Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft
File:                     dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft (raw, json)
Hash identifier:          EOTmXTeSkltOV2YXeN2ePKEe88/AFHeur3qbYDe4ong=
Subject key identifier:   29:FC:95:46:8E:7D:43:83:4F:B2:C5:E7:6F:41:48:56:D9:62:C0:2D
Authority key identifier: 76:1A:8E:8F:EB:76:01:49:8C:9E:A6:78:87:FD:C1:05:41:76:D9:FC
Certificate issuer:       /CN=A918C10A/serialNumber=761A8E8FEB7601498C9EA67887FDC1054176D9FC
Certificate serial:       0899
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft
Manifest number:          0890
Signing time:             Tue 28 Jul 2026 21:02:37 +0000
Manifest this update:     Tue 28 Jul 2026 21:02:37 +0000
Manifest next update:     Tue 04 Aug 2026 21:02:37 +0000
Files and hashes:         1: dhqOj-t2AUmMnqZ4h_3BBUF22fw.crl (hash: xECSviI0Gwcvd+dAWRywFpFjieeENOmvrpiRuvf3TPY=)
                          2: CCFEC19AFDAC11EAB7B8A13BC4F9AE02.roa (hash: hPLmNaEpUGBOielXjPQ12dxqTWiu2MctRveJnDfMrGs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.crl
                          rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 21:02:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2201 (0x899)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C10A, serialNumber=761A8E8FEB7601498C9EA67887FDC1054176D9FC
        Validity
            Not Before: Jul 28 21:02:37 2026 GMT
            Not After : Aug  4 21:02:37 2026 GMT
        Subject: CN=6a6918ed-914a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:07:44:42:8c:b3:98:8e:46:bf:ca:1b:0b:6d:
                    ec:9d:4b:54:ca:8a:0c:80:e3:6b:a2:e9:dd:e3:6a:
                    3a:86:53:be:db:f5:25:27:c8:d1:c3:19:e2:1b:26:
                    84:11:e4:7d:70:fb:28:97:10:8b:b5:ae:55:52:ca:
                    da:43:e1:6d:e0:05:79:3b:f7:a8:35:8e:d6:68:b0:
                    f7:49:aa:fc:9d:77:32:dc:8b:2a:c5:79:2b:08:67:
                    2c:c4:f8:f9:32:f3:0f:35:4d:09:88:65:d2:1f:b7:
                    df:dd:04:93:d3:44:b7:41:9c:7f:f4:36:1e:04:9c:
                    83:78:75:b0:13:01:35:ac:46:5d:c4:7b:f7:3d:fc:
                    46:57:30:da:8b:d2:1e:e1:1f:2c:de:d5:a1:d3:85:
                    02:13:6b:ea:1d:46:8d:3b:0b:ef:87:53:8e:c2:fa:
                    7c:ca:c2:5f:d0:59:2f:c0:c5:ba:50:34:81:a1:d2:
                    6c:27:7d:07:5b:e0:1d:1e:11:71:b0:fa:03:dc:77:
                    ea:c8:84:e4:83:00:bc:17:a6:90:87:7d:a4:e1:0e:
                    15:71:38:bf:04:0b:6e:d0:02:a1:e6:3f:95:e1:60:
                    41:fa:b6:1c:f3:f3:9d:77:e5:e1:54:ed:9c:4f:b2:
                    80:04:12:32:22:d3:59:b7:0f:cd:35:1b:f9:7a:06:
                    e4:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:FC:95:46:8E:7D:43:83:4F:B2:C5:E7:6F:41:48:56:D9:62:C0:2D
