Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B04C/11A2F3DA2C2711F19BAFCA1D9C833773/DSL_1HBKVK6e2tG35aTgNT9F2hc.mft
File:                     DSL_1HBKVK6e2tG35aTgNT9F2hc.mft (raw, json)
Hash identifier:          Qy4PC5JDau6XCQi0bxdHveyp80mBa2ZVijD+eZAvmDU=
Subject key identifier:   75:0A:54:3F:6B:6C:34:57:DF:16:EB:B0:F7:33:35:05:46:CC:3A:41
Authority key identifier: 0D:22:FF:D4:70:4A:54:AE:9E:DA:D1:B7:E5:A4:E0:35:3F:45:DA:17
Certificate issuer:       /CN=A917B04C/serialNumber=0D22FFD4704A54AE9EDAD1B7E5A4E0353F45DA17
Certificate serial:       3F
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DSL_1HBKVK6e2tG35aTgNT9F2hc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B04C/11A2F3DA2C2711F19BAFCA1D9C833773/DSL_1HBKVK6e2tG35aTgNT9F2hc.mft
Manifest number:          3E
Signing time:             Mon 27 Jul 2026 10:51:47 +0000
Manifest this update:     Mon 27 Jul 2026 10:51:46 +0000
Manifest next update:     Mon 03 Aug 2026 10:51:46 +0000
Files and hashes:         1: DSL_1HBKVK6e2tG35aTgNT9F2hc.crl (hash: Bu2TnV85doYM3eQHgtSyaQjmX36iDqY4t6NKeMnAXbc=)
                          2: 984616082C2A11F1B015EE939D833773.roa (hash: oF4VI5NZfC+UNgW9AHSKJ6DEAMeK3Nd3QJRoxE5Ngzs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B04C/11A2F3DA2C2711F19BAFCA1D9C833773/DSL_1HBKVK6e2tG35aTgNT9F2hc.crl
                          rsync://rpki.apnic.net/member_repository/A917B04C/11A2F3DA2C2711F19BAFCA1D9C833773/DSL_1HBKVK6e2tG35aTgNT9F2hc.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DSL_1HBKVK6e2tG35aTgNT9F2hc.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 10:51:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B04C, serialNumber=0D22FFD4704A54AE9EDAD1B7E5A4E0353F45DA17
        Validity
            Not Before: Jul 27 10:51:46 2026 GMT
            Not After : Aug  3 10:51:46 2026 GMT
        Subject: CN=6a673843-fb68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2b:e8:46:a1:e3:90:38:80:bf:1e:e4:01:d6:
                    75:6c:6b:21:db:8a:e9:9c:56:7c:50:a6:91:2d:4d:
                    e2:19:07:ef:73:14:af:96:15:71:01:21:d2:6b:89:
                    64:c0:02:37:10:c4:a0:a3:77:d8:87:77:1d:f5:70:
                    7f:2a:eb:18:ae:5e:eb:b3:b6:5b:c1:ae:79:be:d6:
                    23:29:c8:50:e7:4e:0c:8b:7e:86:0b:a4:62:e8:4b:
                    71:b2:8a:5b:9f:a0:b3:2a:f3:b5:51:9f:1c:db:b7:
                    0e:a0:66:9b:2e:de:0f:9b:fe:8c:15:c7:38:89:7c:
                    a3:ea:78:94:47:75:a5:3b:cd:9d:f9:1b:8c:30:58:
                    84:af:ac:cb:9e:af:3c:08:f9:9e:b1:54:2c:ff:5a:
                    fb:e7:b1:99:4b:81:89:55:f6:b2:da:e7:80:03:af:
                    0c:2d:3c:c7:20:ac:d7:2f:84:8a:83:50:56:8f:95:
                    ca:c4:2c:3b:cc:2a:fe:0b:f2:aa:88:17:c5:76:4b:
                    4e:46:65:a0:34:29:03:8d:e7:44:04:65:6c:c8:1a:
                    d1:2d:4d:4c:43:65:06:6e:fe:5e:9c:7a:50:1d:90:
                    30:1e:14:51:02:2e:ee:ac:db:32:71:0a:86:d5:74:
                    5e:bf:aa:53:c3:b8:5b:fe:ae:5f:fc:30:c7:e2:85:
                    53:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:0A:54:3F:6B:6C:34:57:DF:16:EB:B0:F7:33:35:05:46:CC:3A:41
            X509v3 Authority Key Identifier:
                keyid:0D:22:FF:D4:70:4A:54:AE:9E:DA:D1:B7:E5:A4:E0:35:3F:45:DA:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B04C/11A2F3DA2C2711F19BAFCA1D9C833773/DSL_1HBKVK6e2tG35aTgNT9F2hc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DSL_1HBKVK6e2tG35aTgNT9F2hc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B04C/11A2F3DA2C2711F19BAFCA1D9C833773/DSL_1HBKVK6e2tG35aTgNT9F2hc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:cc:06:8a:68:3b:0f:eb:79:45:cb:73:89:0f:e8:78:8a:80:
         49:04:1b:b5:a4:45:60:97:9a:17:8c:46:75:d3:f1:91:79:99:
         64:5a:60:83:5c:22:72:50:51:7d:a8:97:3a:55:7a:47:4d:e9:
         63:2f:29:78:2c:4d:32:1b:6b:58:ed:9d:a5:f8:be:8e:8e:e5:
         be:6f:f1:c1:34:ca:4f:eb:ee:8e:bc:30:54:b9:a0:8b:2f:5a:
         a3:c6:27:d1:61:13:d6:f1:ef:ba:9b:33:54:8d:0a:b1:2d:9f:
         60:b7:60:a5:07:4d:dc:23:ae:e1:44:f6:a5:c6:3d:90:b4:7c:
         2d:3f:65:41:ce:da:83:e2:6d:e9:bc:eb:3b:60:24:af:47:89:
         58:85:cc:f8:a3:e2:11:1c:b5:ea:22:a8:cb:a0:b4:b2:6c:87:
         c5:99:84:54:00:e3:13:45:af:b0:bc:b4:39:aa:8e:eb:8a:a1:
         7f:17:d9:10:db:36:cd:03:46:97:bb:5f:fe:fa:be:09:05:81:
         ce:8e:0b:14:7b:77:c7:bf:50:6f:d2:3d:fb:d1:cc:bc:f9:35:
         9d:fd:ac:9d:3e:74:e3:c0:ca:e4:24:e8:6e:64:1b:43:9e:c2:
         c7:74:f5:62:21:09:29:d0:18:0f:16:78:e1:ff:76:fd:e2:25:
         a4:32:d5:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:59:43 2026 by rpki-client