Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
File:                     dmhXuj98cotoBSWsQfp84qHwCS0.mft (raw, json)
Hash identifier:          ShZQ4u8BzL+NQxrI2Ocby+tIioWmqYk46zYb7G8LmUQ=
Subject key identifier:   52:27:DA:B6:E4:4E:E5:3B:0C:E0:A4:D7:7E:F1:F3:CE:88:F1:AA:B2
Authority key identifier: 76:68:57:BA:3F:7C:72:8B:68:05:25:AC:41:FA:7C:E2:A1:F0:09:2D
Certificate issuer:       /CN=A9148AC0/serialNumber=766857BA3F7C728B680525AC41FA7CE2A1F0092D
Certificate serial:       0243
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
Manifest number:          0230
Signing time:             Thu 23 Jul 2026 03:53:58 +0000
Manifest this update:     Thu 23 Jul 2026 03:53:58 +0000
Manifest next update:     Thu 30 Jul 2026 03:53:58 +0000
Files and hashes:         1: dmhXuj98cotoBSWsQfp84qHwCS0.crl (hash: rqRRo33F6mw1+Oqkvn9IgdVesgoQWJT1PMzgsqusjnU=)
                          2: 5C9259B631DA11EEBE28A546C4F9AE02.roa (hash: mxJVviu3Hptch60PLa/XEKp8ctUzhsRUSvChZ9yr8zw=)
                          3: 5D313B1C31DA11EEBE28A546C4F9AE02.roa (hash: 0AY62NK98rk5TGBieSIptVBTxWIVtw7dVGDsaIJvGI8=)
                          4: 47854B9031DB11EEA02CF647C4F9AE02.roa (hash: GGFJyDNXeKU9lT+bTxvAzkG1O7Dgf7yckhosYzf3b1Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.crl
                          rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:53:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 579 (0x243)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148AC0, serialNumber=766857BA3F7C728B680525AC41FA7CE2A1F0092D
        Validity
            Not Before: Jul 23 03:53:58 2026 GMT
            Not After : Jul 30 03:53:58 2026 GMT
        Subject: CN=6a619056-004a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b2:72:33:83:d8:b0:ce:e6:f5:1a:ab:c1:62:
                    db:44:e8:50:85:95:eb:6d:3b:1b:64:11:98:e7:9a:
                    31:42:9d:90:8f:fb:46:10:9e:e4:a8:3b:bc:4d:5e:
                    9a:93:89:bd:1b:be:b3:ff:49:4b:1a:4f:4d:e5:56:
                    42:f5:b1:25:e9:76:3e:21:70:98:1f:0c:b3:9b:01:
                    a0:21:6d:09:ed:f5:a1:b7:77:5c:a8:30:4a:de:07:
                    cb:d5:2b:84:d2:a3:e5:02:0a:be:a6:1d:01:70:46:
                    3f:24:80:0a:e6:69:96:01:5c:c1:ca:e7:ea:bf:24:
                    12:b0:3c:7f:9a:8a:88:ff:f3:2d:73:79:6b:da:f3:
                    ae:e8:53:84:f9:1e:0d:b5:94:b0:69:ee:c8:b0:6f:
                    b5:e4:b6:6c:c7:f3:d7:a2:cb:74:cf:94:32:05:5e:
                    3a:64:b2:59:54:38:f7:b8:30:90:36:d9:37:6e:3b:
                    4a:18:e3:9d:d5:10:17:88:6d:76:e5:c2:59:1f:b2:
                    81:98:24:b6:7c:8e:c0:df:59:d9:d3:9f:70:fc:4f:
                    1d:f9:b3:9b:b9:06:4b:03:eb:b8:d0:db:40:a3:62:
                    a6:5a:f3:a7:f8:6e:dd:94:28:e0:da:32:4c:a7:9a:
                    fa:52:b8:2b:22:98:11:86:27:80:ac:31:c1:13:82:
                    2d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:27:DA:B6:E4:4E:E5:3B:0C:E0:A4:D7:7E:F1:F3:CE:88:F1:AA:B2
            X509v3 Authority Key Identifier:
                keyid:76:68:57:BA:3F:7C:72:8B:68:05:25:AC:41:FA:7C:E2:A1:F0:09:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:98:98:39:5e:08:3d:ab:8a:57:8c:2d:36:1a:a6:97:2b:a3:
         c5:2b:17:3a:53:24:62:17:5a:eb:12:00:88:45:0a:00:03:dc:
         87:cd:3e:c7:7b:73:15:bb:e1:b5:8e:8d:86:e0:ac:f1:6b:88:
         73:c9:05:ab:75:03:eb:b7:47:6c:3d:8a:20:bb:3d:ca:ee:00:
         51:07:d9:a6:3f:79:06:b4:68:56:5b:d4:25:fd:d4:a9:87:f8:
         20:d0:d9:44:5e:be:d3:1b:29:b5:60:47:d5:d3:e6:9d:86:8f:
         94:72:35:04:c2:15:85:6b:92:15:d1:48:e2:b0:dc:37:25:37:
         3d:0b:4a:14:fc:36:77:0a:82:17:16:5d:1e:41:9f:59:4b:fa:
         53:a7:b4:58:5a:bf:05:d9:a8:1f:c2:e4:e6:d1:a0:a7:e9:17:
         50:2f:e7:ca:dc:f8:cf:0d:50:13:c8:70:e2:0d:56:cd:a6:f7:
         3d:4d:35:a8:10:af:4e:99:64:63:4b:29:c0:62:e7:25:8a:f1:
         ed:b4:2a:b1:74:d7:12:71:15:20:28:b4:88:7a:93:3f:d0:46:
         70:2f:45:78:8a:e7:f8:f9:ca:00:57:8c:f1:7b:ac:4b:9b:ef:
         9b:e3:3b:72:7e:af:39:3b:37:8a:e1:bc:63:ba:ed:05:51:34:
         b7:be:65:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:05:15 2026 by rpki-client