Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.mft
File:                     DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.mft (raw, json)
Hash identifier:          03lbSOrF0rCHmidJhj0MJlrTNX/EX8Bo0IqWUWq3PZI=
Subject key identifier:   E0:49:53:3B:10:1D:69:83:B3:03:AB:A1:7D:51:8F:6A:A8:93:95:A9
Authority key identifier: 0D:03:46:C8:A2:66:BE:6A:DC:E4:B7:E8:39:50:AF:5F:E1:EB:E5:C4
Certificate issuer:       /CN=A9112BDE/serialNumber=0D0346C8A266BE6ADCE4B7E83950AF5FE1EBE5C4
Certificate serial:       07F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.mft
Manifest number:          07E8
Signing time:             Wed 22 Jul 2026 21:53:47 +0000
Manifest this update:     Wed 22 Jul 2026 21:53:46 +0000
Manifest next update:     Wed 29 Jul 2026 21:53:46 +0000
Files and hashes:         1: DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.crl (hash: AEERF4Kw/ZfW8npseDS/18REjzHa+tbO2DdDg6xC9Ws=)
                          2: 511EBFFE3E7E11EB979F564CC4F9AE02.roa (hash: XmHPjbOfHoD1pV3ANoGj1UOp5hoQSRI4UyhfbzC32OA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.crl
                          rsync://rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:53:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2034 (0x7f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112BDE, serialNumber=0D0346C8A266BE6ADCE4B7E83950AF5FE1EBE5C4
        Validity
            Not Before: Jul 22 21:53:46 2026 GMT
            Not After : Jul 29 21:53:46 2026 GMT
        Subject: CN=6a613beb-9e03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3c:d6:5a:49:8a:97:02:b1:e5:8e:b2:2b:1b:
                    c0:a5:49:f4:57:f8:1c:4f:90:c3:d4:73:0c:a9:f0:
                    82:94:1d:a3:57:c0:35:42:e0:d0:87:ba:ff:76:54:
                    ac:8d:ef:32:f4:d8:09:94:e9:d0:89:14:01:0c:33:
                    53:fe:39:4d:c8:0a:49:be:1d:aa:34:ff:db:8a:9f:
                    bd:21:54:b8:3f:91:05:d5:61:83:20:32:b0:4d:ec:
                    4d:4d:30:58:00:77:5a:24:b6:83:2d:c3:e2:82:a4:
                    d3:e3:9f:d1:b3:31:97:d0:ca:ad:6b:15:e9:c3:14:
                    dd:f3:a1:d1:72:a5:24:71:94:1c:fa:71:5a:3a:51:
                    da:42:a7:b6:bc:16:3a:b9:34:4e:c5:3b:95:51:19:
                    52:89:2f:1a:45:78:7f:0d:0f:97:82:e7:94:96:c5:
                    8c:04:94:2a:a7:17:fe:b1:38:00:63:a5:08:b2:fe:
                    f5:f8:2f:f4:72:ee:d9:ac:77:3c:21:e8:97:f1:1e:
                    4a:2f:9c:b8:ef:f9:7a:9e:00:48:34:9e:80:8b:c9:
                    ad:74:3f:d7:b1:ed:e7:77:f3:7c:99:e3:5c:a6:d1:
                    6c:af:78:b2:db:e6:3a:a7:dd:ec:56:0a:fe:9e:8d:
                    b3:17:54:10:55:c3:8e:95:05:63:03:f8:c5:d1:f9:
                    3a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:49:53:3B:10:1D:69:83:B3:03:AB:A1:7D:51:8F:6A:A8:93:95:A9
            X509v3 Authority Key Identifier:
                keyid:0D:03:46:C8:A2:66:BE:6A:DC:E4:B7:E8:39:50:AF:5F:E1:EB:E5:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:b2:61:80:bc:b3:3e:3c:23:de:1c:d9:89:72:d8:cf:02:71:
         e0:94:50:b4:0b:df:a8:ef:e7:a8:59:ea:4a:cb:4b:3a:b5:a1:
         07:1d:98:8a:ad:0a:da:58:41:40:b8:b2:f7:08:c8:77:ee:77:
         35:6b:94:c2:44:3c:d3:b3:e0:f4:95:d8:56:50:21:a6:c7:36:
         0d:0e:e4:6f:81:72:0e:18:f0:db:bb:85:54:f4:e7:a0:ef:8c:
         bf:6b:71:30:6a:b5:af:a9:3d:33:ce:ac:61:14:a9:c6:43:a0:
         59:40:86:ca:7f:05:8a:bd:7d:ff:94:24:ac:55:24:89:60:2a:
         7b:b9:5c:17:5b:10:7b:2b:f2:bd:3f:38:c6:81:86:0f:30:74:
         8b:6d:74:e8:35:b4:3e:c5:26:7d:1a:08:02:61:b7:75:8f:bf:
         ff:62:7c:79:0b:71:6e:e8:b2:ec:da:37:bb:3d:24:44:82:b9:
         ca:59:8e:b9:1f:80:8d:5e:88:08:0d:de:7c:db:ef:03:6c:c7:
         3f:bf:53:d6:79:ef:f5:8c:c0:1d:b5:c0:d2:80:25:2d:8f:c8:
         f3:b8:72:35:e6:db:e6:e5:c5:d2:32:43:f7:a2:76:f3:e0:8c:
         ed:ae:a5:c4:a4:aa:08:a4:b9:18:19:6b:d2:53:c9:cd:f1:c7:
         f4:b1:5c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:10:11 2026 by rpki-client