Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918CE56/26264AF0396E11EDBFC3120DC4F9AE02/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.mft
File:                     dGYHPI0g_1sMqI5KOj_IHTyfZ5s.mft (raw, json)
Hash identifier:          TmNs2zpfHWUZbedBwkaaNIuJWuu/6MOxfJzhAXyVz0Q=
Subject key identifier:   A9:05:B9:4B:0D:CB:F2:D5:82:C8:1F:88:8B:3A:5D:A5:E4:10:AD:3E
Authority key identifier: 74:66:07:3C:8D:20:FF:5B:0C:A8:8E:4A:3A:3F:C8:1D:3C:9F:67:9B
Certificate issuer:       /CN=A918CE56/serialNumber=7466073C8D20FF5B0CA88E4A3A3FC81D3C9F679B
Certificate serial:       02E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918CE56/26264AF0396E11EDBFC3120DC4F9AE02/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.mft
Manifest number:          02E0
Signing time:             Mon 27 Jul 2026 02:26:19 +0000
Manifest this update:     Mon 27 Jul 2026 02:26:19 +0000
Manifest next update:     Mon 03 Aug 2026 02:26:19 +0000
Files and hashes:         1: dGYHPI0g_1sMqI5KOj_IHTyfZ5s.crl (hash: mYY+mOD+BqS8dZ17s3go2GynJ5ONyDJQ1w27q6OFhsQ=)
                          2: BEB5E328397011EDA97F630EC4F9AE02.roa (hash: J9UUSEwKqauquMmKvfncZPjjMkXwX/cwJi3gEdCy2os=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918CE56/26264AF0396E11EDBFC3120DC4F9AE02/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.crl
                          rsync://rpki.apnic.net/member_repository/A918CE56/26264AF0396E11EDBFC3120DC4F9AE02/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 02:26:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 742 (0x2e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918CE56, serialNumber=7466073C8D20FF5B0CA88E4A3A3FC81D3C9F679B
        Validity
            Not Before: Jul 27 02:26:19 2026 GMT
            Not After : Aug  3 02:26:19 2026 GMT
        Subject: CN=6a66c1cb-9b5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a1:11:90:e3:a1:87:25:8f:8e:78:52:2b:6d:
                    db:f8:62:ef:28:cd:10:66:34:29:1b:79:08:c4:f0:
                    ef:01:84:82:8e:bd:cd:46:f2:8d:d5:72:e7:e7:63:
                    0d:88:9d:5f:1c:57:a8:2c:da:25:a7:3f:5b:39:a6:
                    5a:39:98:9d:29:99:94:74:b4:eb:5b:6c:16:47:51:
                    47:96:f1:b1:1b:f3:5e:a9:5d:b7:71:b9:65:80:5d:
                    da:91:c7:95:c4:04:aa:50:02:0c:b3:f6:df:67:0f:
                    bb:0b:0b:d0:d6:75:df:a9:79:78:77:04:4a:31:e6:
                    bf:d9:11:a5:86:0a:c5:e6:83:60:57:41:df:23:db:
                    23:2c:9e:65:40:ce:84:a0:48:85:90:37:60:52:9a:
                    b0:21:52:20:fe:9f:f0:38:85:3e:17:4e:f3:e0:a2:
                    cc:7a:ff:65:1d:66:0f:86:02:3a:58:b2:8e:6f:19:
                    7d:93:0e:76:6e:dc:39:8f:98:22:8f:a9:37:d8:dd:
                    cc:fb:11:57:72:c1:5b:10:34:e0:a9:ba:e5:ad:1c:
                    c8:43:0c:42:4e:66:3b:29:7f:85:e9:1d:f3:8d:a9:
                    70:fe:ad:9a:69:2d:4c:c3:9d:d6:80:83:17:b1:06:
                    17:f2:ba:98:1c:bc:2c:07:87:17:32:0e:6f:4a:f0:
                    a6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:05:B9:4B:0D:CB:F2:D5:82:C8:1F:88:8B:3A:5D:A5:E4:10:AD:3E
            X509v3 Authority Key Identifier:
                keyid:74:66:07:3C:8D:20:FF:5B:0C:A8:8E:4A:3A:3F:C8:1D:3C:9F:67:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918CE56/26264AF0396E11EDBFC3120DC4F9AE02/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CE56/26264AF0396E11EDBFC3120DC4F9AE02/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:52:60:ab:f6:92:97:33:7b:b4:25:68:73:88:3c:91:96:5b:
         ea:c1:df:c6:39:46:f4:d2:29:4d:23:36:94:25:4d:73:8c:e7:
         22:2b:b0:11:50:54:da:cb:5b:4a:21:b0:5c:7d:2c:b0:dd:e9:
         2e:36:28:7d:c1:01:2a:a2:ca:1f:d0:b6:62:6d:25:fa:99:4d:
         88:d9:06:04:d9:39:60:5e:b5:c8:d8:f9:52:8b:79:d7:e0:68:
         6b:c3:eb:e4:68:63:52:d1:3c:31:65:35:a0:d6:ea:56:41:b7:
         dc:fd:9e:7d:2a:b6:90:7e:40:14:16:af:44:13:97:bd:53:f4:
         d0:05:7e:ea:35:05:4b:c8:1f:3d:d3:db:b4:d9:e1:60:18:3f:
         83:ae:7a:e5:87:b6:4f:f8:82:fc:15:ac:95:29:78:b9:c3:22:
         83:11:2f:ff:b4:de:0b:d0:3c:38:87:8c:08:1b:0a:2a:07:b0:
         ef:91:74:3a:a9:67:db:1d:4f:fa:93:53:bc:98:5f:56:33:a5:
         3e:51:e2:cd:48:ce:9c:bf:a2:0b:ec:81:94:4d:63:7c:c6:2b:
         8f:50:39:73:52:5d:ba:c1:2b:59:37:f0:41:80:dd:92:fe:5d:
         c9:8b:e8:52:9d:aa:dd:7b:49:2c:46:c6:ab:13:ca:7b:df:de:
         92:8a:32:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:24:24 2026 by rpki-client