:8d:1d:50:c2:44:ed:99:
         4e:62:31:17:96:70:c6:0a:d9:c6:f0:ab:60:f0:e5:78:73:29:
         ec:ae:fa:a5:59:44:23:71:78:19:2c:b3:fc:b7:a8:9a:c3:bf:
         b7:52:c2:2e:3f:f9:0a:83:25:32:3b:20:11:68:47:be:20:d3:
         a2:7f:8a:f7:3e:ca:50:09:f3:9d:c3:80:0f:5f:72:55:9c:60:
         1f:ad:2b:88:dc:c2:31:f4:72:76:5b:13:5e:81:78:94:24:95:
         f0:b9:52:61:fd:a3:87:67:55:37:a2:8f:45:ef:e0:b9:b7:0f:
         56:21:8f:76:6b:87:59:73:7d:40:ec:2e:e5:60:77:9f:5c:e7:
         ac:8a:04:0f:35:07:0c:21:28:75:a3:ce:18:db:28:7c:d7:81:
         59:3f:38:74:bc:db:c1:ad:ad:bd:90:5d:a2:85:05:29:4c:83:
         81:7a:41:ac:a6:f2:94:77:88:69:64:8b:c1:f1:31:8a:16:90:
         64:a0:26:c1:a1:b4:1e:e0:0a:b3:6c:09:98:7c:d8:04:36:39:
         e3:38:2d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:41:51 2026 by rpki-client