Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft
File:                     dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft (raw, json)
Hash identifier:          /c/ppd5+UUWExEUa94WuRSr/tjFE/WOUGUTVWYLQ3MI=
Subject key identifier:   4A:04:D1:0A:7F:94:AA:C4:CB:12:34:91:73:EB:CE:2C:D2:74:72:78
Authority key identifier: 75:C0:71:77:40:E9:18:7D:D5:35:11:61:39:01:2F:0F:31:D8:40:97
Certificate issuer:       /CN=A915060F/serialNumber=75C0717740E9187DD535116139012F0F31D84097
Certificate serial:       3574
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft
Manifest number:          356A
Signing time:             Wed 22 Jul 2026 14:17:24 +0000
Manifest this update:     Wed 22 Jul 2026 14:17:23 +0000
Manifest next update:     Wed 29 Jul 2026 14:17:23 +0000
Files and hashes:         1: dcBxd0DpGH3VNRFhOQEvDzHYQJc.crl (hash: +NuVrFHLtsPWrlzVXMcOyPv3B/A3VGGmc2oZkzJPOU8=)
                          2: FAB5FE6E101811EA9A30176EC4F9AE02.roa (hash: UVjNs6Ee7f+G00eKucHkD5VRAwAYtWeaPm0YXsnnb+4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.crl
                          rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 14:17:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13684 (0x3574)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915060F, serialNumber=75C0717740E9187DD535116139012F0F31D84097
        Validity
            Not Before: Jul 22 14:17:23 2026 GMT
            Not After : Jul 29 14:17:23 2026 GMT
        Subject: CN=6a60d0f3-8d23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:23:1e:03:d1:8a:de:64:10:03:0b:6c:cb:87:
                    13:5f:24:45:4a:37:d2:17:d2:40:a5:26:1e:dc:d3:
                    9c:da:a7:7f:df:2d:2a:1c:77:8b:04:54:13:bd:ad:
                    df:22:da:03:91:dc:c6:e6:bf:30:d7:cb:c3:f6:80:
                    47:80:0f:67:2a:a5:70:03:ac:2e:4a:bc:7f:94:db:
                    6b:7b:ee:d9:98:a4:e7:4f:39:43:56:5f:3a:78:e9:
                    06:f9:aa:6a:54:e6:42:b7:99:1c:ba:aa:00:cf:f6:
                    ff:cd:ad:5f:ae:10:f0:2c:1b:19:a7:3b:55:04:f3:
                    c2:2c:33:13:55:55:44:a3:9e:c6:bb:87:93:72:a8:
                    d1:91:e7:20:fe:47:d4:10:68:1d:b3:b7:1f:00:e5:
                    65:9b:36:93:93:ec:f1:0a:c2:b1:8c:36:a4:88:8b:
                    94:41:7f:f0:ba:9e:d9:0c:f1:73:a7:c1:98:bd:bf:
                    e6:0d:e2:05:d2:66:d8:0a:0e:e0:19:fc:99:88:24:
                    1b:ca:b5:4d:f1:9b:00:b2:4f:dc:b8:77:bf:dc:a7:
                    95:e6:c7:63:a9:19:c7:22:bb:75:67:85:cc:6b:88:
                    ae:5a:8d:cc:b5:58:c6:62:b1:e8:41:91:8f:dc:8d:
                    e9:b1:bb:85:c7:04:98:45:4c:4e:78:df:01:66:ea:
                    32:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:04:D1:0A:7F:94:AA:C4:CB:12:34:91:73:EB:CE:2C:D2:74:72:78
            X509v3 Authority Key Identifier:
                keyid:75:C0:71:77:40:E9:18:7D:D5:35:11:61:39:01:2F:0F:31:D8:40:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:be:b1:16:97:f6:27:67:4b:90:98:11:8d:d0:10:1d:af:93:
         1c:7a:7f:d4:af:0a:d8:93:5b:8d:8a:ef:9b:0b:69:20:80:14:
         fb:17:f8:f5:08:bd:1a:a5:12:36:d1:e4:8c:0c:ae:3c:a0:60:
         8f:94:f6:7c:ae:3c:e7:1b:d5:cd:5d:63:73:2b:f0:97:b4:e4:
         1e:ef:4e:bd:60:37:c4:c2:84:83:c0:84:dd:68:c4:5d:6e:b3:
         3d:0f:ff:c8:53:1d:76:8a:0f:65:55:d0:dd:44:73:25:fc:bd:
         5e:ea:57:ff:fe:e6:59:f4:3c:03:ff:d4:04:0f:98:84:aa:8c:
         47:04:83:e5:32:7b:ef:98:7e:cf:24:8d:36:ca:df:34:28:6b:
         c8:bc:d5:76:cc:53:f9:a9:2e:35:ee:8f:cf:c1:2f:40:eb:df:
         75:5c:71:cf:9b:42:5b:55:b5:d7:28:4b:77:f7:30:0c:ec:4e:
         b2:e7:1d:f2:c1:a4:03:be:23:2a:fa:d6:62:0c:f3:3e:8c:09:
         b6:2a:4c:ed:1c:f9:f5:4c:37:1d:6c:4f:88:7e:79:c5:3e:42:
         2e:2c:d0:b4:bd:35:66:ef:43:dd:e3:37:81:a6:17:2e:46:4a:
         a0:ee:b2:83:ef:dc:a7:7a:cc:7a:14:d1:f7:63:a1:1e:17:cc:
         04:fa:62:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:52:15 2026 by rpki-client