Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft
File:                     DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft (raw, json)
Hash identifier:          RAgD/j7ipVYVe6umR9msL8rlY0m+eGOpsB01Jr+drm4=
Subject key identifier:   DF:C1:99:17:B2:71:31:7F:E8:3E:F1:CF:21:E4:EB:AD:62:ED:9D:5E
Authority key identifier: 0C:AB:68:E0:69:08:3A:43:88:E8:FC:69:75:8F:04:59:62:FD:01:AF
Certificate issuer:       /CN=A9135D1F/serialNumber=0CAB68E069083A4388E8FC69758F045962FD01AF
Certificate serial:       C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft
Manifest number:          AF
Signing time:             Thu 23 Jul 2026 09:10:34 +0000
Manifest this update:     Thu 23 Jul 2026 09:10:34 +0000
Manifest next update:     Thu 30 Jul 2026 09:10:34 +0000
Files and hashes:         1: DKto4GkIOkOI6PxpdY8EWWL9Aa8.crl (hash: 63Gjlcc3s2MYbYmTtFfw0JgYKDsR7grCVuTBU6pnUIM=)
                          2: 08B79AD09C4111F0A9483031C4F9AE02.roa (hash: ubB2L+A+WYJ8AjqCrJi8J5YRaDtXq+7jruwojcEkTbc=)
                          3: 8EAC217CCA5611F089E70D44C4F9AE02.roa (hash: XXxBCtuO8EG8rucnL16es476f6BaiYAikV+U/4E8csQ=)
                          4: ABF8D808CA6D11F084F59728C4F9AE02.roa (hash: CpehDruHAKWYlilkVXEQKfS5FGCQ1Hj+67P+aQNX0UE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.crl
                          rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:10:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 201 (0xc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135D1F, serialNumber=0CAB68E069083A4388E8FC69758F045962FD01AF
        Validity
            Not Before: Jul 23 09:10:34 2026 GMT
            Not After : Jul 30 09:10:34 2026 GMT
        Subject: CN=6a61da8a-1292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fc:6d:89:82:a7:5a:97:51:05:f7:8d:5d:38:
                    ab:0f:0f:66:fb:08:4d:40:7a:b5:ac:69:47:df:91:
                    1e:12:61:c0:c9:cf:27:59:24:31:dc:1b:c2:bb:e6:
                    6b:d1:4a:f1:5d:dd:a1:a4:45:ac:40:9f:67:d3:b2:
                    6d:59:47:81:51:e3:30:a9:dc:50:22:f9:4e:f8:5b:
                    88:cb:b8:47:5f:53:b2:ba:45:ee:5e:20:f4:e1:06:
                    2f:c0:61:50:af:cb:68:ea:26:9b:91:82:e3:04:74:
                    01:f9:bd:36:c6:18:50:61:18:3b:62:4e:f9:f3:a9:
                    37:47:80:c2:55:cf:37:7e:80:bb:b3:37:07:a2:9f:
                    5b:f0:df:46:4e:44:25:1a:69:0e:c8:a2:fa:f8:70:
                    13:1b:92:22:94:ce:6c:4a:32:84:3e:0a:0b:a3:7f:
                    e5:ea:44:72:71:84:0e:0f:a8:bb:3e:c3:6d:bd:c3:
                    c2:98:71:40:64:4f:1e:8c:b8:4b:85:0c:d5:98:6a:
                    6d:69:29:15:cc:87:27:4c:17:20:98:cf:0d:d9:45:
                    f7:ec:ca:bb:85:cd:11:d0:1c:f4:ba:d0:95:b7:51:
                    d8:15:f5:3a:0a:63:35:17:77:5a:6a:96:f7:f8:82:
                    a6:a2:c5:3a:7c:4a:a7:a9:06:05:99:93:9c:c8:a1:
                    3a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:C1:99:17:B2:71:31:7F:E8:3E:F1:CF:21:E4:EB:AD:62:ED:9D:5E
            X509v3 Authority Key Identifier:
                keyid:0C:AB:68:E0:69:08:3A:43:88:E8:FC:69:75:8F:04:59:62:FD:01:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:f2:7f:c3:17:aa:e7:54:a2:64:a0:31:e9:71:cf:09:08:05:
         a1:dc:ae:57:cc:16:6a:8c:e2:b0:29:43:38:6b:18:79:c9:c2:
         93:ee:a5:10:76:56:80:f9:2e:b4:9e:e4:01:c8:4e:9b:5a:12:
         0f:c3:8b:6e:e5:d8:1c:ab:12:09:0a:b8:e0:86:7c:90:5c:07:
         ee:07:6e:46:d4:0f:8b:f2:a7:45:24:33:4e:e4:8f:a1:87:13:
         8a:0b:cf:a3:8e:2e:98:d5:93:27:ee:54:35:c0:a0:bf:8e:48:
         fa:d7:b1:c8:41:f4:29:8c:c1:f0:3c:1a:2c:9a:ba:b4:ed:bb:
         20:67:d9:fc:a6:80:f7:57:12:32:8f:e2:32:dd:78:a7:b8:f0:
         1a:93:e0:22:62:06:83:43:33:40:45:c8:aa:ed:41:6f:f3:6a:
         91:11:d5:ee:2c:42:f3:20:64:15:39:96:d3:79:f3:7d:c0:3f:
         a6:a8:76:cd:f6:ba:bb:0a:83:44:21:cf:d6:8e:4e:bb:2f:e8:
         44:30:0a:3b:63:b1:69:f0:4b:7e:1c:ed:a8:ca:e0:46:fc:1f:
         72:43:4b:75:8f:b9:de:1d:d3:6b:f8:a1:0c:d3:e6:a9:85:26:
         26:1c:73:38:f0:16:4f:bc:78:c8:95:01:af:a4:ad:8d:94:ad:
         47:d5:b7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:12:24 2026 by rpki-client