Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.mft
File:                     dmH1l-po7_TJKXNjm7Z11_A5CXE.mft (raw, json)
Hash identifier:          sN82Sm8Ahgks+YTqBqVW9K13rJd3zqY91bQg2mfAxgQ=
Subject key identifier:   A2:E8:DA:5A:D1:E7:E1:C1:02:2F:99:38:70:36:1E:EC:55:CE:AF:60
Authority key identifier: 76:61:F5:97:EA:68:EF:F4:C9:29:73:63:9B:B6:75:D7:F0:39:09:71
Certificate issuer:       /CN=A91EA176/serialNumber=7661F597EA68EFF4C92973639BB675D7F0390971
Certificate serial:       06E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmH1l-po7_TJKXNjm7Z11_A5CXE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.mft
Manifest number:          06D2
Signing time:             Sun 26 Jul 2026 23:08:01 +0000
Manifest this update:     Sun 26 Jul 2026 23:08:01 +0000
Manifest next update:     Sun 02 Aug 2026 23:08:01 +0000
Files and hashes:         1: dmH1l-po7_TJKXNjm7Z11_A5CXE.crl (hash: g09JN1GP3IwpYH41Eh2FRh79ZEl5nxEwwrk4xGjSAyU=)
                          2: 10123D12E34E11ECB9CB283EC4F9AE02.roa (hash: 8aY/L8nAVzgyjTW/6jXj10GkNKuhhpPDhGncvfwb/Bc=)
                          3: 6595CE9CB29011EBBBF4F548C4F9AE02.roa (hash: qSB4ftjX3kA4tLaGQ98+0+IxSSCm+dtpWVZIBrMu7h8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.crl
                          rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmH1l-po7_TJKXNjm7Z11_A5CXE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 23:08:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1767 (0x6e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA176, serialNumber=7661F597EA68EFF4C92973639BB675D7F0390971
        Validity
            Not Before: Jul 26 23:08:01 2026 GMT
            Not After : Aug  2 23:08:01 2026 GMT
        Subject: CN=6a669351-553e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e6:40:2d:fe:66:cf:ff:6d:d3:44:bb:3e:1d:
                    e6:ff:10:00:59:26:ca:ce:a7:e0:22:35:42:d6:d4:
                    25:47:b6:85:e7:47:00:4a:a6:c8:55:bd:7b:87:ea:
                    8f:83:af:f1:df:92:df:f6:ea:21:6a:e2:31:ae:01:
                    0d:5c:07:61:7e:0d:a7:32:2e:38:a0:0a:41:05:b3:
                    c8:e9:00:65:84:25:a9:c8:15:d3:3e:5f:10:75:71:
                    29:b8:00:01:36:28:a6:71:5a:c2:a7:b4:e0:1a:b7:
                    48:76:3e:ac:35:32:00:34:87:3e:a9:50:2c:94:dc:
                    bb:f2:07:98:d5:58:02:cf:ba:01:bd:1f:c4:df:71:
                    77:bc:20:6d:52:c0:ce:c5:26:36:25:9a:f0:bd:bb:
                    e8:59:70:d8:c0:cb:ac:6f:ca:5d:21:a1:90:e0:58:
                    47:56:ab:7c:8f:60:37:27:d8:fd:47:59:be:b7:c9:
                    e8:9c:3e:cb:d4:a1:9c:a9:b1:8d:56:29:31:35:88:
                    30:66:7d:f7:d6:91:1f:7a:70:69:eb:7a:c0:3e:7c:
                    0d:e4:9f:93:60:7c:e2:da:42:f4:1c:8f:fe:49:7b:
                    67:2c:42:52:41:60:8e:ba:0b:56:fb:7f:e7:ea:3a:
                    02:f8:a3:21:65:cf:c8:bf:88:01:2b:0e:eb:57:e3:
                    aa:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:E8:DA:5A:D1:E7:E1:C1:02:2F:99:38:70:36:1E:EC:55:CE:AF:60
            X509v3 Authority Key Identifier:
                keyid:76:61:F5:97:EA:68:EF:F4:C9:29:73:63:9B:B6:75:D7:F0:39:09:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmH1l-po7_TJKXNjm7Z11_A5CXE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:75:a9:a9:f0:9d:1a:18:d8:88:8b:42:53:03:56:a3:70:d3:
         3c:71:50:b7:83:e7:82:ad:ac:f0:a5:19:21:2c:77:70:4c:87:
         90:41:f4:a8:34:c8:d5:c8:09:39:a9:b6:b0:0c:e2:ad:bc:0f:
         22:bb:8b:d7:ea:b6:1a:eb:de:53:13:97:6d:bd:40:c0:9a:48:
         01:c6:4b:7f:4f:11:44:fc:6a:70:88:bb:ba:39:75:f6:aa:46:
         5b:37:db:11:3b:40:76:e9:34:05:4a:97:57:a5:3d:c4:21:98:
         dd:c2:50:c7:7f:14:13:a6:8c:ee:e1:ec:62:dc:22:cc:2b:dc:
         1d:56:48:67:b2:41:00:fd:05:4b:ce:78:08:6c:22:4d:47:e6:
         79:22:08:a8:f3:b5:30:3d:44:a3:c3:e3:44:85:30:31:37:6d:
         5f:49:fe:cb:22:52:0d:b7:6f:c7:3d:bf:f7:d3:61:d0:3f:9d:
         6e:c3:90:b2:73:ba:a2:3c:5b:ed:5a:c1:e4:eb:13:5e:ac:e8:
         f6:04:f0:30:d2:0e:04:42:46:a6:f1:0c:4e:75:ac:5b:df:26:
         58:94:06:52:42:9b:6e:26:35:ac:7f:8b:1b:ce:58:d3:11:5f:
         81:f5:1f:c7:d3:e0:d0:c5:ca:41:ca:fb:46:fe:07:65:70:30:
         78:00:e5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:39:18 2026 by rpki-client