Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.mft
File:                     dQVeDYzbFO-fBPi5XayLiclozd0.mft (raw, json)
Hash identifier:          TZ1fW7E5qdPP5/JmLGlo+9+0pxRIpSQrsf90HBKacHo=
Subject key identifier:   97:AA:94:4D:1A:34:B6:3F:E7:76:BB:8E:C9:B4:2E:9E:71:D0:8E:85
Authority key identifier: 75:05:5E:0D:8C:DB:14:EF:9F:04:F8:B9:5D:AC:8B:89:C9:68:CD:DD
Certificate issuer:       /CN=A912C4DB/serialNumber=75055E0D8CDB14EF9F04F8B95DAC8B89C968CDDD
Certificate serial:       0D22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQVeDYzbFO-fBPi5XayLiclozd0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.mft
Manifest number:          0D13
Signing time:             Wed 22 Jul 2026 18:31:36 +0000
Manifest this update:     Wed 22 Jul 2026 18:31:35 +0000
Manifest next update:     Wed 29 Jul 2026 18:31:35 +0000
Files and hashes:         1: dQVeDYzbFO-fBPi5XayLiclozd0.crl (hash: blLXbLSt6fD8BUpyFF5EkU6MujR5oBqyltEltpCxYWA=)
                          2: 3E0EDBC83E0111ECA3AF5462C4F9AE02.roa (hash: fUY5HB4r5+RIwAfPCkMPyTU4vay6oYcoCDFz1+akttk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.crl
                          rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQVeDYzbFO-fBPi5XayLiclozd0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:31:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3362 (0xd22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C4DB, serialNumber=75055E0D8CDB14EF9F04F8B95DAC8B89C968CDDD
        Validity
            Not Before: Jul 22 18:31:35 2026 GMT
            Not After : Jul 29 18:31:35 2026 GMT
        Subject: CN=6a610c88-bbda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3f:8d:bc:42:8b:f8:87:1a:51:72:cb:43:92:
                    3b:db:86:1f:99:e9:6b:06:e9:83:44:56:45:9e:58:
                    13:33:4e:d7:de:7b:61:6b:33:88:21:1a:47:08:e1:
                    11:e3:f1:f4:15:b3:8f:64:79:85:58:8e:d3:55:ac:
                    1f:1c:a0:2e:2e:2f:ea:ae:e0:31:11:92:ce:b8:fd:
                    fb:14:65:b4:5a:66:26:b9:fb:e2:c9:1f:37:12:c6:
                    6d:98:b9:32:38:8e:86:da:9f:58:17:4f:af:16:88:
                    31:eb:ce:b9:e5:46:3e:c2:cc:3c:55:c0:81:1c:85:
                    cb:0e:b3:d1:59:74:56:54:d4:df:3f:ab:15:88:42:
                    e4:e6:61:01:cc:5a:b7:e9:0b:22:e1:22:c8:4a:1a:
                    24:3f:7e:25:e3:15:c7:1a:ce:0b:45:04:8b:67:54:
                    51:30:c6:a3:7b:16:eb:97:f4:7a:ac:b3:ca:80:2c:
                    c8:04:54:31:b6:bb:78:cb:37:a3:8e:88:75:84:ee:
                    fe:fe:a2:fb:36:e1:f3:7c:74:c0:b8:5e:d3:6c:ed:
                    b0:71:f8:39:f4:8b:d6:f2:35:5e:e8:f9:51:ce:3a:
                    3c:55:26:66:c6:37:06:5f:9d:98:8e:50:82:e6:b5:
                    5a:cb:92:f5:89:77:d2:e9:b7:27:b0:9f:ff:09:7a:
                    77:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:AA:94:4D:1A:34:B6:3F:E7:76:BB:8E:C9:B4:2E:9E:71:D0:8E:85
            X509v3 Authority Key Identifier:
                keyid:75:05:5E:0D:8C:DB:14:EF:9F:04:F8:B9:5D:AC:8B:89:C9:68:CD:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQVeDYzbFO-fBPi5XayLiclozd0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:2e:1f:c2:54:8f:7d:e3:93:17:11:e9:db:d7:4a:0c:c2:63:
         83:7b:44:fd:73:6a:08:24:1f:d9:da:e0:90:1e:71:81:15:f6:
         a2:03:15:02:b1:06:11:47:fb:4b:37:fe:e1:7c:fa:28:91:06:
         83:2c:11:25:da:e7:5c:22:26:95:b3:c3:8a:f1:da:1f:b8:40:
         03:26:df:a5:d9:96:a4:b8:a7:5f:5c:38:21:ca:0c:5e:92:6c:
         75:20:b7:fb:dd:c4:f0:f2:14:5f:af:e9:2e:5e:9e:f3:e9:1a:
         4f:b9:35:ee:ca:0d:d6:0c:b0:c5:fb:7d:55:e5:48:97:eb:95:
         c3:29:e5:ed:7d:7f:0c:c7:30:bb:2b:ad:4d:5d:10:c1:44:d0:
         d9:e6:c4:a8:43:fa:a0:00:f5:7b:a6:bc:cb:82:56:96:d4:77:
         fd:bd:11:65:1d:7a:5d:45:03:0e:98:72:06:3f:22:28:1d:4a:
         f7:09:2c:86:5b:b3:62:36:ef:57:4d:02:5c:75:76:d6:9c:38:
         90:22:aa:e0:8d:a0:02:16:60:ab:b4:76:4d:31:bb:ea:f7:df:
         53:e5:67:53:cf:ea:e4:9a:2b:6e:67:62:71:ba:c1:ec:fb:11:
         eb:64:d1:70:52:a4:ce:ce:de:dd:3d:58:f8:5d:94:80:13:20:
         78:2b:8f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:59:45 2026 by rpki-client