Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.mft
File:                     2DuT4x6TmTfYyxX-Ocpebo_q-ps.mft (raw, json)
Hash identifier:          J/Gq1BAiqmYV1wNPDCM60NqcpPseLYZeg/ywguLGjFU=
Subject key identifier:   78:93:E7:36:F4:82:17:82:38:17:02:FC:A1:42:67:7F:BD:7E:61:1F
Authority key identifier: D8:3B:93:E3:1E:93:99:37:D8:CB:15:FE:39:CA:5E:6E:8F:EA:FA:9B
Certificate issuer:       /CN=A9197277/serialNumber=D83B93E31E939937D8CB15FE39CA5E6E8FEAFA9B
Certificate serial:       0206
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2DuT4x6TmTfYyxX-Ocpebo_q-ps.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.mft
Manifest number:          01DC
Signing time:             Thu 23 Jul 2026 04:55:41 +0000
Manifest this update:     Thu 23 Jul 2026 04:55:41 +0000
Manifest next update:     Thu 30 Jul 2026 04:55:41 +0000
Files and hashes:         1: 2DuT4x6TmTfYyxX-Ocpebo_q-ps.crl (hash: oSQ7sE5BPtHfxas/iO1VCnZcdJ7ARxVuAzz9bvrQ6GU=)
                          2: 6F5F30B8B56111EE91C72951C4F9AE02.roa (hash: NKqxNV8ZTNMr3HZ7qohnaVPukBEy2IxhkEY74xhVUp4=)
                          3: 2E31B8FCB57211EEBB68526DC4F9AE02.roa (hash: Olet7/jMKDbPX9itUim3LSNIHYA8fTbBo6f7YD0v+zg=)
                          4: 2DCC0688B57211EEBB68526DC4F9AE02.roa (hash: yJFPpL7wE2GdaICTMgXge87NbgvFqYn4RExlPALcImA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.crl
                          rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2DuT4x6TmTfYyxX-Ocpebo_q-ps.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:55:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 518 (0x206)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197277, serialNumber=D83B93E31E939937D8CB15FE39CA5E6E8FEAFA9B
        Validity
            Not Before: Jul 23 04:55:41 2026 GMT
            Not After : Jul 30 04:55:41 2026 GMT
        Subject: CN=6a619ecd-3fa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:53:20:1e:cb:20:9e:73:d3:2c:19:80:59:78:
                    5f:10:94:ba:59:48:49:3d:5e:9c:cc:6c:06:a1:12:
                    92:5d:50:94:70:55:53:bd:1a:53:59:f9:97:2e:e5:
                    a8:f2:db:91:95:61:6e:3f:44:b9:80:65:8c:0f:74:
                    ab:ee:65:d6:cc:93:e1:af:8d:0b:cf:78:8b:6a:0e:
                    99:92:21:ea:57:47:2c:9e:3d:dd:a9:ba:c0:85:a1:
                    62:c2:db:50:07:ba:99:4c:4d:53:9c:70:73:19:00:
                    49:33:ca:52:2e:e7:18:be:6f:51:48:96:d6:26:40:
                    00:72:3f:70:c5:64:36:c9:65:ef:78:82:55:d5:72:
                    e2:10:a6:95:5f:4d:10:0e:2b:41:c1:aa:03:75:78:
                    35:44:a5:45:9a:31:c6:f8:d9:4e:54:df:5d:67:a4:
                    bd:15:c8:db:3f:f2:26:80:6c:11:20:e0:7a:ac:c1:
                    34:f1:74:31:41:1b:6a:f1:94:38:56:34:01:ca:c2:
                    51:25:0d:ab:23:2a:0e:ee:15:a1:29:59:26:3c:49:
                    1e:98:03:11:d6:1f:e1:46:97:c2:5b:b0:bd:4e:58:
                    56:8c:ab:51:e8:3f:9c:da:71:2d:b8:78:03:9a:5d:
                    85:0f:a0:d8:26:a8:6e:ec:73:35:47:26:15:32:6a:
                    8f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:93:E7:36:F4:82:17:82:38:17:02:FC:A1:42:67:7F:BD:7E:61:1F
            X509v3 Authority Key Identifier:
                keyid:D8:3B:93:E3:1E:93:99:37:D8:CB:15:FE:39:CA:5E:6E:8F:EA:FA:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2DuT4x6TmTfYyxX-Ocpebo_q-ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:5a:9a:8d:35:89:32:8b:4b:37:d3:78:fe:4b:26:79:4b:b3:
         d5:83:2a:51:2c:b2:d5:a5:a0:51:28:e4:3a:d4:c1:bb:0f:c4:
         54:f4:40:48:39:04:c1:93:ce:06:64:c0:7e:5f:26:d3:4f:9b:
         6f:40:36:07:ea:d1:c7:49:20:3b:52:c1:89:50:b3:47:15:d4:
         99:09:57:e8:07:27:02:46:85:3d:0e:a9:30:14:b6:67:08:2a:
         5e:c9:46:f9:8d:3b:2b:07:aa:a5:e5:64:89:da:5a:e2:77:17:
         5f:50:41:53:d0:de:3c:95:69:ab:2c:56:24:52:3d:26:43:20:
         5c:8c:e4:33:bc:32:81:c5:73:30:8b:5f:23:a6:63:6b:e8:11:
         b5:04:1f:d4:d9:ff:8c:b9:91:97:d9:d2:a9:85:5c:d6:46:35:
         7c:d8:ad:24:18:90:ad:03:b0:6e:1b:2f:2f:76:b1:c3:5f:ae:
         4f:05:6d:8b:1d:fd:9b:f7:f5:af:2a:dc:78:bb:a2:35:8f:fc:
         6b:35:4a:c0:b5:2b:57:04:fa:fd:51:0c:f0:73:04:fb:70:41:
         ad:e2:9e:c1:37:56:f3:e9:fa:75:cf:0e:05:b0:85:0d:15:08:
         3a:8b:6e:03:d1:e2:08:d2:57:f6:81:df:4e:87:de:71:30:26:
         14:ee:3d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:06:23 2026 by rpki-client