Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft
File:                     M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft (raw, json)
Hash identifier:          /KfJnjx+fzVElEY+lT1QVo4SsAExvqcruFPMH19rSTw=
Subject key identifier:   CA:48:80:A8:AB:40:44:52:D6:21:DA:F6:F0:59:8F:2C:BD:72:BB:E8
Authority key identifier: 33:B0:D5:68:95:04:83:6C:11:E9:EC:DD:0D:11:9C:05:8D:3F:76:0B
Certificate issuer:       /CN=A9154961/serialNumber=33B0D5689504836C11E9ECDD0D119C058D3F760B
Certificate serial:       0335
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7DVaJUEg2wR6ezdDRGcBY0_dgs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft
Manifest number:          032C
Signing time:             Thu 23 Jul 2026 02:02:26 +0000
Manifest this update:     Thu 23 Jul 2026 02:02:25 +0000
Manifest next update:     Thu 30 Jul 2026 02:02:25 +0000
Files and hashes:         1: M7DVaJUEg2wR6ezdDRGcBY0_dgs.crl (hash: SHH/CbAkQ/oRmHSTjw8Fo1y5HzljQiw4kYHdShm+mNE=)
                          2: 7359F5C43A4A11ED9B8FF35AC4F9AE02.roa (hash: RE9FWoshhFwVBEKSS3waEgRjXTpLrxodiVIl1CwWm+w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.crl
                          rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7DVaJUEg2wR6ezdDRGcBY0_dgs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 02:02:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 821 (0x335)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154961, serialNumber=33B0D5689504836C11E9ECDD0D119C058D3F760B
        Validity
            Not Before: Jul 23 02:02:25 2026 GMT
            Not After : Jul 30 02:02:25 2026 GMT
        Subject: CN=6a617631-b0bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b8:e3:e5:f8:99:97:76:0b:b1:ce:f6:11:a9:
                    55:cb:49:21:f7:ff:57:46:6f:25:d6:f5:94:c2:51:
                    59:7d:b3:9e:02:07:e3:92:9c:ed:87:2b:7f:5c:41:
                    3a:40:35:2e:ec:67:59:17:ec:89:75:9a:5f:3e:a6:
                    51:4f:a3:7f:63:38:c5:72:70:05:b5:d1:15:b2:85:
                    a6:60:ce:98:37:bb:95:07:f6:3a:d2:54:3a:10:42:
                    b0:89:cb:78:f6:cb:e5:89:09:c6:a2:c3:54:82:00:
                    54:0b:32:79:90:d1:00:42:fc:32:89:1c:20:57:d0:
                    71:a8:61:a3:5c:67:c3:94:d9:e6:61:58:9f:a1:bb:
                    2f:75:e7:fe:1d:de:7c:7b:de:fb:60:1f:8c:05:ea:
                    61:9d:db:05:5e:df:6d:57:fe:d9:3b:ed:e3:32:bb:
                    d5:b3:24:0d:52:1c:52:99:f1:a4:e2:16:48:c4:04:
                    35:9d:20:e0:e7:32:3a:c8:89:21:8b:34:90:d4:3e:
                    a4:d6:47:74:42:df:e3:6a:24:c1:8a:17:51:69:2c:
                    14:c2:52:44:c3:f3:01:d5:f2:02:56:33:89:92:0d:
                    b8:f1:f8:46:f3:82:91:be:8d:ee:31:e2:54:b4:0a:
                    2e:1a:58:49:72:66:7d:a4:cf:bb:8b:e3:f7:59:e3:
                    85:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:48:80:A8:AB:40:44:52:D6:21:DA:F6:F0:59:8F:2C:BD:72:BB:E8
            X509v3 Authority Key Identifier:
                keyid:33:B0:D5:68:95:04:83:6C:11:E9:EC:DD:0D:11:9C:05:8D:3F:76:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7DVaJUEg2wR6ezdDRGcBY0_dgs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:8a:cb:80:07:f9:8f:0a:07:68:e5:6e:6c:d2:63:e7:c4:45:
         5a:f1:e5:42:0b:22:95:2b:54:34:d8:3d:f9:c2:9d:2e:40:de:
         e3:d3:7d:73:69:46:86:e0:94:09:47:47:78:b7:92:dc:4b:c3:
         13:6f:c5:c9:94:5e:d1:c5:45:e9:c2:de:a6:97:3b:d3:8b:3e:
         ac:b0:23:e0:43:11:03:2f:21:98:01:fc:41:85:c9:74:05:5a:
         85:53:db:d7:ea:b8:82:7d:b7:48:49:61:04:86:9f:bb:65:a3:
         1d:fe:20:d9:cf:a2:04:fa:b9:89:4c:98:33:07:92:47:1d:88:
         d8:de:04:7e:a8:5e:97:8f:08:e9:47:dc:c3:7b:c8:90:c6:09:
         02:bb:71:cb:f2:9c:5b:9a:19:f5:7f:e3:b2:9c:98:a3:af:85:
         dd:61:08:7f:f6:c4:8d:ad:bc:78:51:65:f1:4f:49:ca:ff:55:
         9b:eb:62:35:db:d3:ca:9a:c6:75:98:1a:21:0b:1a:8b:c8:e3:
         f7:52:64:ba:45:35:83:95:05:72:a4:68:9d:4f:43:0a:31:51:
         e1:89:59:ff:c2:6b:3d:24:9f:51:c7:fe:d7:5e:b3:7d:ca:0d:
         32:bc:17:64:d9:fa:74:fe:b1:b1:a0:5b:80:1b:82:de:0e:6c:
         c0:8b:68:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:14:24 2026 by rpki-client