Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft
File:                     D6nlM-haGDwUUwAIqLliP4VtXes.mft (raw, json)
Hash identifier:          TzNzvrP385bqupWTf7Myv4AT679egLNVV0WAljEFn0I=
Subject key identifier:   D2:DC:2B:EE:9D:28:97:0F:78:AD:48:F8:C3:11:49:DB:9C:21:D8:EF
Authority key identifier: 0F:A9:E5:33:E8:5A:18:3C:14:53:00:08:A8:B9:62:3F:85:6D:5D:EB
Certificate issuer:       /CN=A9160455/serialNumber=0FA9E533E85A183C14530008A8B9623F856D5DEB
Certificate serial:       0D12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D6nlM-haGDwUUwAIqLliP4VtXes.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft
Manifest number:          0CED
Signing time:             Wed 22 Jul 2026 18:42:41 +0000
Manifest this update:     Wed 22 Jul 2026 18:42:41 +0000
Manifest next update:     Wed 29 Jul 2026 18:42:41 +0000
Files and hashes:         1: D6nlM-haGDwUUwAIqLliP4VtXes.crl (hash: DdeEpH8xV+oAWRDD9gNFrhlbeA7ORSX2HkRC8jLdW90=)
                          2: AADE9E9C5B9511EEA8190143C4F9AE02.roa (hash: ZfQ6vCvmZcjNcIncHT507Vz1iEI/7E5CygjpXRzzNSI=)
                          3: 49E515C2C0F211EEA14E0122C4F9AE02.roa (hash: p394FBhliDkNgoB99ryNw/y0SY40oLYwgw+ljbC9OLc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.crl
                          rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D6nlM-haGDwUUwAIqLliP4VtXes.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:42:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3346 (0xd12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160455, serialNumber=0FA9E533E85A183C14530008A8B9623F856D5DEB
        Validity
            Not Before: Jul 22 18:42:41 2026 GMT
            Not After : Jul 29 18:42:41 2026 GMT
        Subject: CN=6a610f21-5f0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b2:8d:5a:3b:5a:0d:a9:6d:3f:51:6d:ed:3b:
                    4e:26:f1:e5:00:5d:54:48:f9:af:71:22:09:54:d8:
                    ad:88:c3:b1:40:ae:41:bc:d0:ac:c5:58:87:19:26:
                    74:3e:c1:81:ba:af:a0:d4:10:d4:37:95:60:49:16:
                    0c:4c:d8:27:86:6e:5d:52:9e:7e:6f:51:87:fa:75:
                    53:23:88:94:2d:07:89:de:56:ff:8e:50:eb:fd:70:
                    6b:d6:b1:87:54:74:6e:9c:09:22:d9:e4:44:ff:b6:
                    97:f0:63:70:7e:72:05:f8:9c:17:d8:65:8c:22:95:
                    30:a7:7a:a5:21:53:ed:e7:70:79:8f:c4:9f:40:ea:
                    1c:59:27:6e:36:53:27:ad:30:7a:cf:3a:29:9e:0f:
                    a1:cb:61:17:09:4b:3f:72:8a:33:4d:85:61:54:61:
                    f9:c3:09:eb:65:0f:1d:f8:b4:ef:71:b7:3d:44:92:
                    21:3c:db:f6:9e:a9:4e:46:db:39:67:09:7a:71:f8:
                    09:cb:ba:28:c7:4f:cb:75:1d:bb:b9:3d:10:ca:42:
                    45:c5:22:12:de:0a:32:bf:cb:90:62:70:62:47:cb:
                    66:ab:ed:5d:e8:bf:9f:83:52:e0:fd:56:34:8f:f5:
                    55:1a:4c:bf:e8:dc:2a:47:33:9d:ee:a4:26:ea:ad:
                    90:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:DC:2B:EE:9D:28:97:0F:78:AD:48:F8:C3:11:49:DB:9C:21:D8:EF
            X509v3 Authority Key Identifier:
                keyid:0F:A9:E5:33:E8:5A:18:3C:14:53:00:08:A8:B9:62:3F:85:6D:5D:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D6nlM-haGDwUUwAIqLliP4VtXes.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:a1:68:42:3b:aa:6b:8f:10:ad:db:48:c5:6f:d5:b5:4f:1e:
         6f:eb:c9:67:53:ae:19:4b:fe:a8:55:3b:47:ab:18:94:a4:a0:
         0e:d3:a7:9c:20:62:8b:85:a1:f0:34:01:c5:2a:89:1b:63:cc:
         d0:44:37:84:2c:a4:8f:9d:57:1e:d6:3a:ac:52:a2:55:38:d3:
         fe:0c:12:25:3c:42:b4:d7:7d:ad:91:90:38:4f:6a:cf:eb:e0:
         6a:01:1b:12:1b:ac:e7:2d:54:9c:9b:eb:a0:cc:02:e9:dc:5d:
         8c:ce:c3:0b:27:09:19:e1:48:89:80:24:8d:13:c7:6e:7f:91:
         76:60:01:d2:61:7f:ad:11:1a:96:72:00:89:a8:5e:2e:62:0e:
         1f:d6:58:c6:22:a3:9e:d2:0b:94:6e:b9:9a:a3:96:1b:ae:4a:
         03:f2:ab:b7:10:ed:7b:98:25:7d:07:59:85:b5:bb:de:d5:20:
         15:63:c8:15:be:c1:b3:49:96:2c:c2:c5:da:d0:cf:e9:05:d8:
         0e:a9:dd:89:db:64:e7:a1:94:3b:0c:f7:32:99:30:c3:cb:f9:
         9a:3e:ba:10:61:64:14:d6:15:28:43:16:00:38:8f:f6:fa:8f:
         76:57:fe:79:24:1c:26:63:73:28:b6:2e:d4:30:e5:2a:1c:93:
         77:13:b6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:12:37 2026 by rpki-client