Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft
File:                     DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft (raw, json)
Hash identifier:          X+KyeTwIf5q7dVbNzn+mOQDJBFxY8GZ20Ka8sAgK2tw=
Subject key identifier:   B3:AA:E7:83:9F:C4:26:08:DB:10:12:35:BC:A9:05:96:76:E3:76:25
Authority key identifier: 0C:DD:50:58:32:EA:8C:9A:4D:23:B1:06:37:20:1D:79:42:95:64:C0
Certificate issuer:       /CN=A91AA96A/serialNumber=0CDD505832EA8C9A4D23B10637201D79429564C0
Certificate serial:       0178
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft
Manifest number:          016C
Signing time:             Thu 23 Jul 2026 06:30:41 +0000
Manifest this update:     Thu 23 Jul 2026 06:30:41 +0000
Manifest next update:     Thu 30 Jul 2026 06:30:41 +0000
Files and hashes:         1: DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl (hash: g8X/36m0RjHWIU2/SCIMsRj5PueA3BNOvv6Pl+CWZkM=)
                          2: 2AF8794E3D6C11F19105CB6FB0833773.roa (hash: OB3qLBEa2BUII86QczWvPAVNyrYJB13iZcC7pu2bBbg=)
                          3: 6E7D3C16816811EF99DD7787C4F9AE02.roa (hash: tMsqu6nSNXbRdgdOGNgxf6SRIE8d03QJp/vSSHoCY4U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl
                          rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:30:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 376 (0x178)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AA96A, serialNumber=0CDD505832EA8C9A4D23B10637201D79429564C0
        Validity
            Not Before: Jul 23 06:30:41 2026 GMT
            Not After : Jul 30 06:30:41 2026 GMT
        Subject: CN=6a61b511-4537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:89:5d:6f:40:42:ca:b5:ae:d3:9e:d5:ad:a5:
                    fd:80:ae:57:89:33:fe:75:84:81:78:99:32:b7:8f:
                    d2:bb:15:c3:a0:5a:dc:e5:31:3c:fd:be:1a:33:cb:
                    25:6d:76:54:b8:cf:b8:fa:55:90:31:2a:4e:7c:7f:
                    83:90:46:2d:f1:13:08:2c:f6:78:a4:25:22:ef:b3:
                    5f:6b:77:c2:21:fd:b9:40:41:0e:e3:41:17:47:e0:
                    37:dd:d5:3b:0e:49:73:84:02:37:e6:17:28:ae:1a:
                    ed:12:ed:00:7e:d4:82:9e:7c:4a:33:36:77:c4:ea:
                    b9:c0:e7:0e:37:a2:d1:85:7a:0c:02:76:76:96:7d:
                    86:e0:9b:4d:84:ef:ff:ed:12:6f:11:4d:c9:20:c4:
                    d9:97:f1:b6:4d:7a:c6:66:ef:8a:4f:a2:e5:e9:d3:
                    2b:e2:43:7d:42:19:47:6e:0f:65:97:b8:24:10:ce:
                    92:0c:87:3f:60:78:cc:55:85:bf:70:79:d7:f4:25:
                    f5:35:6a:54:21:ac:6e:83:1e:f8:5c:69:e9:71:8a:
                    80:db:63:ea:43:84:df:f1:38:4d:a5:08:6b:91:c1:
                    c0:dd:c2:b5:e7:ff:73:3f:02:9c:ab:33:9f:2b:93:
                    a0:2b:8c:2d:84:df:02:74:e0:9a:4d:71:ef:e3:52:
                    34:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:AA:E7:83:9F:C4:26:08:DB:10:12:35:BC:A9:05:96:76:E3:76:25
            X509v3 Authority Key Identifier:
                keyid:0C:DD:50:58:32:EA:8C:9A:4D:23:B1:06:37:20:1D:79:42:95:64:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:ab:1e:b6:c4:cc:7d:e5:cb:5a:88:32:e0:97:14:f9:3d:49:
         73:21:67:1f:8d:cf:41:cd:bb:46:c1:fd:c2:ac:53:d2:6d:01:
         7d:9e:76:84:3c:15:73:60:ff:d3:a0:a0:46:90:f7:34:92:87:
         42:ce:a7:de:e7:36:74:a8:44:f7:c7:27:85:93:7f:fa:f5:59:
         89:6e:1f:a7:89:d6:5c:26:18:40:10:02:6f:40:56:c8:90:2c:
         5d:d4:4c:68:7e:8e:32:60:5e:03:6f:a4:dd:68:b5:20:a5:93:
         d6:7c:f1:43:c1:7f:c5:b4:e4:03:e0:b3:75:17:ad:be:a3:10:
         90:a1:a3:f6:40:26:2e:b1:c8:c7:62:a1:4c:1f:7d:7f:be:e9:
         b1:fd:7e:70:e0:97:b1:61:7c:2e:3a:9c:dc:07:d4:1b:fc:90:
         68:d2:dc:4e:34:73:61:37:aa:85:d6:85:0f:a5:71:9a:4a:8c:
         9a:91:68:af:3e:c0:15:93:18:b4:1b:9f:b3:9d:e3:9e:c6:d6:
         57:66:80:63:8d:2f:f8:bb:51:be:2c:8a:df:d3:3f:c7:05:c9:
         6a:cc:56:27:33:57:38:47:10:e3:a2:60:de:2c:e3:2d:7f:90:
         a4:34:ca:18:9e:9a:9e:cd:bc:4a:33:80:1a:9a:57:36:e5:7c:
         fd:bf:13:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:10:41 2026 by rpki-client