Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.mft
File:                     DfmeMksOOlPo5W1wIP9vvFvxywI.mft (raw, json)
Hash identifier:          3YZFq6AbeY7TyJIpVHQ3vrRUREN7wauonTDbAJc2c0o=
Subject key identifier:   11:CD:F9:89:5A:87:AA:E1:A2:9C:5C:59:60:C5:41:C0:5A:63:CC:04
Authority key identifier: 0D:F9:9E:32:4B:0E:3A:53:E8:E5:6D:70:20:FF:6F:BC:5B:F1:CB:02
Certificate issuer:       /CN=A91D72CC/serialNumber=0DF99E324B0E3A53E8E56D7020FF6FBC5BF1CB02
Certificate serial:       0ECD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfmeMksOOlPo5W1wIP9vvFvxywI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.mft
Manifest number:          0FEA
Signing time:             Wed 22 Jul 2026 17:52:35 +0000
Manifest this update:     Wed 22 Jul 2026 17:52:34 +0000
Manifest next update:     Wed 29 Jul 2026 17:52:34 +0000
Files and hashes:         1: DfmeMksOOlPo5W1wIP9vvFvxywI.crl (hash: 2EdZo1znHsCR98BG3uf68sAeVUaAdnKPBJgT98Y763Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.crl
                          rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfmeMksOOlPo5W1wIP9vvFvxywI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:52:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3789 (0xecd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D72CC, serialNumber=0DF99E324B0E3A53E8E56D7020FF6FBC5BF1CB02
        Validity
            Not Before: Jul 22 17:52:34 2026 GMT
            Not After : Jul 29 17:52:34 2026 GMT
        Subject: CN=6a610363-7c77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:bf:28:bd:80:8d:a5:fd:d5:95:56:ad:0a:e9:
                    86:5d:0d:86:8e:42:6b:dd:46:40:5b:06:be:3d:dc:
                    f0:60:46:14:81:52:55:20:27:c9:ce:2b:3e:d1:52:
                    e7:e9:2f:ec:d3:4c:0d:a0:71:65:74:40:16:98:20:
                    05:5c:57:cc:a3:fc:5c:a8:89:3d:e0:c9:e6:14:52:
                    f7:3b:96:3b:6d:f6:e3:b1:de:df:93:a6:92:41:bf:
                    24:32:da:6f:e2:da:56:07:31:9d:df:8a:41:8a:14:
                    db:92:9d:e5:86:dc:c4:a6:54:3f:43:10:2b:a1:79:
                    0d:54:25:90:e5:ba:ce:a6:8d:8a:4f:a1:ec:40:8e:
                    87:4a:3b:a3:24:dc:f2:bc:09:57:9e:19:04:e8:63:
                    13:96:3a:ef:8f:59:d7:ad:af:0f:52:a1:fd:d4:07:
                    2b:80:7d:c6:b4:5c:06:d3:59:db:97:80:aa:a5:15:
                    4b:11:f9:16:6b:83:a5:95:c0:63:d6:9b:59:d9:83:
                    c2:fb:b6:e0:ea:0e:b2:a8:a9:a8:84:6c:a3:a9:02:
                    ea:54:50:1c:5b:68:a7:b4:a8:55:90:7f:54:c4:c3:
                    7a:e6:48:c4:85:60:6a:78:b8:12:f4:bb:15:29:76:
                    89:e3:94:a7:80:5e:10:b6:00:b8:6c:5c:16:3c:6e:
                    5c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:CD:F9:89:5A:87:AA:E1:A2:9C:5C:59:60:C5:41:C0:5A:63:CC:04
            X509v3 Authority Key Identifier:
                keyid:0D:F9:9E:32:4B:0E:3A:53:E8:E5:6D:70:20:FF:6F:BC:5B:F1:CB:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfmeMksOOlPo5W1wIP9vvFvxywI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:6e:6c:09:c6:94:d8:8e:61:30:33:29:b1:19:00:c7:1a:8c:
         5d:61:98:eb:5f:4f:63:a5:56:27:bd:82:6d:05:55:80:f5:aa:
         58:e2:df:22:44:4f:5c:bd:c3:ec:c8:c3:56:7d:97:44:e0:d1:
         7e:2c:cb:2b:bb:b1:95:40:d8:28:1f:3c:fe:2c:16:0c:bb:bc:
         8f:f8:34:62:7c:31:55:74:5c:30:f7:92:fe:e9:39:d7:2d:9c:
         27:15:81:82:11:3e:f8:80:33:96:06:c8:c9:ce:6f:64:0d:3e:
         e6:7a:51:63:39:96:67:6e:af:ac:0e:42:a2:88:0a:44:ea:94:
         88:31:f5:01:d9:09:de:8e:d1:c6:91:34:7a:d1:96:b3:73:bb:
         71:11:8d:99:8b:58:7a:e4:9c:84:0e:75:44:4e:3b:1c:e1:29:
         b0:49:b6:12:12:18:f3:78:e4:86:c0:cc:b2:bb:d7:83:26:76:
         6f:db:fa:4b:ff:74:24:c2:79:94:62:95:9f:2a:b6:d0:62:52:
         48:11:65:3c:58:51:bb:ad:1e:7a:c9:71:9c:c0:aa:ec:93:b1:
         01:c4:a3:f9:7a:c3:50:7c:75:12:c0:d0:1b:5d:1d:90:69:83:
         ea:66:c6:30:95:b4:30:2f:46:89:4f:3a:79:3e:e3:2d:b6:ff:
         f2:65:6f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:20:46 2026 by rpki-client