Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.mft
File:                     DBvOAktD_dqH85YV2ZS6NwYkbFA.mft (raw, json)
Hash identifier:          tv2zwyE2tQGIQT3N3rUbMwRn7lGTOJI0v60jxYkHtso=
Subject key identifier:   DF:B3:10:FA:F1:9E:6A:9B:FD:9D:9E:DB:9D:64:46:22:C0:33:0D:67
Authority key identifier: 0C:1B:CE:02:4B:43:FD:DA:87:F3:96:15:D9:94:BA:37:06:24:6C:50
Certificate issuer:       /CN=A911A739/serialNumber=0C1BCE024B43FDDA87F39615D994BA3706246C50
Certificate serial:       015B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DBvOAktD_dqH85YV2ZS6NwYkbFA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.mft
Manifest number:          0151
Signing time:             Wed 19 Aug 2026 05:52:10 +0000
Manifest this update:     Wed 19 Aug 2026 05:52:10 +0000
Manifest next update:     Wed 26 Aug 2026 05:52:10 +0000
Files and hashes:         1: DBvOAktD_dqH85YV2ZS6NwYkbFA.crl (hash: KwAU73nygSXarSgBaq48AnbaVkIJtgocKXqCQneywmY=)
                          2: 41121A8C9F5211EFA8F8A056C4F9AE02.roa (hash: DgrISf8wMW93o1gP88Fcu6RvxMw+S3lnAYVwlOLIu3w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.crl
                          rsync://rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DBvOAktD_dqH85YV2ZS6NwYkbFA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 05:52:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 347 (0x15b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A739, serialNumber=0C1BCE024B43FDDA87F39615D994BA3706246C50
        Validity
            Not Before: Aug 19 05:52:10 2026 GMT
            Not After : Aug 26 05:52:10 2026 GMT
        Subject: CN=6a85448a-cbfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:1d:ac:3d:41:d8:29:bc:c1:5a:e2:9e:90:22:
                    58:c4:25:47:f1:05:d8:8d:05:2d:4d:04:df:3a:bc:
                    f1:ee:80:27:9b:34:68:57:93:fa:7f:24:02:e5:f2:
                    ac:bb:5b:33:9b:89:35:09:6a:46:e6:f8:52:cb:3a:
                    7e:31:e6:25:33:07:45:df:0e:a8:a8:26:fe:6d:dc:
                    74:6b:d9:80:96:d4:04:18:36:28:c5:08:0f:0b:ea:
                    f0:3a:16:28:1a:08:4c:6c:d6:88:8b:b1:cd:5e:24:
                    c6:78:11:db:5a:b2:bd:f6:ba:55:c8:7d:9a:38:ba:
                    b0:20:e8:d5:8c:28:d9:e9:b9:85:d1:aa:30:b0:c7:
                    d2:a2:14:fc:d0:0e:82:61:73:3d:12:1f:de:5b:45:
                    15:71:85:ff:bf:e4:9a:12:cf:b9:4f:65:4b:96:7a:
                    2e:c4:e4:d1:7f:ed:c1:01:f3:f8:71:37:fd:89:d5:
                    bc:2d:c6:be:0e:6c:59:f0:66:90:ef:18:36:1c:55:
                    4f:31:24:89:1c:6b:f7:85:00:4e:cc:8b:67:06:73:
                    fc:05:82:f0:fa:09:82:b4:da:b4:24:33:1a:64:8e:
                    4c:73:80:42:d2:e5:fa:bb:d8:19:25:5c:50:24:32:
                    37:0f:a3:3d:83:dd:a7:fa:a4:0d:76:69:33:ea:a3:
