Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B051/CE7671702B4711F1809CDE0E92833773/DNjeYk5eS0zpjdodRx4ImBlywHs.mft
File:                     DNjeYk5eS0zpjdodRx4ImBlywHs.mft (raw, json)
Hash identifier:          nRNTycbs8CFJt0a2aHIjTg0jl/JnoNPBZOPPbeI6GNA=
Subject key identifier:   30:15:F1:DD:C7:AE:CC:64:69:ED:56:C0:94:03:E4:44:4C:BD:F7:57
Authority key identifier: 0C:D8:DE:62:4E:5E:4B:4C:E9:8D:DA:1D:47:1E:08:98:19:72:C0:7B
Certificate issuer:       /CN=A912B051/serialNumber=0CD8DE624E5E4B4CE98DDA1D471E08981972C07B
Certificate serial:       40
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNjeYk5eS0zpjdodRx4ImBlywHs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B051/CE7671702B4711F1809CDE0E92833773/DNjeYk5eS0zpjdodRx4ImBlywHs.mft
Manifest number:          3E
Signing time:             Thu 23 Jul 2026 10:33:57 +0000
Manifest this update:     Thu 23 Jul 2026 10:33:56 +0000
Manifest next update:     Thu 30 Jul 2026 10:33:56 +0000
Files and hashes:         1: DNjeYk5eS0zpjdodRx4ImBlywHs.crl (hash: pQCziEmBx/qB6RhMwFGSP56XkU0wWgzzgAS6CK12MLg=)
                          2: 3821514E2B4811F19B7264C192833773.roa (hash: hG/7oeyJS10l2sxhKCzDceTLaNr/x0/0JVKwO3GFk10=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B051/CE7671702B4711F1809CDE0E92833773/DNjeYk5eS0zpjdodRx4ImBlywHs.crl
                          rsync://rpki.apnic.net/member_repository/A912B051/CE7671702B4711F1809CDE0E92833773/DNjeYk5eS0zpjdodRx4ImBlywHs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNjeYk5eS0zpjdodRx4ImBlywHs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:33:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B051, serialNumber=0CD8DE624E5E4B4CE98DDA1D471E08981972C07B
        Validity
            Not Before: Jul 23 10:33:56 2026 GMT
            Not After : Jul 30 10:33:56 2026 GMT
        Subject: CN=6a61ee14-b51f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:1c:07:34:0e:16:33:67:e1:1f:b7:0b:74:a8:
                    ff:fe:72:62:b0:c0:03:e7:6f:f1:c6:c7:4c:e4:a7:
                    e4:8c:a5:f4:91:f6:f5:c3:7e:ad:16:b9:04:1d:f3:
                    76:11:30:e6:4c:62:77:8d:e9:5d:66:fe:02:a3:a8:
                    47:16:95:15:66:74:7f:3b:7d:a9:96:74:6f:41:bc:
                    6d:5d:79:ed:36:ca:2b:73:0b:5f:2c:bd:40:77:44:
                    08:74:3d:01:c3:f8:11:3f:8d:11:9a:48:14:f9:45:
                    4d:6e:a4:8e:9f:fd:08:d0:4a:21:5a:cf:5e:3a:fe:
                    4e:b7:91:ac:b2:5a:f2:bf:64:b4:3b:f8:9e:ab:f9:
                    f2:7b:d5:d3:f2:f8:ee:eb:c3:07:48:fd:bc:c1:23:
                    38:99:1b:18:d2:8a:28:c9:92:51:8a:4d:64:57:bf:
                    74:5b:32:91:76:1c:d1:cd:e4:ae:ad:cf:a6:ca:25:
                    5d:b7:df:8a:b9:23:ed:b2:97:a4:e4:da:d1:76:11:
                    e5:ea:d0:ff:2b:26:f4:60:e9:41:7f:1b:d2:93:38:
                    59:0e:75:7f:93:39:a9:7f:ff:a6:64:14:48:28:40:
                    e1:28:cd:6e:ad:bd:d1:62:53:7e:67:67:8f:56:78:
                    3a:8a:7f:ff:9c:78:a0:ab:55:c5:b8:12:bc:8b:bd:
