Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.mft
File:                     C-qOMYe9SY0l8kldarDunkU0p_E.mft (raw, json)
Hash identifier:          WBuKlognWPPK4K7ujVKf+0oXuQH4qHvMpEVWGmmAXM4=
Subject key identifier:   29:98:DB:C9:67:8D:B5:38:39:BA:C6:25:49:0A:0F:DB:4F:A0:E5:60
Authority key identifier: 0B:EA:8E:31:87:BD:49:8D:25:F2:49:5D:6A:B0:EE:9E:45:34:A7:F1
Certificate issuer:       /CN=A918C64D/serialNumber=0BEA8E3187BD498D25F2495D6AB0EE9E4534A7F1
Certificate serial:       08BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-qOMYe9SY0l8kldarDunkU0p_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.mft
Manifest number:          08B3
Signing time:             Wed 22 Jul 2026 20:58:13 +0000
Manifest this update:     Wed 22 Jul 2026 20:58:12 +0000
Manifest next update:     Wed 29 Jul 2026 20:58:12 +0000
Files and hashes:         1: C-qOMYe9SY0l8kldarDunkU0p_E.crl (hash: qi8GSAmBTlbO/2QcCT6SiCtaPwwS08ZYJzdtfdIZ0aI=)
                          2: B7362AE0EDC811EAAFF8BD46C4F9AE02.roa (hash: mVqS9PCmyavpYnot1OnF09z2ZvLVvaBHuBfatk9kJDo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.crl
                          rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-qOMYe9SY0l8kldarDunkU0p_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:58:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2235 (0x8bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C64D, serialNumber=0BEA8E3187BD498D25F2495D6AB0EE9E4534A7F1
        Validity
            Not Before: Jul 22 20:58:12 2026 GMT
            Not After : Jul 29 20:58:12 2026 GMT
        Subject: CN=6a612ee5-d5de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1c:b1:b1:d4:5b:67:0a:a3:9f:c2:f5:5c:7d:
                    14:01:84:16:d2:50:f0:e8:41:37:15:d4:37:2c:91:
                    4c:84:8a:6f:40:49:f1:e1:08:56:45:2a:3c:d7:33:
                    78:21:dc:2c:e2:79:5a:d3:c3:9d:bd:10:c2:c6:ba:
                    26:ce:bf:a7:b3:20:bf:74:31:6d:47:a6:7f:35:8b:
                    ba:13:a2:b1:5b:4a:3f:e8:98:cc:53:72:32:5a:53:
                    64:f3:f9:b2:22:74:b9:09:c7:a2:38:d8:ec:f7:88:
                    ba:5a:f7:3b:a3:2a:f4:f8:d4:a5:2f:e4:9f:3b:ea:
                    aa:8f:bd:61:b9:49:3e:03:03:2b:44:37:12:8c:22:
                    63:03:b4:28:fc:26:17:f6:67:e9:d8:48:35:eb:ef:
                    f4:fb:54:5d:70:bd:e1:b1:fd:79:26:bd:8c:ef:8f:
                    cf:25:e7:f9:3d:04:eb:3d:0c:6c:ec:96:d1:70:10:
                    5a:ed:fc:fe:0e:44:2a:72:55:f3:91:9c:8a:b4:b6:
                    0f:d1:84:fc:07:16:96:ae:c4:ac:ac:aa:9d:95:80:
                    98:63:f8:f4:ac:27:28:b7:1a:62:99:3f:b3:28:c7:
                    e8:65:25:e8:9b:bc:75:e0:12:0d:58:18:69:31:46:
                    df:29:e3:64:d2:04:3d:e4:3f:5b:b1:52:e3:44:78:
                    d6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:98:DB:C9:67:8D:B5:38:39:BA:C6:25:49:0A:0F:DB:4F:A0:E5:60
            X509v3 Authority Key Identifier:
                keyid:0B:EA:8E:31:87:BD:49:8D:25:F2:49:5D:6A:B0:EE:9E:45:34:A7:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-qOMYe9SY0l8kldarDunkU0p_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:50:07:10:11:48:af:82:4f:b3:5e:8f:ec:af:cd:91:62:aa:
         54:b1:19:09:8e:77:35:cf:21:23:0f:51:49:a4:47:12:5f:f3:
         80:9c:17:02:88:bd:ba:c8:06:54:19:0a:49:87:b3:b4:7e:09:
         06:b3:8b:1c:32:fe:2b:15:12:f1:69:22:2b:fc:5f:30:0d:9e:
         b1:ce:3f:27:7b:ac:4a:80:92:83:94:40:cb:a0:4a:1f:f4:ef:
         c4:3c:57:59:c8:86:24:5a:02:e0:ab:82:15:47:64:29:f3:e0:
         e6:99:4a:b9:7a:56:be:45:2e:66:82:c9:14:23:78:ab:26:fd:
         f9:4f:db:e2:9e:63:14:6e:fc:f5:a5:67:a3:5b:68:bd:33:6a:
         e1:1f:78:7b:5e:c3:6c:a7:98:39:ff:7c:89:6e:aa:bd:25:c8:
         9d:bb:91:77:0c:0a:da:a0:ed:88:a1:1b:ed:d7:b6:4d:6b:8e:
         0b:ad:bb:30:1f:f3:0e:81:14:e3:bd:73:95:a4:16:6f:d3:9e:
         ae:38:38:65:4a:b4:c3:b8:7a:6d:1a:d6:0d:1b:87:f4:33:e0:
         c0:6d:ff:08:41:58:5d:d5:4f:24:6f:44:ec:95:5e:59:39:4d:
         b0:1f:1f:97:c5:68:38:73:0b:86:df:4d:06:a1:b9:52:b4:ff:
         0c:11:57:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:08:06 2026 by rpki-client