Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft
File:                     Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft (raw, json)
Hash identifier:          +W3Ml8SSETNR/vs98gOBQOt6juYSMM1jGqIIWCRYR8Q=
Subject key identifier:   7C:A0:3A:14:78:EB:23:AA:4D:6F:7C:43:10:98:6A:9C:1F:10:75:94
Authority key identifier: 0D:CA:FA:C1:45:B2:2F:15:60:78:01:66:CD:1F:15:15:04:EE:F8:A1
Certificate issuer:       /CN=A917C0CC/serialNumber=0DCAFAC145B22F1560780166CD1F151504EEF8A1
Certificate serial:       B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft
Manifest number:          A7
Signing time:             Thu 23 Jul 2026 09:07:29 +0000
Manifest this update:     Thu 23 Jul 2026 09:07:28 +0000
Manifest next update:     Thu 30 Jul 2026 09:07:28 +0000
Files and hashes:         1: Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl (hash: MffyBNM7iaCIUzGKxm1IkYJW9avg72tBwkXAIjAvMuo=)
                          2: 6579B1188F5811F0BE083D3DC4F9AE02.roa (hash: HH9ky92fQzGNTYsX0+VQPTLNrW/aQl3+AElKQhw1OdM=)
                          3: B339551A8F5911F0AFB88342C4F9AE02.roa (hash: eXQMNO4T9SC2XkbTYizwJc2SFGid2A3mIxorvKFCeno=)
                          4: D84A5FAC8F5911F081D9D142C4F9AE02.roa (hash: sPIf66/t3nPzaly4TLYXdFQdjV7uJL1S1ZXAusvb7xs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl
                          rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:07:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184 (0xb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C0CC, serialNumber=0DCAFAC145B22F1560780166CD1F151504EEF8A1
        Validity
            Not Before: Jul 23 09:07:28 2026 GMT
            Not After : Jul 30 09:07:28 2026 GMT
        Subject: CN=6a61d9d0-d94f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3d:ab:ac:dd:1d:c6:d0:da:e2:09:a2:93:4b:
                    bd:27:70:94:98:a2:0d:be:19:ea:77:f2:2d:7c:de:
                    71:6a:b9:94:57:78:05:e8:de:32:2e:82:34:f3:c8:
                    eb:43:68:57:31:71:0a:e6:75:e6:3b:af:8a:0d:51:
                    f7:4b:9b:e3:5d:9a:b4:f4:5b:54:65:bb:98:a5:a0:
                    04:b9:ea:99:4d:99:86:fb:39:fc:5a:99:24:aa:f5:
                    82:8f:1c:9c:b8:8c:cc:33:8e:c8:9e:c4:54:de:4d:
                    53:e6:d2:a4:ee:18:75:1a:5a:8f:c3:7d:38:a2:64:
                    8a:f4:75:f3:83:4c:2a:a6:38:1f:58:79:3f:35:cb:
                    71:99:84:15:55:e2:64:2a:b7:c4:62:08:dc:4e:95:
                    00:0f:a4:b2:38:66:f7:8a:c3:0d:69:25:09:82:95:
                    5e:f6:16:de:19:f1:97:60:e4:4d:28:1a:f4:9c:d7:
                    48:e1:19:01:b9:a8:6a:df:dd:a4:a1:40:4a:8e:a1:
                    1d:6d:c0:c7:dc:9c:31:12:b7:e3:80:da:65:9e:37:
                    f7:81:4c:8f:4e:cb:2b:00:1e:cc:7d:ae:c8:eb:83:
                    a7:df:c3:16:0a:08:72:33:5d:04:02:d6:2e:6b:5d:
                    f6:42:70:74:ba:e4:01:58:2e:e0:26:ab:02:90:b3:
                    e7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A0:3A:14:78:EB:23:AA:4D:6F:7C:43:10:98:6A:9C:1F:10:75:94
            X509v3 Authority Key Identifier:
                keyid:0D:CA:FA:C1:45:B2:2F:15:60:78:01:66:CD:1F:15:15:04:EE:F8:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:37:f2:41:cd:1e:7a:58:7d:00:22:aa:c1:b4:36:bd:42:22:
         0a:cc:a5:b9:85:fc:ba:86:11:b3:cd:d2:f1:8a:fc:50:90:7e:
         1c:2d:dc:27:8d:64:a3:6b:89:0c:04:cb:b1:3f:e2:6f:6b:bb:
         30:b7:f8:f7:c7:17:ca:a2:8b:db:fe:01:c9:a2:a3:e8:23:5a:
         aa:f1:30:c7:a7:78:78:c6:f2:1c:4c:b2:72:b4:9e:44:a6:86:
         d1:b0:0b:49:89:e6:59:ee:bd:9e:f8:cf:80:31:24:ce:28:e0:
         32:3b:1b:40:3a:bb:76:94:cd:4f:91:ee:3a:79:2b:74:41:00:
         b4:f1:a5:d1:6d:4c:84:42:21:10:6a:c9:71:43:cf:ab:6a:16:
         48:41:8c:4a:94:65:b6:3d:2b:97:f3:71:44:6d:10:1b:14:87:
         24:6b:30:cf:de:7d:15:f2:a6:58:01:5f:e6:12:3f:8b:5e:83:
         df:3a:a2:1e:0f:15:2c:49:45:90:ee:42:15:93:73:0d:61:6d:
         d1:64:cf:64:89:ee:a0:e5:45:c2:a5:c6:12:5a:8b:86:71:06:
         c3:b0:ee:6d:2c:df:7b:21:b9:bd:07:44:75:06:a3:5c:fa:71:
         52:4d:92:3c:67:a0:0b:66:49:5c:09:06:28:c1:e1:3a:88:59:
         b2:f7:ee:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:54:20 2026 by rpki-client