                    fe:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:B3:10:FA:F1:9E:6A:9B:FD:9D:9E:DB:9D:64:46:22:C0:33:0D:67
            X509v3 Authority Key Identifier:
                keyid:0C:1B:CE:02:4B:43:FD:DA:87:F3:96:15:D9:94:BA:37:06:24:6C:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DBvOAktD_dqH85YV2ZS6NwYkbFA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:14:95:3d:9a:a8:21:36:cf:34:e6:21:ee:65:d5:b1:26:5e:
         0f:05:b1:e8:1c:42:8c:00:68:9b:e4:99:51:18:c1:d9:54:58:
         c8:6d:39:4f:f3:bc:d1:11:e9:23:c9:85:28:86:7d:7c:1e:93:
         33:1e:60:86:3d:a8:ed:06:b1:e3:1c:be:32:b1:ff:09:4b:8d:
         4c:d8:36:99:5d:d9:2c:47:d2:29:2c:98:c1:69:2d:88:19:f6:
         e3:33:b7:7b:1d:9d:8c:11:5d:e0:ec:11:00:16:8c:ea:8a:8d:
         01:16:6f:38:ac:a3:5e:47:1d:35:e1:61:6d:a3:f7:1c:b3:b7:
         d7:05:42:29:19:5b:f8:8c:33:66:2c:69:46:46:fe:e9:92:73:
         12:6b:c3:f8:9a:3c:7d:31:8c:0f:e4:00:36:ed:85:97:37:2c:
         16:ca:29:a5:cd:fc:e5:e1:4e:44:c4:06:d7:06:2b:f9:eb:f6:
         0f:56:24:81:b5:27:57:86:76:56:63:74:5e:17:5b:78:aa:d3:
         d5:7c:3a:67:cd:56:79:d0:96:cc:10:84:22:67:62:3a:44:fa:
         09:d8:42:ba:d0:10:15:a2:c3:1c:17:e0:7c:9c:c6:a0:f7:18:
         d2:ef:3e:f2:6f:c6:9f:0a:54:11:bd:b8:a0:ab:30:f4:50:43:
         d8:42:b4:11
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUE3MzkxMTAvBgNVBAUTKDBDMUJDRTAyNEI0M0ZEREE4N0YzOTYxNUQ5OTRCQTM3
MDYyNDZDNTAwHhcNMjYwODE5MDU1MjEwWhcNMjYwODI2MDU1MjEwWjAYMRYwFAYD
VQQDEw02YTg1NDQ4YS1jYmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3h2sPUHYKbzBWuKekCJYxCVH8QXYjQUtTQTfOrzx7oAnmzRoV5P6fyQC5fKs
u1szm4k1CWpG5vhSyzp+MeYlMwdF3w6oqCb+bdx0a9mAltQEGDYoxQgPC+rwOhYo
GghMbNaIi7HNXiTGeBHbWrK99rpVyH2aOLqwIOjVjCjZ6bmF0aowsMfSohT80A6C
YXM9Eh/eW0UVcYX/v+SaEs+5T2VLlnouxOTRf+3BAfP4cTf9idW8Lca+DmxZ8GaQ
7xg2HFVPMSSJHGv3hQBOzItnBnP8BYLw+gmCtNq0JDMaZI5Mc4BC0uX6u9gZJVxQ
JDI3D6M9g92n+qQNdmkz6qP+7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN+zEPrx
nmqb/Z2e251kRiLAMw1nMB8GA1UdIwQYMBaAFAwbzgJLQ/3ah/OWFdmUujcGJGxQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTczOS9DOTVEMzk3QzlG
NTExMUVGOUI2M0NDNTVDNEY5QUUwMi9EQnZPQWt0RF9kcUg4NVlWMlpTNk53WWti
RkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RCdk9Ba3REX2RxSDg1WVYyWlM2TndZa2JGQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QTczOS9DOTVEMzk3QzlGNTExMUVGOUI2M0NDNTVDNEY5QUUwMi9EQnZPQWt0RF9k
cUg4NVlWMlpTNk53WWtiRkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsRSVPZqoITbPNOYh7mXVsSZeDwWx6BxCjABom+SZURjB2VRYyG05T/O80RHp
I8mFKIZ9fB6TMx5ghj2o7Qax4xy+MrH/CUuNTNg2mV3ZLEfSKSyYwWktiBn24zO3
ex2djBFd4OwRABaM6oqNARZvOKyjXkcdNeFhbaP3HLO31wVCKRlb+IwzZixpRkb+
6ZJzEmvD+Jo8fTGMD+QANu2FlzcsFsoppc385eFORMQG1wYr+ev2D1YkgbUnV4Z2
VmN0XhdbeKrT1Xw6Z81WedCWzBCEImdiOkT6CdhCutAQFaLDHBfgfJzGoPcY0u8+
8m/GnwpUEb24oKsw9FBD2EK0EQ==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:50:40 2026 by rpki-client