Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.mft
File:                     _D34EL_Cm_HPvwqvpWOX65tMq3c.mft (raw, json)
Hash identifier:          yK1YO//n9obj92Dh4kFquWHTb/l2Ba/V750LYDqNIFg=
Subject key identifier:   C8:64:C2:16:DA:47:BA:0F:2C:2A:87:EC:47:E2:EA:50:E4:30:D5:A0
Authority key identifier: FC:3D:F8:10:BF:C2:9B:F1:CF:BF:0A:AF:A5:63:97:EB:9B:4C:AB:77
Certificate issuer:       /CN=A916269D/serialNumber=FC3DF810BFC29BF1CFBF0AAFA56397EB9B4CAB77
Certificate serial:       0C38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D34EL_Cm_HPvwqvpWOX65tMq3c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.mft
Manifest number:          0C2F
Signing time:             Wed 22 Jul 2026 19:04:34 +0000
Manifest this update:     Wed 22 Jul 2026 19:04:34 +0000
Manifest next update:     Wed 29 Jul 2026 19:04:34 +0000
Files and hashes:         1: _D34EL_Cm_HPvwqvpWOX65tMq3c.crl (hash: AtJ50XcdllVr8v3hXIbs5YXIt1LD/dl6kB4fRNwXoXw=)
                          2: EDA2987A32A211EA87A1561DC4F9AE02.roa (hash: qvSQRjiPvV6nyfqr7VPuw4hGgv185GiVxr2rs0MDJ+0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.crl
                          rsync://rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D34EL_Cm_HPvwqvpWOX65tMq3c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:04:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3128 (0xc38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916269D, serialNumber=FC3DF810BFC29BF1CFBF0AAFA56397EB9B4CAB77
        Validity
            Not Before: Jul 22 19:04:34 2026 GMT
            Not After : Jul 29 19:04:34 2026 GMT
        Subject: CN=6a611442-7cec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:97:d9:a0:48:91:20:7c:d0:cc:75:62:ac:e4:
                    ff:96:73:6b:e8:47:82:a2:7d:f9:bf:a9:d0:4e:6b:
                    9a:04:af:c1:d5:a7:61:21:0b:ca:4c:80:1d:7c:0d:
                    f7:dc:c3:27:16:a5:46:2c:59:2f:d7:66:0b:f7:2e:
                    a1:b3:e9:8d:a5:ea:b5:3a:89:88:7d:8d:79:d5:78:
                    e9:fd:cf:5c:e0:5b:f4:21:1f:6d:82:62:e9:cb:5e:
                    11:4f:d6:66:60:d9:2c:f7:fe:71:90:7e:3d:fc:10:
                    23:b6:01:9f:26:17:75:96:f8:60:65:20:50:8c:05:
                    36:ab:0d:fa:0e:5b:99:15:60:42:77:a4:26:d3:2b:
                    77:57:31:6e:53:fe:81:a7:47:d2:ef:e7:ac:56:ec:
                    16:49:9a:c4:c2:db:2a:3d:83:28:cf:e7:e8:8a:f7:
                    e0:02:08:82:2c:fb:ee:bb:f5:67:f5:1b:d8:c3:cc:
                    76:7d:ab:a5:bc:04:49:e8:fa:78:e8:fb:d8:09:1f:
                    85:05:a8:9e:40:a9:00:0f:ad:24:ad:8b:47:40:de:
                    e1:5a:3f:48:b1:90:6b:27:05:c6:90:42:2c:11:e6:
                    6f:c8:40:d1:7e:12:5c:02:4e:05:a5:ee:7d:39:19:
                    00:e4:4b:b6:dd:6c:df:e1:15:95:c6:7d:cf:b0:07:
                    0f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:64:C2:16:DA:47:BA:0F:2C:2A:87:EC:47:E2:EA:50:E4:30:D5:A0
            X509v3 Authority Key Identifier:
                keyid:FC:3D:F8:10:BF:C2:9B:F1:CF:BF:0A:AF:A5:63:97:EB:9B:4C:AB:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D34EL_Cm_HPvwqvpWOX65tMq3c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:d9:45:d1:fd:6f:c6:0f:8d:f4:05:b2:84:07:ed:76:c1:6d:
         53:cf:37:a9:d9:50:12:72:fe:0c:bd:0b:1d:47:16:b2:07:bc:
         f6:71:03:bc:d5:1a:4d:21:2a:de:ed:36:d8:a2:09:00:63:e2:
         22:5a:90:fd:ca:4e:e3:1a:cb:cf:51:31:43:5b:0b:ad:6a:a6:
         c8:b7:78:71:da:48:00:6c:30:60:af:15:45:e5:4d:b1:96:ed:
         fc:24:84:47:c4:21:71:56:5f:be:c6:e4:79:8c:b3:15:27:6c:
         70:77:53:45:e2:e8:e4:0b:b5:f4:d9:07:70:0e:c0:43:8f:10:
         ec:d0:cd:b8:1b:72:83:14:8a:b6:59:95:9f:4e:c7:c0:18:dd:
         05:d4:3d:50:d8:d1:ff:6a:fe:90:89:f8:85:89:a1:bd:36:8e:
         d6:23:c0:e3:7d:88:a6:27:5d:91:7d:33:a3:41:29:22:10:3e:
         6f:50:65:f7:60:a8:24:ce:6a:7f:9d:10:8e:ae:68:46:2a:3b:
         30:15:d0:18:06:01:c2:0a:e0:88:6c:cb:b5:1a:1e:1d:9a:a5:
         79:37:3b:af:7f:26:a9:1c:57:2f:6b:7a:ee:9f:a5:58:69:94:
         f9:b0:17:e8:4b:cd:2c:58:71:b7:f9:90:c2:e3:96:6c:b9:8b:
         7a:7c:f0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:23:56 2026 by rpki-client