Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft
File:                     DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft (raw, json)
Hash identifier:          PXd71aydA7kOFmrfUVZVGJBQ9GoMOeOw32yCpN6hF5w=
Subject key identifier:   8A:F9:C3:9F:C3:31:E6:BD:AA:4D:32:25:B5:CA:52:22:D8:15:FC:21
Authority key identifier: 0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5
Certificate issuer:       /CN=A918495F/serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5
Certificate serial:       1843
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft
Manifest number:          1819
Signing time:             Wed 22 Jul 2026 16:37:36 +0000
Manifest this update:     Wed 22 Jul 2026 16:37:36 +0000
Manifest next update:     Wed 29 Jul 2026 16:37:36 +0000
Files and hashes:         1: DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl (hash: AYYVsIiQkfpztvkp2PQ1GOm/RQugfCAtxlhTzQNMprU=)
                          2: FEB0FC60A33511EBA984863CC4F9AE02.roa (hash: 5RREE6T02f31QWKKvKnKTP9nUut80+i9xP6eu2x6Dn4=)
                          3: FDA89E2CA33511EBA984863CC4F9AE02.roa (hash: We6jmeEEyT0HEMr/GY7jQ9dR91pmG5jYjCWmk5TFv3Q=)
                          4: 04AB29D8DFEE11E7B0E71D1CC4F9AE02.roa (hash: G7CUtd3m+KDiwG1MCgyxY5Ml5ZuJVANVfOkXBqSh68I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl
                          rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:37:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6211 (0x1843)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918495F, serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5
        Validity
            Not Before: Jul 22 16:37:36 2026 GMT
            Not After : Jul 29 16:37:36 2026 GMT
        Subject: CN=6a60f1d0-1029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:51:7a:68:42:64:c5:e6:92:42:4e:c1:79:99:
                    33:57:e7:98:ab:b9:7c:92:22:50:f3:83:8d:b4:6d:
                    43:a1:27:80:3c:d7:0d:76:f3:28:74:82:64:66:8f:
                    a0:df:e5:87:ba:05:dd:6e:94:c7:0a:ff:ee:03:bc:
                    7d:8b:4d:81:66:37:35:26:96:8d:b8:26:44:74:0c:
                    30:ce:68:8a:26:c0:4b:f2:57:e3:0d:a6:cc:37:09:
                    8d:bc:5b:90:40:aa:14:45:c1:13:a7:9a:55:8d:b8:
                    b3:9c:ba:d4:f1:8d:12:e1:87:4f:27:7c:b0:cb:49:
                    a6:52:fb:a5:eb:bf:1a:38:55:37:2f:28:99:a2:31:
                    5f:8a:df:5c:f7:36:db:85:ae:1e:a8:b3:0f:6b:2f:
                    0e:f5:e1:4b:cd:49:bf:b6:ae:37:9e:2e:00:80:7e:
                    a1:27:36:ad:7e:04:2a:52:84:97:7c:54:4e:79:f9:
                    f7:55:3f:2f:73:1f:73:29:3c:68:53:dd:8c:71:ad:
                    21:ae:17:be:8c:fa:9e:61:fa:3e:89:c0:c8:dc:ab:
                    0d:a2:ff:01:11:b5:d0:59:b7:39:ed:24:5d:3a:96:
                    37:c1:b3:cd:52:5a:df:a3:bc:37:8a:d3:50:dd:33:
                    60:39:59:61:07:5b:a7:32:17:54:ab:b0:ce:25:bf:
                    0f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:F9:C3:9F:C3:31:E6:BD:AA:4D:32:25:B5:CA:52:22:D8:15:FC:21
            X509v3 Authority Key Identifier:
                keyid:0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:2b:ad:91:2a:1d:d5:f4:2f:33:e4:67:57:69:0f:10:c0:0a:
         b2:47:d8:63:b2:d7:35:18:7b:dd:bf:14:3e:62:64:08:dc:05:
         69:98:7c:2b:29:97:6c:e2:f1:fa:cd:a9:4e:2a:62:5a:11:91:
         25:63:f2:8e:0a:82:dd:bd:22:1d:6f:d0:e2:0a:0f:2e:a6:5a:
         a3:a1:f5:86:68:69:72:42:bf:6e:05:a6:63:a2:09:07:5b:77:
         44:04:bd:c9:80:5a:10:34:27:da:ff:4c:7b:22:f0:81:32:83:
         f2:f3:c1:39:7f:61:da:19:23:c4:94:ce:26:c6:fb:8c:0d:bb:
         a5:59:ca:d4:0b:0f:13:6a:14:54:0e:ef:33:3e:56:78:b8:a9:
         4f:4a:08:b4:e7:cf:2e:61:1c:6a:b1:67:5d:c5:a1:36:1d:05:
         45:6f:80:3a:98:83:b6:1d:96:dc:87:83:18:1d:bc:11:de:c2:
         6e:b7:25:09:c4:ce:dd:23:ac:e5:ba:7a:d1:e7:99:d1:07:95:
         c4:8b:21:ed:0a:53:bf:ff:46:d8:cc:e9:05:e6:08:65:4f:bc:
         d5:0c:43:17:ba:64:9b:ec:8b:37:8d:3e:1d:d6:21:70:6d:b0:
         4b:2d:12:80:67:d9:f1:db:34:d2:50:96:09:2c:1a:0b:2d:dd:
         ae:3f:c2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:41:45 2026 by rpki-client