Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft
File:                     DNZOS9b605fHRxEYooA7h90sHVM.mft (raw, json)
Hash identifier:          yhdtVvIlq6HKVBlQEfDpp7UI4Mq/S/D6KH5f03OaIaw=
Subject key identifier:   75:4A:40:13:AB:5C:88:92:39:67:A9:E2:C7:C1:B0:28:1D:10:88:77
Authority key identifier: 0C:D6:4E:4B:D6:FA:D3:97:C7:47:11:18:A2:80:3B:87:DD:2C:1D:53
Certificate issuer:       /CN=A917E151/serialNumber=0CD64E4BD6FAD397C7471118A2803B87DD2C1D53
Certificate serial:       063C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft
Manifest number:          0625
Signing time:             Wed 22 Jul 2026 23:32:49 +0000
Manifest this update:     Wed 22 Jul 2026 23:32:48 +0000
Manifest next update:     Wed 29 Jul 2026 23:32:48 +0000
Files and hashes:         1: DNZOS9b605fHRxEYooA7h90sHVM.crl (hash: clmiWnQa56+b2ka1iogJd81ayJ6FZOZAhz1TVwyZlhg=)
                          2: CBB9F6766CE211EEA9499734C4F9AE02.roa (hash: ntABWtYa9f0IkqV7PvPk9+2uIJ5vBaIf+7hA4+vUAmM=)
                          3: 632B0D382CE911F189BCFB9BA3833773.roa (hash: u9WZKjHsBFVMQNlf3mJaNZybmCa5wwJrixJxYO6Dng0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.crl
                          rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1596 (0x63c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E151, serialNumber=0CD64E4BD6FAD397C7471118A2803B87DD2C1D53
        Validity
            Not Before: Jul 22 23:32:48 2026 GMT
            Not After : Jul 29 23:32:48 2026 GMT
        Subject: CN=6a615321-b4bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:81:bb:91:50:0e:24:56:ef:4f:82:f9:86:0b:
                    84:53:90:3e:17:bd:6b:93:89:66:13:f9:d5:ce:9b:
                    d9:5f:81:7b:83:34:27:43:4a:c6:02:4f:e1:10:7b:
                    39:29:b6:1f:0a:41:e2:62:a7:b8:f1:06:f6:f9:12:
                    54:bd:89:30:25:9b:47:d7:eb:ec:67:b9:29:8b:9e:
                    3b:4f:e9:2b:87:b0:60:d3:c5:bf:38:6c:10:7d:22:
                    37:d0:11:6a:69:2b:af:11:20:ec:39:05:91:c4:3f:
                    1b:10:9b:6f:65:0b:fb:a1:2b:d2:5b:78:74:aa:78:
                    6c:8a:12:e4:97:9e:88:1b:f1:25:7e:07:6f:21:c5:
                    1f:b9:44:a4:24:18:85:da:61:94:98:38:0a:c9:b0:
                    a6:1f:29:24:db:a1:16:86:17:77:4c:fe:fd:26:8f:
                    18:af:91:6c:12:03:94:95:9b:58:fd:d8:4d:75:09:
                    b9:d9:e9:6c:8c:e0:7a:86:c0:6e:8d:da:3f:13:1f:
                    38:0a:18:20:60:89:85:1d:a8:f7:db:c6:ad:e2:f2:
                    ca:1e:32:7a:e7:0a:f1:36:68:8d:fc:12:0d:0a:4b:
                    a8:4b:31:98:d2:98:4e:48:1c:3c:61:ac:73:dd:32:
                    35:f6:b1:90:af:63:0f:e3:63:8d:0d:52:e6:cf:9c:
                    6e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:4A:40:13:AB:5C:88:92:39:67:A9:E2:C7:C1:B0:28:1D:10:88:77
            X509v3 Authority Key Identifier:
                keyid:0C:D6:4E:4B:D6:FA:D3:97:C7:47:11:18:A2:80:3B:87:DD:2C:1D:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:4c:f4:b9:89:60:f9:29:3c:6f:b3:84:15:cb:b3:28:07:ea:
         b8:b7:eb:1f:7d:98:02:09:d3:c6:fd:85:52:66:c4:44:fc:2b:
         e1:e6:36:91:95:6d:f9:41:d6:56:e5:f1:6b:7e:39:3e:ef:3c:
         c8:2c:d6:e5:a4:f8:11:a7:f4:49:3a:b1:ab:5b:2d:bc:5f:c6:
         7d:df:49:09:48:cc:c2:45:1d:54:2a:79:fc:49:84:c4:9f:8a:
         29:6e:b6:02:cd:d6:9c:19:a4:9b:e1:3a:39:5e:1b:42:54:09:
         0e:63:e9:2a:5b:5f:cd:d4:3f:ca:11:cd:4a:e8:ee:b0:78:76:
         d3:fe:97:29:eb:bb:07:6d:cf:d0:3d:0f:4e:3d:62:d0:2b:85:
         76:30:29:74:79:20:dd:a0:db:fe:76:7f:82:43:74:15:c8:61:
         8f:bd:ea:9a:e5:88:6a:8e:6a:81:5b:91:e9:9f:8f:26:57:ed:
         ac:bb:7a:8a:f4:ff:53:cf:ac:ee:a5:a8:17:5b:d7:42:48:5d:
         e7:da:da:d6:2e:eb:e3:ca:ae:76:09:f7:96:d9:6c:72:e3:6e:
         7d:79:80:3b:ea:c5:d5:9e:85:d7:b8:b5:47:70:fb:32:a3:4b:
         af:a6:b3:38:e5:1a:ec:77:ac:a2:4f:fe:9f:b1:90:7b:dd:03:
         cc:1f:c1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:57:14 2026 by rpki-client