Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft
File:                     dRH-79yX09DgVRW7QMF431FGqcQ.mft (raw, json)
Hash identifier:          IQ5BJvkA1nwT7jM3f5ObxRHaRSg8xiTeZulgdA6pm4w=
Subject key identifier:   3F:C9:7F:02:6A:8F:0E:AF:8F:50:12:FB:B6:28:E4:FC:49:E7:16:AB
Authority key identifier: 75:11:FE:EF:DC:97:D3:D0:E0:55:15:BB:40:C1:78:DF:51:46:A9:C4
Certificate issuer:       /CN=A9131F8A/serialNumber=7511FEEFDC97D3D0E05515BB40C178DF5146A9C4
Certificate serial:       0F3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRH-79yX09DgVRW7QMF431FGqcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft
Manifest number:          0F29
Signing time:             Wed 22 Jul 2026 17:46:24 +0000
Manifest this update:     Wed 22 Jul 2026 17:46:24 +0000
Manifest next update:     Wed 29 Jul 2026 17:46:24 +0000
Files and hashes:         1: dRH-79yX09DgVRW7QMF431FGqcQ.crl (hash: NViIW2LeiAqbUdpR1S/W623wL0UBP0tN22cByWXY6hM=)
                          2: 251E7880A1FA11E9AF723E1BC4F9AE02.roa (hash: EgdNpKJv5qTrYsCD4ruXe4GnFpA9Meqmqv0UvPzJUpo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.crl
                          rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRH-79yX09DgVRW7QMF431FGqcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:46:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3901 (0xf3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131F8A, serialNumber=7511FEEFDC97D3D0E05515BB40C178DF5146A9C4
        Validity
            Not Before: Jul 22 17:46:24 2026 GMT
            Not After : Jul 29 17:46:24 2026 GMT
        Subject: CN=6a6101f0-89d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:97:dc:bc:9a:68:63:06:d2:c2:c0:34:bf:86:
                    cd:a8:c3:59:66:b8:79:e4:97:bf:94:73:71:de:7b:
                    6f:1c:09:16:9e:e1:14:7d:be:29:c8:a0:5d:b4:a3:
                    33:63:4c:5c:13:c9:34:02:6c:9b:fd:92:8d:2a:79:
                    81:29:52:cd:67:79:7c:b0:15:69:b8:f1:67:02:da:
                    c0:e6:80:ed:16:74:fb:ba:12:f0:f7:45:c0:8b:bb:
                    80:46:a5:62:dd:0e:23:20:b8:4a:3c:88:c8:e2:aa:
                    2b:78:76:02:09:74:e5:9c:52:57:52:c7:1f:c1:b6:
                    f0:f8:ff:3c:a5:6c:f2:bd:f9:ba:53:cd:8d:b3:12:
                    df:fd:f8:c4:52:f3:e3:de:d5:2e:0f:47:2e:37:6f:
                    2d:19:a3:f8:ff:4b:97:93:75:73:a7:0b:9b:54:e1:
                    85:fa:3c:ac:e0:dc:1f:22:c3:fe:a9:aa:ca:93:a6:
                    d1:4f:66:d1:8a:eb:31:cb:29:24:8d:8d:e2:bc:fc:
                    a9:86:4f:63:9f:a6:df:e3:57:2d:0e:bd:8d:1e:22:
                    56:3b:6b:d9:ca:cc:42:5c:37:44:ff:cf:5b:8b:9d:
                    21:13:98:86:15:bd:bf:8a:e8:e1:5c:b0:f0:35:c9:
                    8c:93:b9:f2:db:70:5f:f7:c0:83:6c:d4:1c:64:dc:
                    62:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C9:7F:02:6A:8F:0E:AF:8F:50:12:FB:B6:28:E4:FC:49:E7:16:AB
