Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft
File:                     D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft (raw, json)
Hash identifier:          2oM1o/L92/VKedJuDtwDDRkOAs05eSsRg1y4fXC6Zos=
Subject key identifier:   98:E6:0C:F6:C1:B1:87:AE:DB:FE:55:3C:66:80:E4:81:B8:95:89:0D
Authority key identifier: 0F:91:4A:1D:C9:4F:5B:E4:2E:88:3C:2A:DD:54:30:BC:DF:6D:F3:34
Certificate issuer:       /CN=A9139661/serialNumber=0F914A1DC94F5BE42E883C2ADD5430BCDF6DF334
Certificate serial:       D5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5FKHclPW-QuiDwq3VQwvN9t8zQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft
Manifest number:          CD
Signing time:             Fri 17 Jul 2026 08:06:08 +0000
Manifest this update:     Fri 17 Jul 2026 08:06:08 +0000
Manifest next update:     Fri 24 Jul 2026 08:06:08 +0000
Files and hashes:         1: D5FKHclPW-QuiDwq3VQwvN9t8zQ.crl (hash: EdpDMpOG8yhfKu6a2F212IBUY4X7bGJZK3x43jkeX/I=)
                          2: C4C4028A5B4C11F0807A3A60C4F9AE02.roa (hash: ki7xh64GIKfwbhwFIwfLQ7ubTp/Y8e6eL9BMSGhKC7E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.crl
                          rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5FKHclPW-QuiDwq3VQwvN9t8zQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 08:06:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 213 (0xd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139661, serialNumber=0F914A1DC94F5BE42E883C2ADD5430BCDF6DF334
        Validity
            Not Before: Jul 17 08:06:08 2026 GMT
            Not After : Jul 24 08:06:08 2026 GMT
        Subject: CN=6a59e270-aa81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:dc:88:54:52:9c:0b:ce:4d:30:e4:c1:fb:dc:
                    1a:ef:68:04:d9:9d:fb:12:d1:96:2d:ef:47:b0:1f:
                    a7:32:cd:3f:1f:61:31:11:57:bd:dc:b9:f4:7b:a4:
                    89:b5:c3:57:a1:ac:ef:d3:ad:94:31:46:e2:33:7a:
                    75:0c:72:9c:5c:a0:3d:09:6a:64:48:99:6b:76:9b:
                    a0:e5:86:0d:79:b4:c4:94:e9:67:02:14:31:4e:bb:
                    74:25:05:0b:21:a7:82:4d:63:b0:a0:b5:f7:7e:57:
                    90:f9:79:2e:53:2c:59:6e:ff:1b:f4:e8:03:c7:0f:
                    c0:08:3e:d8:2f:4d:17:c0:81:e8:a1:cb:95:8a:3d:
                    df:84:cd:5a:f9:2d:6f:38:c1:ea:15:e0:38:f2:c8:
                    c9:5d:7b:b5:ce:14:17:55:ad:9f:69:04:4a:6f:02:
                    e9:c3:90:92:d3:70:60:a6:77:38:ab:0c:c3:80:67:
                    a2:c2:1a:98:5b:68:68:ff:fe:0d:2a:ed:e9:25:ea:
                    52:c7:a0:4d:d6:2e:bb:5c:e1:bf:86:f6:04:4f:6d:
                    86:7d:ff:80:b3:ee:53:d3:cf:4c:4f:09:77:26:21:
                    b8:34:31:17:4e:3d:cd:d5:33:d3:50:a4:31:a4:3f:
                    4e:92:b4:10:39:80:73:a8:dd:57:61:6f:0e:9f:40:
                    20:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E6:0C:F6:C1:B1:87:AE:DB:FE:55:3C:66:80:E4:81:B8:95:89:0D
            X509v3 Authority Key Identifier:
                keyid:0F:91:4A:1D:C9:4F:5B:E4:2E:88:3C:2A:DD:54:30:BC:DF:6D:F3:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5FKHclPW-QuiDwq3VQwvN9t8zQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:fa:1f:d5:eb:c0:70:8b:86:94:d0:e1:56:ef:70:c1:2d:24:
         42:bb:55:ea:00:39:bb:6e:c7:1c:ca:4d:df:53:45:47:a1:1a:
         08:94:7d:30:cc:d6:13:88:22:d9:c0:df:bb:78:2a:32:cf:75:
         bf:ad:3a:db:6a:e6:73:29:56:9f:3d:b1:b5:7b:ef:79:2b:a8:
         9d:78:5d:66:b9:b2:0c:12:8a:c7:58:87:ce:d8:11:52:5a:01:
         60:13:3a:95:31:12:05:12:99:9b:54:bf:2a:f7:b3:4f:49:65:
         d4:ec:58:c3:69:10:5a:6e:83:67:b2:d0:95:73:78:22:bd:b7:
         73:f0:06:6c:5c:d5:7a:6f:2e:3f:39:cf:50:29:5e:63:0c:ca:
         81:9b:4d:b3:81:49:a9:83:46:9c:92:2c:a4:00:c2:05:8c:c2:
         c8:5e:77:59:53:d7:f3:8d:9d:73:71:f6:38:5d:3e:71:e9:13:
         00:0c:de:c6:48:a1:d2:15:78:b7:18:87:18:75:43:8b:50:87:
         af:38:bf:e6:46:f0:a0:6a:77:31:8e:66:98:61:6b:f7:f0:b4:
         f9:fd:64:fc:31:78:de:5e:0e:f6:6d:e0:2a:36:03:57:4a:11:
         65:78:c1:b6:b3:bf:b6:4a:0c:cd:7c:9f:97:56:46:a4:4d:2d:
         56:39:4a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:49 2026 by rpki-client