Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft
File:                     DHYrLJAks0yYhILx1x10mufcSus.mft (raw, json)
Hash identifier:          RDawxRO+vocV2D0RvcNgWaqN4v4h7FctHiO3fNCWknM=
Subject key identifier:   FE:02:18:CB:7B:29:32:DE:8A:44:E2:3D:D9:E2:CA:37:BE:F2:29:BF
Authority key identifier: 0C:76:2B:2C:90:24:B3:4C:98:84:82:F1:D7:1D:74:9A:E7:DC:4A:EB
Certificate issuer:       /CN=A91348C9/serialNumber=0C762B2C9024B34C988482F1D71D749AE7DC4AEB
Certificate serial:       01F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft
Manifest number:          01D1
Signing time:             Thu 23 Jul 2026 05:09:23 +0000
Manifest this update:     Thu 23 Jul 2026 05:09:23 +0000
Manifest next update:     Thu 30 Jul 2026 05:09:23 +0000
Files and hashes:         1: DHYrLJAks0yYhILx1x10mufcSus.crl (hash: ZAQNxQtImeej8NMa8M8C94qtFdA2my3f5ohG36UDAKo=)
                          2: 5D31D17ACE9811EE9392467BC4F9AE02.roa (hash: z+lohyQaMeb0DYcM3/qn4iEQ+VpTj1TLsiVBPUy6pZk=)
                          3: 79F7221E892911EF896D1145C4F9AE02.roa (hash: 4HsEjdA6ll0rAi2M5nFxa1SGJVN7pNCKPiFzJN7imik=)
                          4: F278C026892911EFB08D7746C4F9AE02.roa (hash: wlRisXvx0zTP/TvUTz15M4hS2Jw5htErhvvetPP2grU=)
                          5: 9B6126AEE1D811EF881A2765C4F9AE02.roa (hash: phsa0aOE8eqCOpQqL6MkEfoEn022+mvXBZ0Y/k/Gb6A=)
                          6: F8B24A3C127911F09BCB8B7AC4F9AE02.roa (hash: 1cBkJAATgAnAWpkL5ephYU2tTfXe7A7jghvap9dsu7Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.crl
                          rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:09:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 499 (0x1f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91348C9, serialNumber=0C762B2C9024B34C988482F1D71D749AE7DC4AEB
        Validity
            Not Before: Jul 23 05:09:23 2026 GMT
            Not After : Jul 30 05:09:23 2026 GMT
        Subject: CN=6a61a203-d5ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:70:15:d2:7c:83:e4:3f:52:02:55:23:29:aa:
                    39:3d:d4:62:f2:fe:ca:45:ea:b3:8f:fe:6c:74:be:
                    a1:1c:cc:40:e1:29:03:f1:d2:21:55:21:96:aa:c0:
                    77:9f:ac:49:8c:1b:4a:9d:87:91:5b:38:1c:87:50:
                    f7:d0:6b:f9:26:b8:c0:1e:22:74:d4:11:8f:0a:20:
                    54:e8:da:8e:51:f2:23:74:31:0b:f4:43:aa:eb:01:
                    7e:73:5a:75:01:fb:dd:66:6b:de:15:d3:d7:81:67:
                    9b:eb:20:f7:ef:56:4f:55:6e:ac:19:5e:72:f9:c6:
                    b1:1d:1c:48:c9:11:56:58:e1:d6:bb:38:12:d2:bc:
                    c1:44:cf:17:fa:3f:9c:df:a4:68:27:fd:f9:a5:35:
                    84:85:ef:d3:0c:9c:7d:69:97:8a:a4:0c:c1:45:ef:
                    35:8f:d1:49:5b:6d:1f:d3:64:f4:33:38:84:3d:d6:
                    9e:9f:95:0d:b0:d6:da:fb:ef:ce:30:66:0d:2e:e9:
                    ca:aa:94:55:f0:18:f2:30:7c:2b:75:eb:e8:7e:8a:
                    0e:be:a6:39:1e:7e:9a:ab:dd:3d:36:89:2d:31:db:
                    f6:f7:8c:2d:f6:29:67:e7:6a:0b:48:ce:b7:d0:90:
                    60:d4:09:19:d3:43:57:2b:8b:ed:c9:8a:01:4c:e4:
                    22:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:02:18:CB:7B:29:32:DE:8A:44:E2:3D:D9:E2:CA:37:BE:F2:29:BF
            X509v3 Authority Key Identifier:
                keyid:0C:76:2B:2C:90:24:B3:4C:98:84:82:F1:D7:1D:74:9A:E7:DC:4A:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:c3:f6:ef:4b:88:0f:a6:64:41:12:5f:1b:2e:15:ad:1c:a3:
         6a:da:e2:cd:09:da:74:5e:21:c1:42:27:aa:e9:82:fe:60:9d:
         85:97:e3:7b:26:32:49:1c:03:43:ff:b2:f2:3e:72:c2:e8:ec:
         28:3b:c4:5c:0c:4a:3b:bb:e5:f2:56:dc:c7:ac:41:d3:f3:ce:
         61:b0:fb:53:52:19:81:21:05:ae:ee:82:36:37:da:47:c2:fd:
         36:5f:0d:44:b8:60:64:7d:87:a7:85:07:15:c5:88:ee:70:9b:
         0c:88:82:0e:d5:f2:0f:4d:f9:dc:c0:b0:ac:c5:dd:b6:aa:38:
         a8:b2:d2:34:f3:05:34:fc:5d:11:75:0d:e5:ef:5d:77:7d:9b:
         01:3a:30:04:ea:ec:18:ab:e6:dc:32:5e:28:d7:cb:6a:0d:17:
         db:e0:4d:5d:f1:65:8f:80:ad:21:07:83:4d:9f:53:8e:63:d6:
         56:82:f4:40:4a:ee:42:b4:79:00:c2:fd:0d:74:a6:01:e8:fe:
         67:b2:c5:2f:4a:8c:6d:b8:11:5d:65:f8:d1:e6:53:fe:21:a0:
         23:cd:fe:1a:b7:77:ef:86:c4:f7:25:eb:7e:18:f7:86:3d:33:
         03:e9:1b:bf:d4:8d:80:96:13:ac:a6:91:aa:40:52:d8:f4:4b:
         9f:18:46:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:11:59 2026 by rpki-client