Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.mft
File:                     dQVeDYzbFO-fBPi5XayLiclozd0.mft (raw, json)
Hash identifier:          d6UuqrqiGvUUMGYTt/4NQoaT34WygNnNoYvDL5in1mY=
Subject key identifier:   DE:63:4D:61:A8:36:A1:12:C3:37:D3:77:51:95:D1:8D:70:F1:A0:77
Authority key identifier: 75:05:5E:0D:8C:DB:14:EF:9F:04:F8:B9:5D:AC:8B:89:C9:68:CD:DD
Certificate issuer:       /CN=A912C4DB/serialNumber=75055E0D8CDB14EF9F04F8B95DAC8B89C968CDDD
Certificate serial:       0D30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQVeDYzbFO-fBPi5XayLiclozd0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.mft
Manifest number:          0D21
Signing time:             Tue 18 Aug 2026 18:30:35 +0000
Manifest this update:     Tue 18 Aug 2026 18:30:34 +0000
Manifest next update:     Tue 25 Aug 2026 18:30:34 +0000
Files and hashes:         1: dQVeDYzbFO-fBPi5XayLiclozd0.crl (hash: kfsQ5WrjfjWng8p+On9qJPpvAfqyKp9x7aJWdwbdkYI=)
                          2: 3E0EDBC83E0111ECA3AF5462C4F9AE02.roa (hash: fUY5HB4r5+RIwAfPCkMPyTU4vay6oYcoCDFz1+akttk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.crl
                          rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQVeDYzbFO-fBPi5XayLiclozd0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 18:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3376 (0xd30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C4DB, serialNumber=75055E0D8CDB14EF9F04F8B95DAC8B89C968CDDD
        Validity
            Not Before: Aug 18 18:30:34 2026 GMT
            Not After : Aug 25 18:30:34 2026 GMT
        Subject: CN=6a84a4cb-0947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e4:f0:59:0c:b6:e9:71:fd:db:4e:0d:60:41:
                    e9:07:b1:c3:84:a6:11:92:72:5c:c7:12:fa:7f:96:
                    66:d6:59:9a:24:a3:11:62:da:ee:38:f1:25:f1:54:
                    66:b1:66:94:46:68:36:25:28:6c:40:fd:e1:d3:d2:
                    1b:4f:43:f1:9b:ed:64:4e:0b:0b:2c:7a:68:52:7b:
                    65:89:a3:0e:13:3b:46:3c:e4:11:6a:84:f7:6b:a6:
                    32:56:dc:f5:50:f4:59:ce:23:7b:75:fc:b4:bb:04:
                    1c:dc:80:aa:f7:7e:4f:57:6a:78:46:cb:38:81:91:
                    0b:98:46:dd:ad:90:4a:ba:14:02:ce:24:79:ec:d9:
                    c4:58:36:db:2a:e3:e0:a7:83:de:19:f1:71:84:10:
                    37:df:41:b2:d0:d2:cf:42:7b:3d:63:1a:0f:eb:0d:
                    b3:1f:ab:86:30:c4:b3:09:57:12:b7:bb:8d:0c:f1:
                    c6:b5:aa:8b:2a:e4:5e:86:39:2b:84:41:38:77:bd:
                    d0:84:24:8d:a9:4f:0c:02:a9:d5:e1:d6:ca:8b:e9:
                    85:43:93:b0:47:d5:e1:f2:36:24:3a:30:60:f8:09:
                    e1:f1:9a:94:42:28:6c:8c:80:e3:d4:d7:f0:c3:ab:
                    86:6f:9b:6d:26:db:eb:07:ff:12:d4:8d:12:80:c3:
                    b1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:63:4D:61:A8:36:A1:12:C3:37:D3:77:51:95:D1:8D:70:F1:A0:77
            X509v3 Authority Key Identifier:
                keyid:75:05:5E:0D:8C:DB:14:EF:9F:04:F8:B9:5D:AC:8B:89:C9:68:CD:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQVeDYzbFO-fBPi5XayLiclozd0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:a6:fa:07:6e:f8:84:15:70:b8:f0:e3:dc:dc:83:96:f2:d5:
         a1:e0:36:77:b6:bc:54:99:0d:f4:cb:cd:fb:c4:44:58:fa:e8:
         20:85:87:9d:aa:02:8d:a9:c6:14:0a:3a:ff:e9:0a:c8:25:c7:
         cb:2d:8d:a6:79:61:b6:d1:e9:e8:f4:2d:ee:4d:28:d1:39:6d:
         7b:58:dd:e1:76:df:ef:20:e9:f2:5d:8e:f7:7b:5d:8d:eb:32:
         28:7b:eb:26:98:af:08:8e:76:66:fc:d0:4a:57:1e:50:6e:8d:
         f7:d2:c8:9b:c4:bf:f5:ec:fe:90:36:40:e6:34:9d:14:b9:82:
         3a:96:ec:ca:8f:c2:a7:b9:b2:c4:54:9b:90:41:38:30:45:e2:
         bd:7b:1b:81:93:4f:8d:d3:93:0c:9b:07:e1:72:3d:25:df:1a:
         67:13:2a:45:f8:6f:d6:ac:be:f2:ab:9e:7b:a5:a9:5b:2b:be:
         d1:e3:0b:88:5a:2b:1a:12:e3:73:36:b5:7b:b1:d4:68:09:6d:
         ea:10:64:03:ff:70:17:23:ab:2f:a2:d6:af:82:d3:e9:14:54:
         db:33:0e:4a:e3:35:ea:24:23:c4:62:15:98:71:bf:66:70:e1:
         6c:20:c8:60:73:de:07:ab:af:c1:59:0d:a1:13:e4:51:36:c1:
         35:3b:d7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:47:05 2026 by rpki-client