Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.mft
File:                     DOpooCxSn4h1LGQt4NL--fXXoUo.mft (raw, json)
Hash identifier:          nazteNM3Q/SUC6JUyqu/ZcjSt1r8NmVXhmnDkK/2irM=
Subject key identifier:   7F:A9:E5:38:E9:7C:27:22:EA:B0:8B:BF:24:6C:6C:4C:A0:A1:7D:A4
Authority key identifier: 0C:EA:68:A0:2C:52:9F:88:75:2C:64:2D:E0:D2:FE:F9:F5:D7:A1:4A
Certificate issuer:       /CN=A913025C/serialNumber=0CEA68A02C529F88752C642DE0D2FEF9F5D7A14A
Certificate serial:       07DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOpooCxSn4h1LGQt4NL--fXXoUo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.mft
Manifest number:          07CA
Signing time:             Sat 26 Sep 2026 21:32:06 +0000
Manifest this update:     Sat 26 Sep 2026 21:32:06 +0000
Manifest next update:     Sat 03 Oct 2026 21:32:06 +0000
Files and hashes:         1: DOpooCxSn4h1LGQt4NL--fXXoUo.crl (hash: h5huCSJRruWoM/qozh60rudMQfVhtNebCLp78J1xKVg=)
                          2: 6E69B614870111F194514C90ABEE528E.roa (hash: hGXMwyeITPCkvuW8Dizb4qlthJ4dx/zSl/E63jMkq4M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.crl
                          rsync://rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOpooCxSn4h1LGQt4NL--fXXoUo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 21:32:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2013 (0x7dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913025C, serialNumber=0CEA68A02C529F88752C642DE0D2FEF9F5D7A14A
        Validity
            Not Before: Sep 26 21:32:06 2026 GMT
            Not After : Oct  3 21:32:06 2026 GMT
        Subject: CN=6ab839d6-e7fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:95:e6:ce:e0:ab:34:be:9c:94:7b:ba:2d:7b:
                    da:46:9e:64:c9:07:55:05:2c:06:fa:05:cf:d4:03:
                    91:31:50:93:a9:ef:5c:8e:f8:d6:58:09:cb:0c:f0:
                    90:ca:64:f7:f7:6b:7f:1f:77:fa:77:9c:a5:75:fe:
                    c3:19:42:94:d2:2d:6a:97:d0:5d:cb:95:3f:fa:8b:
                    98:c9:6b:5d:e6:79:a8:00:21:94:95:f6:7c:88:be:
                    ce:b3:0d:44:d4:09:7b:9d:ea:f8:c0:00:73:00:46:
                    fb:39:31:59:cb:11:b6:d4:eb:c6:3c:cb:d2:82:66:
                    bd:68:ae:4c:0a:91:fc:16:04:13:52:4f:be:13:6b:
                    92:48:80:eb:e6:2f:4e:66:61:2c:c5:74:ea:86:53:
                    9b:14:1b:25:a7:7f:d1:97:55:9e:94:cb:64:2b:da:
                    91:5a:5c:36:a0:45:26:5c:de:d9:dd:a4:fb:7d:e3:
                    a5:be:11:9e:95:5f:20:53:5d:43:d5:ed:d1:38:e8:
                    b4:20:73:e7:3f:c2:5e:2f:d8:09:b5:fb:d7:73:5e:
                    dc:36:07:94:97:66:22:ea:27:d2:4b:5d:ef:c9:20:
                    28:f0:62:f1:06:d2:39:a5:e8:42:f1:79:a4:75:66:
                    09:17:da:ac:ad:86:8d:90:3c:c9:b9:31:82:28:2c:
                    09:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A9:E5:38:E9:7C:27:22:EA:B0:8B:BF:24:6C:6C:4C:A0:A1:7D:A4
            X509v3 Authority Key Identifier:
                keyid:0C:EA:68:A0:2C:52:9F:88:75:2C:64:2D:E0:D2:FE:F9:F5:D7:A1:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOpooCxSn4h1LGQt4NL--fXXoUo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:b1:7b:b0:4f:ab:fe:88:a1:fe:93:a6:97:69:86:6f:53:bb:
         02:f0:b7:94:0c:99:67:b5:72:71:a8:97:bb:f0:69:7f:d8:3e:
         5b:9c:bd:86:4f:5f:98:5f:b1:93:81:07:d4:be:40:cc:0b:2f:
         dd:94:90:4b:a8:e0:56:06:ba:40:65:49:72:58:e9:aa:16:f6:
         10:e1:ce:c7:ab:5e:e6:b4:40:1a:27:2a:8d:c1:dd:53:b8:80:
         90:8d:ea:7b:c0:a9:cc:2f:34:6c:cb:59:5a:8a:02:a6:a0:d2:
         57:6f:08:24:5b:d0:d8:6a:19:f9:78:24:b2:e6:6e:b1:7c:f3:
         99:97:6a:34:ff:b5:a7:0c:26:76:7f:06:ca:e8:4e:ea:37:a8:
         0f:64:bd:ea:20:7d:b6:a7:29:e7:c9:4f:2e:5c:fb:9a:16:51:
         b5:16:08:8c:63:54:5b:8a:bb:33:72:1e:61:0e:fc:3e:a0:b5:
         59:8e:d3:c1:0f:d3:39:61:2a:7a:2b:ef:57:ec:d3:89:35:02:
         ca:a0:90:31:26:35:a6:57:81:c3:b8:cf:52:c8:62:8a:26:6f:
         2f:8c:19:e7:ba:d0:8c:18:d0:4a:9f:29:b6:56:31:a7:21:d8:
         c3:8e:53:4d:95:b3:64:53:90:f8:ca:40:c7:6f:d8:93:75:51:
         bb:f1:ae:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 17:19:17 2026 by rpki-client