Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft
File:                     rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft (raw, json)
Hash identifier:          W9SAQ2Y4Q6sL3x/jVE3C+Z/VXzBmWNeGOEahXJleTjM=
Subject key identifier:   AC:08:FF:65:62:66:C9:31:A4:0A:DD:FF:B9:58:0B:53:7D:01:4C:AA
Authority key identifier: AC:32:E9:9C:B0:92:E6:2E:3A:CA:18:74:63:DA:99:E7:3D:5A:AF:3E
Certificate issuer:       /CN=A917C23C/serialNumber=AC32E99CB092E62E3ACA187463DA99E73D5AAF3E
Certificate serial:       0818
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft
Manifest number:          07FD
Signing time:             Wed 22 Jul 2026 21:51:46 +0000
Manifest this update:     Wed 22 Jul 2026 21:51:46 +0000
Manifest next update:     Wed 29 Jul 2026 21:51:46 +0000
Files and hashes:         1: rDLpnLCS5i46yhh0Y9qZ5z1arz4.crl (hash: RBUPaC4VEpKaGN4JaLFcHrsHt35Ake88u78Rceqhu1Q=)
                          2: BA4B22643AC911EBB83D7F0EC4F9AE02.roa (hash: jVj6UwIo4TXqA/uqzwENPxn//OG6jURpNnawIkmt1rI=)
                          3: D75EF2ACFB6D11EC8F56D760C4F9AE02.roa (hash: ZmAyU9kRA0slDQaJ0VTa+g0MzBvfdT0VhVsvUeReZ3c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.crl
                          rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:51:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2072 (0x818)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C23C, serialNumber=AC32E99CB092E62E3ACA187463DA99E73D5AAF3E
        Validity
            Not Before: Jul 22 21:51:46 2026 GMT
            Not After : Jul 29 21:51:46 2026 GMT
        Subject: CN=6a613b72-7fac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5f:f1:0d:31:80:57:c6:af:4c:9b:fd:33:46:
                    14:8d:a4:4b:dc:8a:0f:65:e3:82:8f:dd:82:9e:46:
                    2a:f1:a0:46:5f:09:7e:f5:9e:1a:71:72:24:98:68:
                    cd:c0:94:be:6f:d5:16:ac:e3:6a:91:ee:54:87:be:
                    ab:05:fb:86:69:74:e7:ec:b3:47:ad:36:9f:89:6b:
                    d3:ad:c5:47:77:3f:87:a7:38:71:85:ce:f9:e0:ac:
                    c4:75:61:c0:20:17:3a:42:9d:1f:d5:11:a5:43:73:
                    4e:f9:d8:98:c6:bb:2a:7e:e9:7d:33:83:0f:c6:06:
                    4b:8b:3c:3f:97:fc:bd:ac:1f:dc:3c:33:c3:e5:0e:
                    2f:ef:87:ee:bc:3f:81:ed:d5:d5:cc:2f:ff:8d:30:
                    e2:f7:d9:95:17:7f:0d:20:b9:1e:ee:83:de:55:e3:
                    11:9b:dd:50:2e:2e:74:fa:cc:64:1b:e6:f7:ce:ae:
                    15:9b:f3:ad:3a:5f:b0:75:6c:87:e0:ee:4c:97:e4:
                    71:ac:13:d9:da:ec:c1:88:42:86:7b:55:ae:de:e7:
                    0b:7c:dc:8b:3f:f8:1e:e0:cf:10:31:5d:58:86:f0:
                    a7:c6:e1:1c:d0:99:ca:0f:0f:bc:90:2d:01:9f:9f:
                    10:5a:2c:e1:70:ba:2d:69:e1:06:d9:89:a3:e6:74:
                    2b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:08:FF:65:62:66:C9:31:A4:0A:DD:FF:B9:58:0B:53:7D:01:4C:AA
            X509v3 Authority Key Identifier:
                keyid:AC:32:E9:9C:B0:92:E6:2E:3A:CA:18:74:63:DA:99:E7:3D:5A:AF:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:9d:52:37:f9:3f:50:d8:52:6f:86:4f:57:a3:6d:bd:f7:0c:
         b1:cf:78:32:f8:0b:55:48:10:0a:a1:76:bd:0f:14:d2:11:aa:
         f9:a9:0b:75:64:4b:d6:32:f2:43:54:08:4f:81:07:e4:cc:b1:
         21:1f:c1:36:6f:b2:8f:08:35:8a:f6:4c:5f:ef:15:f4:0c:d7:
         c4:cf:06:8e:d2:b6:99:77:3e:99:6e:e8:29:e2:d2:67:a0:d1:
         f7:6f:31:e2:6e:5f:d4:1a:9a:4a:9a:c7:bb:6b:0a:e9:46:17:
         a6:0a:70:51:f2:c5:66:3e:82:7f:dd:b6:81:23:43:93:7b:9c:
         73:25:35:cf:89:44:2d:2c:e3:81:f1:3e:d6:e3:68:af:ef:17:
         ab:d7:26:a8:22:41:df:57:26:26:04:0c:5e:36:51:ed:40:2f:
         91:02:10:30:b7:03:aa:b0:b8:99:3b:e5:04:49:79:90:ee:37:
         e2:5f:71:91:08:90:e0:6f:33:8e:ad:87:1a:84:f6:9e:80:72:
         59:6b:12:70:74:d6:78:f4:85:be:90:e4:6e:23:08:40:c5:10:
         b7:2d:16:9f:11:20:a9:ab:33:00:1e:15:d4:e6:3a:f9:c0:a4:
         96:d6:00:0f:35:94:d2:11:53:7c:79:4f:fd:33:7d:2e:3e:d1:
         19:b0:81:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:27:30 2026 by rpki-client