            X509v3 Authority Key Identifier:
                keyid:75:11:FE:EF:DC:97:D3:D0:E0:55:15:BB:40:C1:78:DF:51:46:A9:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRH-79yX09DgVRW7QMF431FGqcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:71:3d:0c:ee:90:02:79:94:51:9f:1b:77:f6:20:43:30:2c:
         cf:4c:29:ec:db:3a:ea:a4:50:e4:be:8d:2a:e9:85:fe:6a:28:
         0f:60:a1:76:97:9c:24:16:32:77:4b:04:74:7a:52:fe:8c:59:
         04:2e:ce:11:cb:f1:45:00:19:25:65:de:b9:98:f1:bd:9a:f7:
         9b:7c:21:71:2b:f0:ae:89:80:bb:64:7a:33:75:80:9d:59:74:
         cc:a7:c5:51:d1:7c:72:6e:65:a1:32:8c:a7:36:a4:b2:b3:ce:
         2f:cc:3a:57:cd:4b:b9:0c:67:7d:fd:0b:35:0e:1f:6a:99:68:
         19:24:74:30:33:d5:8b:e2:87:59:61:4c:51:98:51:15:98:c2:
         11:3a:98:07:fb:cf:7d:f3:8e:49:de:04:65:be:5d:b0:3d:e3:
         ef:59:d7:38:2d:b9:1c:0c:46:a6:1c:18:ee:07:37:4e:ff:f0:
         2a:6d:a7:4e:af:9c:29:86:b7:56:d2:ed:90:c9:e5:ef:77:e9:
         5a:71:88:68:01:b0:77:7b:85:12:05:b1:3b:c5:b6:bb:d9:ed:
         42:53:7f:46:ed:9c:14:1b:66:2c:0b:7a:46:62:20:9a:17:d9:
         de:68:e0:05:fc:16:dc:6e:8d:11:23:2c:24:8f:fb:82:6f:db:
         5a:bd:84:9e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDz0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzFGOEExMTAvBgNVBAUTKDc1MTFGRUVGREM5N0QzRDBFMDU1MTVCQjQwQzE3OERG
NTE0NkE5QzQwHhcNMjYwNzIyMTc0NjI0WhcNMjYwNzI5MTc0NjI0WjAYMRYwFAYD
VQQDEw02YTYxMDFmMC04OWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAj5fcvJpoYwbSwsA0v4bNqMNZZrh55Je/lHNx3ntvHAkWnuEUfb4pyKBdtKMz
Y0xcE8k0Amyb/ZKNKnmBKVLNZ3l8sBVpuPFnAtrA5oDtFnT7uhLw90XAi7uARqVi
3Q4jILhKPIjI4qoreHYCCXTlnFJXUscfwbbw+P88pWzyvfm6U82NsxLf/fjEUvPj
3tUuD0cuN28tGaP4/0uXk3VzpwubVOGF+jys4NwfIsP+qarKk6bRT2bRiusxyykk
jY3ivPyphk9jn6bf41ctDr2NHiJWO2vZysxCXDdE/89bi50hE5iGFb2/iujhXLDw
NcmMk7ny23Bf98CDbNQcZNxiNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD/JfwJq
jw6vj1AS+7Yo5PxJ5xarMB8GA1UdIwQYMBaAFHUR/u/cl9PQ4FUVu0DBeN9RRqnE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUY4QS80MTI3Q0UzRUEx
RjgxMUU5QTE4ODNGMTdDNEY5QUUwMi9kUkgtNzl5WDA5RGdWUlc3UU1GNDMxRkdx
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RSSC03OXlYMDlEZ1ZSVzdRTUY0MzFGR3FjUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MUY4QS80MTI3Q0UzRUExRjgxMUU5QTE4ODNGMTdDNEY5QUUwMi9kUkgtNzl5WDA5
RGdWUlc3UU1GNDMxRkdxY1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAM3E9DO6QAnmUUZ8bd/YgQzAsz0wp7Ns66qRQ5L6NKumF/mooD2ChdpecJBYy
d0sEdHpS/oxZBC7OEcvxRQAZJWXeuZjxvZr3m3whcSvwromAu2R6M3WAnVl0zKfF
UdF8cm5loTKMpzaksrPOL8w6V81LuQxnff0LNQ4faploGSR0MDPVi+KHWWFMUZhR
FZjCETqYB/vPffOOSd4EZb5dsD3j71nXOC25HAxGphwY7gc3Tv/wKm2nTq+cKYa3
VtLtkMnl73fpWnGIaAGwd3uFEgWxO8W2u9ntQlN/Ru2cFBtmLAt6RmIgmhfZ3mjg
BfwW3G6NESMsJI/7gm/bWr2Eng==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:03:01 2026 by rpki-client