Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft
File:                     DZhBj4TCLONROV4eXE1dka5g_h8.mft (raw, json)
Hash identifier:          syI+SyKu/l5I0sRPRyokGU+yGT2NJSrS/5vzybDfUi8=
Subject key identifier:   B0:CD:01:31:8F:75:ED:EF:43:9F:C0:FC:8B:3C:01:4F:DF:6E:2D:58
Authority key identifier: 0D:98:41:8F:84:C2:2C:E3:51:39:5E:1E:5C:4D:5D:91:AE:60:FE:1F
Certificate issuer:       /CN=A91DED5A/serialNumber=0D98418F84C22CE351395E1E5C4D5D91AE60FE1F
Certificate serial:       0405
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DZhBj4TCLONROV4eXE1dka5g_h8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft
Manifest number:          03F8
Signing time:             Thu 23 Jul 2026 01:21:51 +0000
Manifest this update:     Thu 23 Jul 2026 01:21:51 +0000
Manifest next update:     Thu 30 Jul 2026 01:21:51 +0000
Files and hashes:         1: DZhBj4TCLONROV4eXE1dka5g_h8.crl (hash: gVH1m9p2O45QHQXWSYGWtH5grAXgACdYO6uD5Cw0dgs=)
                          2: C7513D2484CC11F18B5F25E597A30FBC.roa (hash: qjU7k0c2AFRf9V00UA42zSZWvTGD4WQ9W16GHJB9dqo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.crl
                          rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DZhBj4TCLONROV4eXE1dka5g_h8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:21:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1029 (0x405)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DED5A, serialNumber=0D98418F84C22CE351395E1E5C4D5D91AE60FE1F
        Validity
            Not Before: Jul 23 01:21:51 2026 GMT
            Not After : Jul 30 01:21:51 2026 GMT
        Subject: CN=6a616caf-17bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3a:f4:76:ac:f6:52:44:8e:1c:5a:9b:ae:f6:
                    5f:00:3a:a3:e4:b6:0d:db:90:97:5b:57:52:18:11:
                    d1:31:df:e4:cb:bf:0f:d1:6a:7b:28:a5:ce:70:42:
                    a0:5b:46:54:a8:52:ea:87:43:6a:a8:c1:6b:07:48:
                    ae:e0:65:af:46:d7:2e:c4:17:08:25:a8:5a:02:10:
                    0e:d8:c7:4a:e5:36:a5:0c:28:c0:16:aa:78:56:f3:
                    bc:19:bb:2b:59:b2:9d:2d:b3:21:f0:76:ba:99:c1:
                    05:af:49:54:ef:05:29:a4:a0:6b:23:ee:84:2d:41:
                    30:73:1e:b2:62:6a:2f:38:7e:83:e8:d9:84:6d:6d:
                    59:aa:ba:a5:dc:2a:52:63:6a:4e:b0:f4:b1:1d:86:
                    bb:5f:4c:cb:e1:05:e9:02:d4:56:db:54:b6:a6:0a:
                    58:bf:3f:7b:f1:63:29:dc:8a:89:ed:59:82:a0:93:
                    4c:28:2e:66:5f:ac:28:97:fc:85:e7:3c:b1:b6:93:
                    83:e8:f6:a7:45:84:d2:8c:3e:53:42:89:81:05:a8:
                    11:10:04:e1:26:24:25:8f:6b:ce:d7:c3:18:54:c5:
                    9c:06:26:68:d6:b6:a5:f8:50:d3:54:b4:ae:53:d9:
                    0e:fa:5b:04:e0:46:62:f7:9e:01:a3:e4:a0:6f:16:
                    42:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:CD:01:31:8F:75:ED:EF:43:9F:C0:FC:8B:3C:01:4F:DF:6E:2D:58
            X509v3 Authority Key Identifier:
                keyid:0D:98:41:8F:84:C2:2C:E3:51:39:5E:1E:5C:4D:5D:91:AE:60:FE:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DZhBj4TCLONROV4eXE1dka5g_h8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:31:0d:10:9b:1a:31:57:3d:a2:40:86:b0:25:95:fb:38:b7:
         10:8f:8b:ce:94:13:3c:78:38:62:c3:f4:ac:41:cd:e2:0e:2d:
         c7:04:68:56:5c:2a:71:7a:10:84:28:44:76:2e:ac:3b:64:b0:
         de:9f:77:0c:b0:92:ee:35:3d:0b:f0:81:24:c9:8a:ef:c6:9f:
         ae:41:34:54:e3:ec:68:df:84:22:03:f2:68:20:3d:63:69:6a:
         cd:41:6a:a3:eb:4c:12:92:84:f0:35:fd:14:c4:7c:e2:ea:79:
         c9:80:65:02:d0:c4:58:e9:1b:10:11:2b:70:e8:1f:91:6c:55:
         cb:4b:b8:18:9f:40:14:9d:cd:ed:85:c3:69:10:ac:6c:99:5c:
         98:03:fc:3d:3f:27:46:30:cb:22:26:89:e1:41:41:a4:c8:57:
         be:1e:2b:05:5a:1d:0e:a3:d7:98:ad:18:ca:6b:d8:3e:a9:53:
         7e:8c:4d:01:dd:ae:3e:10:1c:be:54:12:7f:4e:f7:51:c2:30:
         a2:c2:a5:17:a7:ba:e4:70:79:ec:63:b3:8a:f9:e0:40:c1:43:
         10:a5:d2:63:62:10:3d:99:d4:a1:60:73:2a:cb:b4:f1:2a:5a:
         98:14:89:76:fa:b6:ef:07:18:5d:da:8c:8b:69:0c:b5:36:66:
         96:d9:a0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:49:06 2026 by rpki-client