                    f2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:15:F1:DD:C7:AE:CC:64:69:ED:56:C0:94:03:E4:44:4C:BD:F7:57
            X509v3 Authority Key Identifier:
                keyid:0C:D8:DE:62:4E:5E:4B:4C:E9:8D:DA:1D:47:1E:08:98:19:72:C0:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B051/CE7671702B4711F1809CDE0E92833773/DNjeYk5eS0zpjdodRx4ImBlywHs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNjeYk5eS0zpjdodRx4ImBlywHs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B051/CE7671702B4711F1809CDE0E92833773/DNjeYk5eS0zpjdodRx4ImBlywHs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:fa:0a:09:07:8f:79:35:5d:70:cd:bc:a0:9d:ec:00:de:f6:
         35:65:5f:f3:96:5d:7a:75:23:1c:19:b3:f4:b1:51:b4:82:bd:
         b7:88:19:84:1c:9e:ea:ef:02:88:64:a1:c3:42:4d:3e:d4:99:
         59:7b:1e:6f:04:5c:df:1a:6e:c1:c2:9d:d1:ae:7c:0d:75:bd:
         27:e4:17:a9:7b:72:70:a8:c0:5b:d6:c2:d5:c8:1f:b5:b4:11:
         56:09:58:90:bc:f0:de:ae:ed:45:76:88:0d:51:a0:92:e9:25:
         63:67:04:bc:28:60:dd:e5:b2:09:e5:53:ec:e4:cc:4a:25:cd:
         5e:a5:6a:d9:39:7c:0b:4b:43:8a:6f:99:32:83:15:72:f3:78:
         6c:ff:f2:59:c1:20:fe:25:c5:da:af:31:19:e9:83:ee:54:3b:
         9b:a9:66:45:a3:d9:bb:0f:c6:3c:86:8d:11:8b:c0:8a:fb:26:
         7a:b0:90:4a:ed:ea:44:ec:7f:db:d6:07:be:e5:53:0d:c6:d9:
         df:8d:0c:c9:d9:97:dd:a4:ca:81:96:81:aa:21:4a:de:3c:68:
         e4:2f:d1:01:19:22:55:09:5f:bb:ad:e8:fd:cd:bc:da:41:0b:
         9e:33:7c:22:40:cc:5e:89:0f:ee:6d:01:36:a0:86:31:cd:58:
         c4:bd:9a:ae
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
QjA1MTExMC8GA1UEBRMoMENEOERFNjI0RTVFNEI0Q0U5OEREQTFENDcxRTA4OTgx
OTcyQzA3QjAeFw0yNjA3MjMxMDMzNTZaFw0yNjA3MzAxMDMzNTZaMBgxFjAUBgNV
BAMTDTZhNjFlZTE0LWI1MWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCMHAc0DhYzZ+Eftwt0qP/+cmKwwAPnb/HGx0zkp+SMpfSR9vXDfq0WuQQd83YR
MOZMYneN6V1m/gKjqEcWlRVmdH87famWdG9BvG1dee02yitzC18svUB3RAh0PQHD
+BE/jRGaSBT5RU1upI6f/QjQSiFaz146/k63kayyWvK/ZLQ7+J6r+fJ71dPy+O7r
wwdI/bzBIziZGxjSiijJklGKTWRXv3RbMpF2HNHN5K6tz6bKJV2334q5I+2yl6Tk
2tF2EeXq0P8rJvRg6UF/G9KTOFkOdX+TOal//6ZkFEgoQOEozW6tvdFiU35nZ49W
eDqKf/+ceKCrVcW4EryLvfJTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUMBXx3ceu
zGRp7VbAlAPkREy991cwHwYDVR0jBBgwFoAUDNjeYk5eS0zpjdodRx4ImBlywHsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJCMDUxL0NFNzY3MTcwMkI0
NzExRjE4MDlDREUwRTkyODMzNzczL0ROamVZazVlUzB6cGpkb2RSeDRJbUJseXdI
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvRE5qZVlrNWVTMHpwamRvZFJ4NEltQmx5d0hzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJC
MDUxL0NFNzY3MTcwMkI0NzExRjE4MDlDREUwRTkyODMzNzczL0ROamVZazVlUzB6
cGpkb2RSeDRJbUJseXdIcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBx+goJB495NV1wzbygnewA3vY1ZV/zll16dSMcGbP0sVG0gr23iBmEHJ7q7wKI
ZKHDQk0+1JlZex5vBFzfGm7Bwp3RrnwNdb0n5Bepe3JwqMBb1sLVyB+1tBFWCViQ
vPDeru1FdogNUaCS6SVjZwS8KGDd5bIJ5VPs5MxKJc1epWrZOXwLS0OKb5kygxVy
83hs//JZwSD+JcXarzEZ6YPuVDubqWZFo9m7D8Y8ho0Ri8CK+yZ6sJBK7epE7H/b
1ge+5VMNxtnfjQzJ2ZfdpMqBloGqIUrePGjkL9EBGSJVCV+7rej9zbzaQQueM3wi
QMxeiQ/ubQE2oIYxzVjEvZqu
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:54:17 2026 by rpki-client