Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.mft
File:                     DAsd1farZExXB4GkKeRIBQIY6es.mft (raw, json)
Hash identifier:          pBIbQQqzfNHPPfovkm1v4lV2Eh7TLRjYOOvuyeOVmRU=
Subject key identifier:   94:D7:5B:D4:5B:88:2B:C3:17:09:7C:0C:03:9A:BC:07:18:12:E5:29
Authority key identifier: 0C:0B:1D:D5:F6:AB:64:4C:57:07:81:A4:29:E4:48:05:02:18:E9:EB
Certificate issuer:       /CN=A9134C3E/serialNumber=0C0B1DD5F6AB644C570781A429E448050218E9EB
Certificate serial:       062F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAsd1farZExXB4GkKeRIBQIY6es.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.mft
Manifest number:          0627
Signing time:             Tue 18 Aug 2026 23:06:27 +0000
Manifest this update:     Tue 18 Aug 2026 23:06:26 +0000
Manifest next update:     Tue 25 Aug 2026 23:06:26 +0000
Files and hashes:         1: DAsd1farZExXB4GkKeRIBQIY6es.crl (hash: PKLcsadxhVCqlQvLXcjNCybvpxK+URXduq5n8UdYgS4=)
                          2: 9222BEB4F42811EB93675638C4F9AE02.roa (hash: 6HsD3sseCphc3/BZBODW3HEmOFr281UYwABXHbGsI7E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.crl
                          rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAsd1farZExXB4GkKeRIBQIY6es.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 23:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1583 (0x62f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134C3E, serialNumber=0C0B1DD5F6AB644C570781A429E448050218E9EB
        Validity
            Not Before: Aug 18 23:06:26 2026 GMT
            Not After : Aug 25 23:06:26 2026 GMT
        Subject: CN=6a84e573-c300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:25:37:bf:67:fc:94:e8:34:db:93:bc:a4:f0:
                    a7:44:31:4d:2a:a9:7c:45:c9:90:9d:67:5e:d4:4d:
                    87:5e:72:ee:f1:71:af:a4:35:7a:23:75:fc:86:47:
                    c0:b5:91:78:74:67:dc:ab:a3:01:58:fe:9b:ce:0a:
                    fb:40:a5:70:1e:fe:3e:4e:cd:b6:14:41:12:f6:54:
                    ec:b3:5e:c7:51:af:db:52:53:9c:a6:94:56:ce:c5:
                    0c:04:1b:63:e9:21:b8:46:50:36:fe:89:04:ac:11:
                    76:46:39:eb:d7:dc:37:bc:3c:2d:e6:c1:3c:40:cb:
                    9c:da:fe:75:c5:13:2f:d1:b0:26:81:f9:aa:9b:60:
                    7e:fc:94:3b:33:10:86:44:24:26:7b:75:4f:6c:85:
                    3f:81:7d:73:0e:36:14:1f:e5:3a:d4:82:e9:e8:15:
                    7d:ea:b5:04:4f:b9:ea:f2:6e:7f:df:ae:33:d7:08:
                    04:72:29:8f:d2:0b:60:97:8a:68:8a:a8:69:1c:84:
                    86:51:e6:82:c2:0b:a5:54:0e:68:44:90:3d:01:16:
                    32:be:0f:d1:1c:b4:1e:96:9d:40:3e:c1:44:e5:78:
                    15:a8:b7:7a:ea:3e:4b:14:88:3b:8d:f2:4e:45:ae:
                    84:9f:d8:80:a2:a9:f8:2f:4a:61:ce:5d:14:97:89:
                    c7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:D7:5B:D4:5B:88:2B:C3:17:09:7C:0C:03:9A:BC:07:18:12:E5:29
            X509v3 Authority Key Identifier:
                keyid:0C:0B:1D:D5:F6:AB:64:4C:57:07:81:A4:29:E4:48:05:02:18:E9:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAsd1farZExXB4GkKeRIBQIY6es.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:14:a8:c4:ce:d1:a0:e4:1f:57:f6:c6:51:88:a5:50:77:f8:
         15:aa:5a:f4:f8:2f:13:d4:2c:97:25:22:c0:79:42:b3:4f:f4:
         76:f0:07:97:61:78:41:b0:08:69:16:6e:dd:70:94:f6:69:ee:
         df:69:76:a6:3e:32:c4:d8:86:90:59:66:5f:a9:bf:b2:f0:a0:
         da:ff:4a:eb:34:8a:12:dc:0c:ac:74:4e:3f:26:ca:b4:05:a1:
         ce:e3:93:71:49:f3:52:e8:c5:4e:81:13:73:25:d3:8f:97:69:
         80:2b:ad:d3:77:72:29:1e:cf:44:0d:f2:3a:6e:d3:c9:08:89:
         fd:a9:86:e8:5b:73:a0:d4:06:50:c6:5d:33:fb:d9:f1:48:1f:
         5d:63:ad:fa:f6:ed:93:29:37:36:0d:ce:86:3a:53:b6:cc:a5:
         eb:08:fb:f7:9f:8a:bc:d6:06:e7:30:35:98:23:ca:c3:17:af:
         6e:c6:a4:10:20:a6:01:c6:71:54:1c:1b:6f:7e:dd:9d:e0:97:
         2b:54:7e:b7:ed:54:22:b9:b3:40:19:19:c2:47:76:2e:fe:06:
         36:44:d4:76:25:8a:fb:9d:3b:31:62:43:f3:88:49:0a:94:da:
         c4:fa:93:5d:40:c8:e1:c3:a0:f8:bb:e9:2a:4f:5e:9f:99:60:
         57:e7:ec:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:41:34 2026 by rpki-client