Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft
File:                     dw8omR3mSPiWHFfA3NrX1YtKafQ.mft (raw, json)
Hash identifier:          bKmSE7EOT2HIyuHR/pvDYkXCMT11QVgUn2mf3j9zDIg=
Subject key identifier:   B1:96:57:FE:8F:84:AC:A7:EE:A3:3E:80:4A:AD:53:65:53:21:9C:C7
Authority key identifier: 77:0F:28:99:1D:E6:48:F8:96:1C:57:C0:DC:DA:D7:D5:8B:4A:69:F4
Certificate issuer:       /CN=A916699C/serialNumber=770F28991DE648F8961C57C0DCDAD7D58B4A69F4
Certificate serial:       0A71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dw8omR3mSPiWHFfA3NrX1YtKafQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft
Manifest number:          0A61
Signing time:             Wed 22 Jul 2026 20:03:05 +0000
Manifest this update:     Wed 22 Jul 2026 20:03:05 +0000
Manifest next update:     Wed 29 Jul 2026 20:03:05 +0000
Files and hashes:         1: dw8omR3mSPiWHFfA3NrX1YtKafQ.crl (hash: Yl6IkcvtK7hZj6w/yTOz3FDQxel5PHmbbF5BxEktITU=)
                          2: DA8EF7A48E7F11EAA2B2D767C4F9AE02.roa (hash: doxkO4sksDjwokeIGgJqyU8qFI1WVtbLLGDEkNbQQGU=)
                          3: lpb9V5SAKODYnzxLQ07Lyxg0dQo.asa (hash: wOn1WJkC/oS8P9duSZ71Wb8R5+48OktZzNfTZcyWsmg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.crl
                          rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dw8omR3mSPiWHFfA3NrX1YtKafQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2673 (0xa71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916699C, serialNumber=770F28991DE648F8961C57C0DCDAD7D58B4A69F4
        Validity
            Not Before: Jul 22 20:03:05 2026 GMT
            Not After : Jul 29 20:03:05 2026 GMT
        Subject: CN=6a6121f9-9e30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:98:92:82:47:2e:74:a1:18:52:f9:98:e8:7d:
                    01:15:05:5c:21:23:c6:7a:77:ca:d1:5c:07:c7:1f:
                    d1:8d:85:38:b4:91:aa:9d:93:38:d4:50:d3:a6:42:
                    90:fa:76:02:0e:b5:9c:ed:8e:95:b4:b3:44:cc:df:
                    0f:84:5d:12:6e:25:95:49:94:80:e3:48:c8:6d:ec:
                    18:63:ad:de:81:1e:c1:76:10:38:01:c6:cc:37:e2:
                    1e:da:41:f8:67:21:d9:f1:b3:70:12:e5:3b:78:60:
                    f9:e0:c7:26:0f:f7:1a:55:7e:be:56:35:ab:f0:94:
                    45:ed:0a:13:e4:ef:67:3e:f8:7d:b7:f7:1b:b3:08:
                    00:28:44:43:50:55:43:23:c4:2a:dc:ce:fb:4c:17:
                    c2:a8:10:61:bd:6b:e7:75:81:3f:8f:f5:c2:76:57:
                    3b:51:65:dc:7a:29:cf:a1:a4:c9:f4:09:75:ce:06:
                    65:13:b8:ce:04:a0:72:7d:fa:1d:f6:b8:97:0a:ee:
                    c6:03:c4:78:c4:3e:87:d1:0f:50:96:4f:39:df:fa:
                    e9:45:49:c8:b9:18:47:8c:97:03:91:de:ca:09:41:
                    21:97:3c:97:5c:4b:bb:08:c7:da:ba:97:21:e3:7b:
                    ad:91:9f:ca:58:7b:af:b1:50:04:69:d2:be:f6:53:
                    de:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:96:57:FE:8F:84:AC:A7:EE:A3:3E:80:4A:AD:53:65:53:21:9C:C7
            X509v3 Authority Key Identifier:
                keyid:77:0F:28:99:1D:E6:48:F8:96:1C:57:C0:DC:DA:D7:D5:8B:4A:69:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dw8omR3mSPiWHFfA3NrX1YtKafQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:f9:be:e7:ce:24:09:cb:dc:b6:bd:0d:2c:15:63:50:41:cf:
         14:90:e8:14:4a:0f:c0:a9:85:87:88:5f:ec:0d:ea:3f:e9:d8:
         fd:7c:ce:0a:91:83:f3:bf:55:52:03:e5:64:33:6d:29:da:01:
         82:b5:c9:17:60:7c:2c:80:29:6b:ec:40:01:ba:16:77:05:a7:
         26:67:c7:a9:97:d4:16:ef:30:be:6e:29:92:0f:ec:9b:f3:97:
         ff:12:b4:65:10:7a:02:04:07:5a:c1:5f:bd:73:a7:d5:83:5c:
         0a:c4:ff:7a:3a:ab:f7:21:26:74:a4:fa:dc:ba:fb:17:3c:e7:
         65:73:ca:78:51:f4:1a:bd:43:a8:5a:96:b3:9d:b9:40:05:58:
         44:0d:56:3b:c3:2d:a3:43:f2:ce:80:90:60:1d:57:3f:07:13:
         14:9a:71:3b:75:34:d6:24:35:bf:9a:8f:18:f8:83:0f:9f:a7:
         e7:66:44:4d:50:b3:14:b6:84:1b:8d:99:bf:c9:fa:6c:ee:67:
         bd:af:36:71:a5:21:38:ee:51:0a:2d:75:c1:4a:db:f0:b4:aa:
         86:e6:a3:24:70:8e:c8:dc:98:b2:2a:e6:26:75:61:cf:db:90:
         c0:96:ce:b2:63:62:4a:f3:41:de:28:3f:1e:6d:b0:bd:05:ea:
         96:98:f1:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:15:45 2026 by rpki-client