Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft
File:                     D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft (raw, json)
Hash identifier:          LPfXPhSWTcwQPw2es+UA0ZwQV2HyPzNyRgxl2wvU5MI=
Subject key identifier:   26:1C:E4:37:83:16:52:1B:A0:D8:34:13:16:D1:B7:0F:B5:56:76:F7
Authority key identifier: 0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86
Certificate issuer:       /CN=A918A05D/serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186
Certificate serial:       0268
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft
Manifest number:          0242
Signing time:             Mon 27 Jul 2026 04:21:44 +0000
Manifest this update:     Mon 27 Jul 2026 04:21:44 +0000
Manifest next update:     Mon 03 Aug 2026 04:21:44 +0000
Files and hashes:         1: D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl (hash: HTot4hdLxXziQ2ImypXnbB326KU2wCQDZ790mKCKGg8=)
                          2: E506BE2CF03811EFAD4C2257C4F9AE02.roa (hash: 4frxygrIFh7Y+rXGxz8LtjS0GjPhlQB8SSCF8zDQdkw=)
                          3: A045C92CB46611EEAFEE8758C4F9AE02.roa (hash: f4VcaiBvVbV4voltwiUU/yymYJQXCHVhkFgjZ9diLy0=)
                          4: 33A6923A5FF211F1A6FEF4E07C47A888.roa (hash: fEjt+6tuQF9PeQS8T6j6inMv06NeHodZot88n+pL2WI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl
                          rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 04:21:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 616 (0x268)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A05D, serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186
        Validity
            Not Before: Jul 27 04:21:44 2026 GMT
            Not After : Aug  3 04:21:44 2026 GMT
        Subject: CN=6a66dcd8-0fbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f4:e5:47:7c:3b:41:a2:a4:a8:6d:d9:b9:d5:
                    fd:30:40:f9:4c:ac:df:3e:00:eb:cc:9c:d5:cd:e2:
                    9d:ed:ca:b3:f8:b3:f4:06:82:c0:bb:36:ce:d4:56:
                    f7:0c:f4:d4:08:bf:da:c4:27:e9:b9:fe:23:bf:89:
                    23:60:ac:f7:7d:07:b1:6f:58:7c:13:8b:18:0e:d5:
                    eb:d2:0a:04:ef:18:f7:96:10:72:50:e6:d6:8e:19:
                    d0:bb:91:07:fb:4d:30:5f:16:44:ae:54:35:01:54:
                    7b:ac:33:35:c2:54:02:ca:f6:f6:2a:61:ad:cf:73:
                    52:b3:fb:f9:cc:f9:9a:bc:d7:6d:8a:9b:20:2f:24:
                    43:14:67:c0:ee:19:3c:f6:ea:f2:29:0d:aa:fd:4f:
                    f4:6a:ef:73:4a:71:ba:92:12:be:85:ff:fa:7f:9e:
                    8c:27:22:4f:f3:15:98:d0:8b:d5:5e:3e:ef:72:32:
                    4a:75:ef:ab:2a:3d:f9:97:02:fe:27:c9:2f:ea:14:
                    4c:62:27:e6:0c:7f:15:c9:07:87:b8:21:11:af:70:
                    ce:fc:a1:ab:0c:04:0c:75:f6:7d:44:80:e9:36:26:
                    ae:22:63:94:11:f3:e8:44:35:aa:c8:18:da:d1:80:
                    01:da:e2:84:ac:2a:5b:4f:b9:c3:14:e6:8d:e0:39:
                    ca:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:1C:E4:37:83:16:52:1B:A0:D8:34:13:16:D1:B7:0F:B5:56:76:F7
            X509v3 Authority Key Identifier:
                keyid:0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:af:ff:d4:a7:10:20:37:cf:4d:37:0c:5f:1b:12:2e:d5:22:
         02:a2:a0:25:a4:62:35:51:50:fb:8a:aa:02:81:51:ba:23:ca:
         cd:bb:31:aa:8d:79:4b:2f:4d:07:04:f4:c1:c7:6c:b3:dc:3d:
         0c:3e:8f:ba:bb:58:e4:d8:8a:21:be:e8:18:05:a8:bc:b0:bf:
         d4:99:f3:5e:ed:8b:05:b5:b7:dc:90:f9:85:c5:97:58:61:7b:
         d7:a4:c2:34:ed:66:d9:dc:51:f7:0b:32:cb:9c:1f:84:f1:d2:
         5f:f7:7b:b7:cb:3d:cf:c7:4b:9c:1a:3a:7f:77:fc:8d:8e:aa:
         06:c6:a2:fb:1a:b6:a4:5d:fa:0a:5f:b6:38:65:c6:b3:8b:66:
         aa:db:f4:68:1b:4f:bc:c6:d3:d3:da:de:8e:13:41:e8:bb:9a:
         54:fc:69:df:92:07:06:e5:d9:ba:ef:d1:00:bb:f3:bb:e2:06:
         80:67:0d:53:a5:cb:5f:fa:f9:11:eb:10:5e:92:be:6c:4f:d7:
         3c:4b:ff:e2:e6:3d:17:3c:8b:e5:22:54:74:21:e4:25:eb:ab:
         65:f5:d4:95:d3:28:4c:d3:8b:cf:ba:52:32:8e:86:b8:98:bf:
         e9:52:5a:00:8c:ef:ee:cd:5b:ab:ee:1f:ef:cd:43:dc:cd:5a:
         cd:93:1b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:51:30 2026 by rpki-client