Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.mft
File:                     DO-JBd1l6R5Qazs5nCCiIork_T8.mft (raw, json)
Hash identifier:          4wg9PtXSMs8FTkUUH9Q07YA7uGb8vmx5rIQMUCysuBk=
Subject key identifier:   5D:85:E4:0C:95:8F:3E:B1:64:D2:BA:7D:2D:49:AA:7F:A5:85:DB:E3
Authority key identifier: 0C:EF:89:05:DD:65:E9:1E:50:6B:3B:39:9C:20:A2:22:8A:E4:FD:3F
Certificate issuer:       /CN=A91DB421/serialNumber=0CEF8905DD65E91E506B3B399C20A2228AE4FD3F
Certificate serial:       0A06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO-JBd1l6R5Qazs5nCCiIork_T8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.mft
Manifest number:          09FE
Signing time:             Wed 22 Jul 2026 20:13:33 +0000
Manifest this update:     Wed 22 Jul 2026 20:13:33 +0000
Manifest next update:     Wed 29 Jul 2026 20:13:33 +0000
Files and hashes:         1: DO-JBd1l6R5Qazs5nCCiIork_T8.crl (hash: mcT0Cz30kAfv6+Aiwk39Sd/KxO0TB4rEL3GExBQaUsM=)
                          2: A9511B7AA0B511EA94365A38C4F9AE02.roa (hash: Odh6PwT4fG9VLouXcIwHNY2NadEY9PU7kLIfNQ4Io5U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.crl
                          rsync://rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO-JBd1l6R5Qazs5nCCiIork_T8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:13:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2566 (0xa06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB421, serialNumber=0CEF8905DD65E91E506B3B399C20A2228AE4FD3F
        Validity
            Not Before: Jul 22 20:13:33 2026 GMT
            Not After : Jul 29 20:13:33 2026 GMT
        Subject: CN=6a61246d-56fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:67:c1:46:58:33:f2:52:01:c8:b1:d1:97:75:
                    cd:c4:89:cb:0a:f3:5f:e2:3a:74:7f:b2:3e:ab:04:
                    aa:c8:b0:79:61:f4:0a:8d:3e:8c:54:46:64:69:f3:
                    9b:9b:48:ee:49:dc:d4:10:50:8a:d4:b9:10:99:9e:
                    d7:08:20:a4:a8:97:b9:e0:19:1e:7c:1b:bf:ae:bf:
                    53:5e:91:cb:7c:0d:9a:98:e4:56:6e:b0:1e:5c:a8:
                    71:11:5c:01:fa:30:00:63:bf:1b:c5:93:6a:be:be:
                    79:09:28:84:8e:68:b4:20:16:85:87:1d:b6:b8:ca:
                    f9:9b:45:c6:68:26:ef:35:8a:cb:60:13:9a:8d:1e:
                    96:4b:03:95:22:5c:52:12:58:8c:2d:50:8b:86:88:
                    a1:a9:5b:78:8f:49:b3:b2:c4:6a:e8:f6:13:28:76:
                    38:59:13:4d:f9:b1:58:8b:04:dc:4b:7f:46:49:8b:
                    c4:79:3c:28:f7:88:c4:4f:9b:e5:97:cb:29:f0:6a:
                    2f:8d:2a:94:b8:8c:45:59:b2:39:1c:80:8c:43:64:
                    e1:a1:48:cf:3d:be:7c:3f:50:6f:18:f1:12:c6:2e:
                    81:c1:88:01:9b:fa:e5:85:a0:9e:86:3a:62:9c:5f:
                    66:34:6d:75:f9:b1:ad:f4:95:42:4f:49:27:88:87:
                    14:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:85:E4:0C:95:8F:3E:B1:64:D2:BA:7D:2D:49:AA:7F:A5:85:DB:E3
            X509v3 Authority Key Identifier:
                keyid:0C:EF:89:05:DD:65:E9:1E:50:6B:3B:39:9C:20:A2:22:8A:E4:FD:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO-JBd1l6R5Qazs5nCCiIork_T8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:46:33:73:3e:3c:2f:e6:03:1f:9b:3d:37:17:96:96:9e:c9:
         50:57:cd:bc:eb:44:8a:45:37:89:1b:8b:65:60:32:78:b1:7f:
         48:0b:32:29:50:ed:ac:db:ee:29:a1:0d:87:aa:a7:9c:bb:25:
         a6:b3:2a:27:b1:0d:ac:fd:48:a3:d7:3b:84:a7:ba:fa:b9:62:
         b4:c6:1a:d2:f3:f5:72:1c:1d:47:b1:4f:02:c4:31:2f:65:e3:
         13:cb:50:f4:c0:1d:cc:e0:33:7a:af:97:f2:69:43:73:cb:f3:
         f1:90:ae:13:bc:04:99:c6:c3:f1:77:6b:58:71:f0:32:23:0c:
         47:9e:02:8c:be:e9:da:3a:ec:05:a5:32:95:a4:f1:ee:c9:97:
         fa:2e:75:d6:16:f2:45:9b:8b:24:a8:52:36:6a:e6:88:fa:1f:
         bd:0c:25:0a:46:7c:47:64:21:37:d4:e6:14:14:72:10:93:cb:
         9a:b2:81:b8:bb:de:34:2e:47:96:70:03:4f:b9:1c:e4:94:d0:
         fc:81:39:86:9c:0b:1a:0b:a9:2c:ec:19:96:e3:e7:91:2b:eb:
         da:2b:e6:ca:c7:95:18:0e:51:a1:52:d8:d6:45:e0:f2:3f:dd:
         6e:67:ec:01:af:84:ca:96:b9:1e:a8:c2:e0:37:e6:7f:cd:60:
         18:53:d9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:50:39 2026 by rpki-client