            X509v3 Authority Key Identifier:
                keyid:76:1A:8E:8F:EB:76:01:49:8C:9E:A6:78:87:FD:C1:05:41:76:D9:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:2f:4d:84:22:02:af:a3:ec:0e:22:5e:99:fe:4e:d4:34:9a:
         f2:e9:2f:66:3d:a6:39:0f:03:21:57:5e:06:83:58:e3:d8:be:
         bd:ef:d3:24:87:f8:53:9c:52:7f:17:2e:8b:5f:be:b5:23:95:
         60:5b:da:15:0c:7a:e6:00:a8:a3:be:a4:b4:c8:e9:5c:83:84:
         94:82:9d:a9:b4:c1:05:6d:7a:43:c8:d2:2e:52:f6:f3:ee:69:
         49:00:7f:ed:4f:4c:ee:59:45:7a:61:bd:36:24:48:1d:6c:97:
         2c:ab:16:b9:b3:a9:19:44:f6:5b:df:92:cf:6b:e4:5a:d2:57:
         6d:4d:58:9e:87:1d:46:ce:ed:08:27:42:ef:62:b0:9b:fc:09:
         83:8b:23:30:c9:8b:21:36:d5:98:4b:9e:3e:67:8f:95:fe:21:
         27:5b:03:46:14:aa:c0:4c:f2:e0:1b:d9:12:f3:6f:a0:ad:a9:
         c5:c6:0c:4b:9e:05:a6:82:0e:d0:b9:7b:3c:d9:27:4c:dd:30:
         34:b7:86:27:53:95:a3:1e:84:4f:b6:7c:5a:56:68:f0:c6:0b:
         ee:37:a1:49:af:70:e1:69:f8:5f:4d:0d:ad:e8:a9:a3:ca:db:
         c6:03:45:63:e4:e0:3d:18:19:09:ed:c5:13:31:44:2e:bb:19:
         68:9b:57:2f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEMxMEExMTAvBgNVBAUTKDc2MUE4RThGRUI3NjAxNDk4QzlFQTY3ODg3RkRDMTA1
NDE3NkQ5RkMwHhcNMjYwNzI4MjEwMjM3WhcNMjYwODA0MjEwMjM3WjAYMRYwFAYD
VQQDEw02YTY5MThlZC05MTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7wdEQoyzmI5Gv8obC23snUtUyooMgONround42o6hlO+2/UlJ8jRwxniGyaE
EeR9cPsolxCLta5VUsraQ+Ft4AV5O/eoNY7WaLD3Sar8nXcy3IsqxXkrCGcsxPj5
MvMPNU0JiGXSH7ff3QST00S3QZx/9DYeBJyDeHWwEwE1rEZdxHv3PfxGVzDai9Ie
4R8s3tWh04UCE2vqHUaNOwvvh1OOwvp8ysJf0FkvwMW6UDSBodJsJ30HW+AdHhFx
sPoD3HfqyITkgwC8F6aQh32k4Q4VcTi/BAtu0AKh5j+V4WBB+rYc8/Odd+XhVO2c
T7KABBIyItNZtw/NNRv5egbkdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCn8lUaO
fUODT7LF529BSFbZYsAtMB8GA1UdIwQYMBaAFHYajo/rdgFJjJ6meIf9wQVBdtn8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzEwQS85OTE2OTg0QUZE
QUIxMUVBOTUwQjZGM0FDNEY5QUUwMi9kaHFPai10MkFVbU1ucVo0aF8zQkJVRjIy
ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RocU9qLXQyQVVtTW5xWjRoXzNCQlVGMjJmdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QzEwQS85OTE2OTg0QUZEQUIxMUVBOTUwQjZGM0FDNEY5QUUwMi9kaHFPai10MkFV
bU1ucVo0aF8zQkJVRjIyZncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJS9NhCICr6PsDiJemf5O1DSa8ukvZj2mOQ8DIVdeBoNY49i+ve/TJIf4U5xS
fxcui1++tSOVYFvaFQx65gCoo76ktMjpXIOElIKdqbTBBW16Q8jSLlL28+5pSQB/
7U9M7llFemG9NiRIHWyXLKsWubOpGUT2W9+Sz2vkWtJXbU1YnocdRs7tCCdC72Kw
m/wJg4sjMMmLITbVmEuePmePlf4hJ1sDRhSqwEzy4BvZEvNvoK2pxcYMS54FpoIO
0Ll7PNknTN0wNLeGJ1OVox6ET7Z8WlZo8MYL7jehSa9w4Wn4X00Nreipo8rbxgNF
Y+TgPRgZCe3FEzFELrsZaJtXLw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:19:10 2026 by rpki-client