Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.mft
File:                     DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.mft (raw, json)
Hash identifier:          /3O3gGrZyliT6vEvM8I3b0bryOv05CR6h1Edksznjtg=
Subject key identifier:   6F:1A:1C:4E:44:BE:47:88:01:70:1C:58:82:C7:F9:99:70:34:AC:37
Authority key identifier: 0D:03:46:C8:A2:66:BE:6A:DC:E4:B7:E8:39:50:AF:5F:E1:EB:E5:C4
Certificate issuer:       /CN=A9112BDE/serialNumber=0D0346C8A266BE6ADCE4B7E83950AF5FE1EBE5C4
Certificate serial:       0800
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.mft
Manifest number:          07F6
Signing time:             Tue 18 Aug 2026 21:37:39 +0000
Manifest this update:     Tue 18 Aug 2026 21:37:39 +0000
Manifest next update:     Tue 25 Aug 2026 21:37:39 +0000
Files and hashes:         1: DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.crl (hash: SwGWWY3htsia34ILmlaWMpFOBJ5UgJkDN21T/h71eEE=)
                          2: 511EBFFE3E7E11EB979F564CC4F9AE02.roa (hash: XmHPjbOfHoD1pV3ANoGj1UOp5hoQSRI4UyhfbzC32OA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.crl
                          rsync://rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 21:37:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2048 (0x800)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112BDE, serialNumber=0D0346C8A266BE6ADCE4B7E83950AF5FE1EBE5C4
        Validity
            Not Before: Aug 18 21:37:39 2026 GMT
            Not After : Aug 25 21:37:39 2026 GMT
        Subject: CN=6a84d0a3-c0e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:46:a0:b5:48:56:21:e4:99:af:93:70:51:39:
                    41:97:0c:d9:c4:97:e3:2f:35:89:1e:47:72:a2:be:
                    f4:37:a8:43:f4:fe:8f:4b:1d:a7:e1:d2:79:90:10:
                    a2:5c:50:1f:ac:30:7a:82:9a:47:d3:8b:b2:e1:e9:
                    92:2a:02:03:e9:88:c1:17:0f:ac:cf:dc:36:c4:f1:
                    c6:64:37:49:10:35:90:a2:a2:48:30:04:1d:c4:4e:
                    5c:db:19:e0:7b:9c:d1:ca:50:20:5f:6f:57:84:96:
                    df:88:fe:5c:03:e1:32:06:6a:03:97:27:be:6d:62:
                    99:c4:ee:9a:37:0d:d0:25:3b:4f:71:36:56:c5:ce:
                    c0:c5:bb:56:b0:60:98:10:d3:6f:52:e5:8b:c8:55:
                    b5:e3:0b:4c:3c:85:da:77:4c:79:c1:1e:3f:7e:c8:
                    bc:2a:b9:2a:b5:0f:e2:53:7f:e0:11:cd:94:26:93:
                    c9:73:24:2b:e6:c6:00:d1:a6:a1:9d:9e:81:9a:d8:
                    7e:f1:67:50:00:01:f6:32:26:13:49:26:db:40:48:
                    d9:5a:66:9b:03:80:d3:36:2d:e2:3a:0e:c3:03:12:
                    44:81:99:6d:76:dd:4f:92:72:05:bc:1d:5a:4e:83:
                    cf:08:8d:5c:66:05:4c:82:df:9e:9d:da:d3:e0:75:
                    b8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:1A:1C:4E:44:BE:47:88:01:70:1C:58:82:C7:F9:99:70:34:AC:37
            X509v3 Authority Key Identifier:
                keyid:0D:03:46:C8:A2:66:BE:6A:DC:E4:B7:E8:39:50:AF:5F:E1:EB:E5:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:97:5d:96:81:c7:9d:b1:31:49:44:34:f2:ae:48:4a:0c:ad:
         fb:b5:ba:94:dc:fe:59:3a:e6:9b:f4:76:3c:c2:b1:6d:4c:d3:
         55:bb:b7:e7:6f:80:89:11:07:45:0b:c3:61:b5:7a:72:e1:06:
         30:81:83:06:bd:46:fc:2e:cf:13:4e:55:e1:6f:60:5f:d1:64:
         77:44:83:2d:59:1a:85:d6:c7:d0:3c:46:c8:ba:a4:a7:e6:64:
         1b:7f:6a:7f:b4:d0:57:5e:1f:0d:0d:b9:ef:b5:c1:f1:11:85:
         43:1c:3b:c0:85:21:9a:fb:bf:7b:b0:fa:9b:9b:0d:32:73:b4:
         63:1c:4e:c2:c6:1b:8f:2b:4a:5b:b8:3a:8c:fa:4d:67:aa:b8:
         1b:e0:f6:62:c1:43:93:f3:65:a3:4f:45:d6:0a:aa:10:e0:55:
         79:ac:64:fc:e1:b4:c4:31:52:59:26:b1:44:23:5c:63:51:15:
         35:90:25:80:29:b7:53:f7:71:ed:83:b5:f1:c7:05:4f:89:63:
         af:65:ec:1f:c6:96:bd:0e:01:46:4d:41:2b:c8:b3:e7:51:bb:
         ac:ff:53:a9:02:d6:18:36:9b:f0:88:2a:e7:94:06:2a:fc:82:
         b2:4d:5b:d3:09:0e:26:36:7d:d4:ec:7f:aa:62:b3:b9:8e:6f:
         be:12:3c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:46:55 2026 by rpki-client