Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft
File:                     dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft (raw, json)
Hash identifier:          LsanYGVoFnukfEP7CDKD3NQ+ug6U1JNz69b+OmbUQMY=
Subject key identifier:   25:BC:D5:8F:CD:BD:0C:A2:C7:22:51:B6:3A:9F:32:88:09:C1:2B:61
Authority key identifier: 74:DC:EA:A8:50:6A:2B:32:7F:87:A4:2D:07:41:AC:36:EE:DE:EB:49
Certificate issuer:       /CN=A91249C2/serialNumber=74DCEAA8506A2B327F87A42D0741AC36EEDEEB49
Certificate serial:       DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNzqqFBqKzJ_h6QtB0GsNu7e60k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft
Manifest number:          D4
Signing time:             Thu 23 Jul 2026 08:30:39 +0000
Manifest this update:     Thu 23 Jul 2026 08:30:38 +0000
Manifest next update:     Thu 30 Jul 2026 08:30:38 +0000
Files and hashes:         1: dNzqqFBqKzJ_h6QtB0GsNu7e60k.crl (hash: UKWZHaJ/eABVrhefukylL0hzcEpwmi5KhdM2S3/FgFE=)
                          2: ED3D0F9E48C911F0B59FB71DC4F9AE02.roa (hash: 3GDgDAyytAqGw1QJu48r4HFjWRXZvVa4Wmp9uyTwi6I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.crl
                          rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNzqqFBqKzJ_h6QtB0GsNu7e60k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:30:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 221 (0xdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91249C2, serialNumber=74DCEAA8506A2B327F87A42D0741AC36EEDEEB49
        Validity
            Not Before: Jul 23 08:30:38 2026 GMT
            Not After : Jul 30 08:30:38 2026 GMT
        Subject: CN=6a61d12f-e221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c7:d6:ae:b6:a7:c5:ac:5e:07:ef:8a:87:cb:
                    89:59:3a:af:7b:fa:5b:65:95:41:74:a8:b5:68:c7:
                    5d:c5:a0:e2:5b:93:f8:de:26:fa:12:ab:20:c6:6e:
                    e8:fe:6b:bc:79:56:8a:b1:81:d6:e6:02:21:26:12:
                    c6:3d:08:93:ce:63:db:3f:f7:cf:2b:bd:28:7e:cf:
                    09:29:57:72:e3:84:3f:08:18:c6:b8:a0:3f:56:98:
                    71:da:99:a2:d6:4c:de:5b:38:4f:1a:11:68:1a:84:
                    c3:c8:20:f7:96:4a:a8:59:de:e1:f4:29:c1:28:2b:
                    df:5e:f5:1d:77:eb:f2:55:54:ad:86:bd:67:9a:aa:
                    72:3d:41:88:b6:a2:9c:35:7b:73:4e:a5:c0:5f:61:
                    5d:e4:67:10:c9:1a:88:17:c0:96:db:28:f5:51:db:
                    cc:cb:fa:c7:f2:f3:19:92:c5:95:f6:00:7b:52:48:
                    15:88:3b:a2:10:ce:a4:8b:42:fd:c2:9b:e4:44:98:
                    de:8e:a1:c7:b2:10:cf:4a:c7:a6:83:49:d0:95:71:
                    78:a5:5e:dc:30:01:87:74:92:9a:21:05:27:f5:c7:
                    62:88:cc:72:07:12:11:98:cf:e2:ef:48:0d:20:9c:
                    a9:04:79:e0:f5:51:9f:3c:9c:00:af:24:64:fa:87:
                    9e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:BC:D5:8F:CD:BD:0C:A2:C7:22:51:B6:3A:9F:32:88:09:C1:2B:61
            X509v3 Authority Key Identifier:
                keyid:74:DC:EA:A8:50:6A:2B:32:7F:87:A4:2D:07:41:AC:36:EE:DE:EB:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNzqqFBqKzJ_h6QtB0GsNu7e60k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:78:15:e7:38:c0:ba:20:eb:9e:54:b9:24:7e:c8:b3:44:76:
         09:e9:9a:4a:46:c6:8d:2f:d6:06:20:aa:d7:9a:ea:bf:9f:60:
         1c:b9:2c:a5:4c:d9:98:9e:7b:c3:2d:02:7c:b0:05:67:1b:d6:
         5d:9e:9c:77:85:39:09:b0:34:70:b5:d3:26:7f:84:5b:a9:ed:
         43:60:fe:e7:7d:00:5e:24:ad:f8:de:50:97:d0:b0:75:25:e5:
         1e:5a:aa:c3:42:de:82:f0:75:51:50:91:4e:7b:40:27:b3:41:
         66:31:c5:b9:83:14:d9:fa:ee:32:42:ee:cf:d3:dc:8e:1a:4d:
         12:e1:2c:bb:70:8e:b4:44:a0:58:03:25:ba:f9:0a:af:b7:ee:
         c0:43:be:7f:f9:fd:e3:ba:53:9d:fc:c5:cf:97:2d:a6:cb:0b:
         7b:41:9e:75:74:b5:30:4c:31:46:4f:95:4a:dd:9e:ae:8c:09:
         e7:aa:1a:8c:9f:76:d9:df:19:37:1e:02:2a:45:bb:a8:d6:db:
         4b:e3:59:2d:e9:b6:15:75:fe:a5:c9:82:69:b1:8b:6c:57:e0:
         a0:1b:29:c5:00:10:a4:8e:c7:d4:7b:72:b4:05:24:3f:5a:7d:
         2f:fe:a2:40:e7:41:2c:b1:51:51:a3:8e:33:15:a0:57:7b:76:
         eb:8a:8b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:53:31 2026 by rpki-client