Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft
File:                     DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft (raw, json)
Hash identifier:          W6mBAky7+9d0rOfiuKG5ZwYbx/iXhe+r9MZRpg9OLHY=
Subject key identifier:   68:59:DB:3B:D6:B5:50:97:47:95:C4:28:9C:C4:9D:46:5A:C4:D5:DC
Authority key identifier: 0D:8C:1F:11:0B:DB:33:D0:53:B6:56:BB:A0:07:3B:93:0C:64:F3:14
Certificate issuer:       /CN=A917D114/serialNumber=0D8C1F110BDB33D053B656BBA0073B930C64F314
Certificate serial:       98
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYwfEQvbM9BTtla7oAc7kwxk8xQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft
Manifest number:          94
Signing time:             Sat 13 Jun 2026 07:30:50 +0000
Manifest this update:     Sat 13 Jun 2026 07:30:49 +0000
Manifest next update:     Sat 20 Jun 2026 07:30:49 +0000
Files and hashes:         1: DYwfEQvbM9BTtla7oAc7kwxk8xQ.crl (hash: S80KR7UP9+aoUDcbSLUS0TTjl9L97OHeKCgqyE1p1Ko=)
                          2: 77248CD0889111F0810C3E1FC4F9AE02.roa (hash: C+v8DxSw3+udVzZSqwvQqRGQ9Pr2cv6HbsmEoxT6o4g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.crl
                          rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYwfEQvbM9BTtla7oAc7kwxk8xQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 07:30:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 152 (0x98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D114, serialNumber=0D8C1F110BDB33D053B656BBA0073B930C64F314
        Validity
            Not Before: Jun 13 07:30:49 2026 GMT
            Not After : Jun 20 07:30:49 2026 GMT
        Subject: CN=6a2d072a-2e88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:58:71:69:03:75:78:38:0b:1f:a2:8b:40:66:
                    af:4b:52:e7:75:18:7f:27:67:5c:7a:4c:be:00:18:
                    ae:90:67:61:5d:eb:1b:2e:2d:df:2e:a8:98:fb:b5:
                    fb:46:b4:c7:16:76:c8:6f:00:cd:46:88:38:61:ac:
                    7b:37:cb:a6:fd:b7:a5:b1:c9:1c:be:cc:a8:a7:9c:
                    63:bb:cf:ba:8e:12:c2:3e:9f:ff:c0:19:e1:e0:92:
                    ba:d9:9f:da:bc:0b:9d:13:1d:59:69:b5:3b:f2:74:
                    40:4c:84:bf:f5:c8:1a:db:f3:ab:46:d7:f4:2f:8a:
                    95:d6:f8:7b:27:e0:cd:89:d9:61:96:b4:4f:26:16:
                    04:85:bd:01:b3:56:4b:16:8a:03:f1:4b:64:37:01:
                    35:d6:7a:27:77:0f:63:d9:19:20:d2:5c:15:b7:ed:
                    1a:46:a2:16:a6:34:90:be:3e:af:64:8f:3c:1a:8e:
                    83:8f:a0:47:0d:14:02:52:13:34:e0:a9:35:86:12:
                    13:22:97:54:57:32:c2:0b:8c:e8:85:ea:63:6e:e3:
                    17:1f:16:2e:03:4d:44:73:31:a7:73:c7:ee:3d:ae:
                    a8:ce:a3:59:db:e5:d5:41:22:49:2f:c5:52:b5:e3:
                    be:2e:62:68:9d:71:6c:fd:0f:58:7a:31:f3:53:0d:
                    03:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:59:DB:3B:D6:B5:50:97:47:95:C4:28:9C:C4:9D:46:5A:C4:D5:DC
            X509v3 Authority Key Identifier:
                keyid:0D:8C:1F:11:0B:DB:33:D0:53:B6:56:BB:A0:07:3B:93:0C:64:F3:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYwfEQvbM9BTtla7oAc7kwxk8xQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:65:d0:0f:6d:64:ec:0e:b4:c5:fe:5e:10:39:ed:68:6c:58:
         e6:89:a1:e4:b1:ad:15:44:47:97:7f:0c:0a:28:2f:61:a6:04:
         ca:63:78:aa:cb:a0:94:6f:33:0f:25:aa:4b:5a:ca:12:cb:b3:
         3a:77:96:43:3d:95:dc:b9:2e:35:fb:e1:ce:b7:96:44:92:e5:
         2c:a6:23:31:3d:1b:d6:6a:24:97:c0:cb:0b:30:9b:54:f1:f9:
         83:b7:13:ec:12:0d:af:11:c8:be:23:d8:13:7c:3a:b9:41:9a:
         79:90:ef:33:dc:05:8e:d7:55:a6:5f:59:5e:f4:a1:42:d5:3d:
         d1:b9:63:cf:c8:d2:cd:2d:b1:82:cb:1e:b4:68:5d:eb:42:b4:
         61:91:e7:59:71:b4:4c:6c:df:eb:9c:cf:a4:34:4f:98:02:22:
         5b:3b:94:9e:44:c4:15:38:0a:4a:54:64:19:69:58:d0:b3:9e:
         3c:ff:b2:5f:e3:68:c2:a4:a1:bd:ac:95:e0:ef:1f:ff:0e:d9:
         b2:40:ec:1d:ed:e3:83:1e:0b:04:90:50:f3:19:f8:ef:68:16:
         10:42:40:7e:4d:77:aa:01:d7:4a:26:fa:84:98:f7:aa:49:f2:
         cb:dd:ab:91:c1:d0:9c:bd:8e:57:5d:3f:b6:56:dd:a4:1e:5c:
         18:ae:97:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:40:22 2026 by rpki-client