Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft
File:                     dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft (raw, json)
Hash identifier:          gJGt8KY8/UwpsqwbLpA8Icb4fPC0IWUGzQ1JKleT1No=
Subject key identifier:   17:D8:A6:47:07:E5:C0:D3:A8:C2:38:F7:5B:0E:A0:E5:80:78:EA:A3
Authority key identifier: 77:06:D0:88:E9:21:DE:8B:01:EB:BA:06:20:1D:04:15:0E:86:4D:04
Certificate issuer:       /CN=A91557BA/serialNumber=7706D088E921DE8B01EBBA06201D04150E864D04
Certificate serial:       0D31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft
Manifest number:          0D24
Signing time:             Wed 22 Jul 2026 18:24:00 +0000
Manifest this update:     Wed 22 Jul 2026 18:23:59 +0000
Manifest next update:     Wed 29 Jul 2026 18:23:59 +0000
Files and hashes:         1: dwbQiOkh3osB67oGIB0EFQ6GTQQ.crl (hash: J9qpB0CAhikq7TC8AeQno66QPBB95rLmt+szVFDi/NQ=)
                          2: D68289BE984B11ECB04DAB38C4F9AE02.roa (hash: 2fSA/Xuks+HjnmqBwbLjNPpAQRgRqBJVlHexUjGLyjE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.crl
                          rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:23:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3377 (0xd31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91557BA, serialNumber=7706D088E921DE8B01EBBA06201D04150E864D04
        Validity
            Not Before: Jul 22 18:23:59 2026 GMT
            Not After : Jul 29 18:23:59 2026 GMT
        Subject: CN=6a610ac0-0b67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2c:2d:92:70:5c:94:ab:8d:da:8a:7f:51:78:
                    16:c7:15:c1:cf:07:37:05:b8:44:3d:b1:d2:2e:f5:
                    ad:0c:95:cc:52:56:70:47:2e:dc:3e:dc:cf:43:be:
                    f7:8d:59:47:e9:f0:5d:66:f7:dc:f3:32:a4:03:b4:
                    3e:40:63:b3:00:36:71:9d:4a:35:06:9a:2a:c8:79:
                    78:b4:5b:56:ce:fa:e6:87:a1:01:6b:12:fe:f1:a2:
                    69:72:92:e1:cc:e7:a0:c3:15:cc:24:7d:81:d1:01:
                    d0:dd:a7:92:be:d2:8c:ad:1b:6e:e9:be:6d:4d:f2:
                    2c:53:81:d4:90:0e:1b:70:d1:5c:3d:3b:1f:99:b5:
                    56:80:07:37:2b:38:dc:fa:fb:d2:22:11:31:b4:e2:
                    af:ad:9b:f9:a6:db:0c:c9:7b:ad:6f:fa:77:38:d1:
                    d0:b2:c3:8a:f7:7a:44:ba:91:72:51:ea:b2:a0:5f:
                    59:a0:e8:0a:c0:d3:e3:62:cb:68:d1:93:5c:f4:46:
                    c6:67:fa:e9:63:41:ee:a3:97:1e:b9:73:86:fb:16:
                    cc:90:e3:6f:27:72:b7:a5:59:52:91:0a:9a:d0:87:
                    ec:ef:97:41:59:6e:0f:ce:79:0f:da:b8:34:1a:a7:
                    20:1b:b6:cb:d2:c1:01:71:ae:f3:11:71:e6:b7:61:
                    9e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:D8:A6:47:07:E5:C0:D3:A8:C2:38:F7:5B:0E:A0:E5:80:78:EA:A3
            X509v3 Authority Key Identifier:
                keyid:77:06:D0:88:E9:21:DE:8B:01:EB:BA:06:20:1D:04:15:0E:86:4D:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:a4:db:79:37:72:79:7a:9d:1b:fb:c0:a1:38:37:9a:42:68:
         57:2b:34:6d:02:cb:07:42:a7:79:c4:8a:ba:85:5d:a7:8d:f5:
         24:f8:7d:50:41:56:3f:29:4e:9e:97:c2:ea:85:cf:c0:70:00:
         d0:2b:36:fb:bd:ac:55:7f:e5:79:79:77:c5:fd:52:01:1b:6a:
         df:8a:1f:39:d6:86:1e:7b:e2:dc:05:7a:fe:9f:c4:9a:8e:ae:
         26:30:b5:48:2e:61:c5:3c:b3:b0:6a:f8:27:72:81:5b:22:64:
         79:f2:8a:f6:5f:e3:b2:df:a0:d1:4c:72:34:d5:d8:eb:44:0e:
         13:6c:32:5d:1e:b8:5f:47:58:ab:d2:fb:c6:41:4d:35:da:0a:
         eb:71:e2:9a:8f:c0:59:d4:77:f7:d8:90:29:16:0c:0b:90:15:
         6f:4a:33:b0:b1:c8:c5:be:69:16:df:9a:f5:13:3f:41:ca:b7:
         2f:26:09:ae:ee:88:3d:90:e8:de:ad:f9:76:d3:67:d6:e2:3c:
         1e:78:b0:b6:89:56:bc:67:3c:3b:d7:bb:94:a8:ba:45:a9:5f:
         2c:d3:fa:c0:f6:f8:b9:cd:b4:25:c1:25:fb:0d:5a:de:a0:e2:
         ff:7f:b3:33:04:e6:c4:60:cd:b2:f5:48:3e:f1:1d:3f:b4:a7:
         fc:b9:58:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:43:23 2026 by rpki-client