Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.mft
File:                     DIVZ0jPb-6-9EDIimYXfPfkTSPw.mft (raw, json)
Hash identifier:          k5q8U2aaelp1nni1aQ5Ii/u0F9VezEX91BLe0rlteMw=
Subject key identifier:   4B:F5:B2:BB:BF:B1:72:D9:F5:73:05:C3:93:4F:E2:30:F9:E9:08:31
Authority key identifier: 0C:85:59:D2:33:DB:FB:AF:BD:10:32:22:99:85:DF:3D:F9:13:48:FC
Certificate issuer:       /CN=A9147BCF/serialNumber=0C8559D233DBFBAFBD1032229985DF3DF91348FC
Certificate serial:       0122
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DIVZ0jPb-6-9EDIimYXfPfkTSPw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.mft
Manifest number:          011F
Signing time:             Thu 27 Aug 2026 05:21:17 +0000
Manifest this update:     Thu 27 Aug 2026 05:21:17 +0000
Manifest next update:     Thu 03 Sep 2026 05:21:17 +0000
Files and hashes:         1: DIVZ0jPb-6-9EDIimYXfPfkTSPw.crl (hash: hGv4Eqe0YO3NzTizhlrP/WRQ7AEPl5hjf844R4VKX9s=)
                          2: A7B64E90EA7311EF83DF9312C4F9AE02.roa (hash: kAGTtiStnHMpbONE8q36czkYvOAd/yxjeZDFDMyjrzg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.crl
                          rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DIVZ0jPb-6-9EDIimYXfPfkTSPw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 03 Sep 2026 05:21:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 290 (0x122)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147BCF, serialNumber=0C8559D233DBFBAFBD1032229985DF3DF91348FC
        Validity
            Not Before: Aug 27 05:21:17 2026 GMT
            Not After : Sep  3 05:21:17 2026 GMT
        Subject: CN=6a8fc94d-fef4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8e:57:48:19:1b:9f:53:8f:a4:40:6d:d3:7f:
                    c4:81:bd:f6:ce:b1:ec:d6:0c:56:87:14:e3:a6:1e:
                    d2:a2:3e:81:85:f7:44:70:6b:01:94:2b:68:7c:26:
                    8a:02:2b:52:e2:92:d2:4f:8b:4a:6d:a2:a0:c8:72:
                    9e:d2:f3:19:37:b8:b9:bb:6d:36:f5:33:db:fc:a0:
                    ed:50:d6:f3:29:b3:05:13:f1:8a:fb:4d:c9:83:47:
                    bb:9c:46:0a:37:fb:c8:c1:32:d4:03:9e:db:74:bf:
                    a0:45:e2:f5:64:c8:b2:79:38:7a:90:96:d5:69:35:
                    6f:d4:d7:6e:8c:76:03:89:8e:15:c2:60:cd:85:8a:
                    37:7a:37:f7:ab:76:4c:80:b2:14:b5:03:6c:c0:22:
                    83:96:5f:7d:40:72:37:1c:ed:98:fe:a6:92:d4:89:
                    3b:80:6a:62:8b:27:61:7c:41:61:f6:1b:48:1d:dd:
                    d4:14:44:29:11:64:2d:42:18:5f:3f:6f:63:34:1d:
                    e5:a1:d2:48:3c:b6:cb:ae:a5:d4:9b:b0:78:a9:8a:
                    ce:7d:00:95:3c:4c:0c:8b:90:c6:67:9a:46:73:34:
                    14:79:fd:f4:26:bb:c8:48:96:3a:5f:6f:3e:e7:52:
                    da:25:45:0d:e2:c5:6f:83:a1:cf:b9:7e:53:7d:7c:
                    1a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F5:B2:BB:BF:B1:72:D9:F5:73:05:C3:93:4F:E2:30:F9:E9:08:31
            X509v3 Authority Key Identifier:
                keyid:0C:85:59:D2:33:DB:FB:AF:BD:10:32:22:99:85:DF:3D:F9:13:48:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DIVZ0jPb-6-9EDIimYXfPfkTSPw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:1b:07:16:91:8a:9b:98:2b:3a:c3:85:27:0d:cb:0f:38:89:
         82:cf:7f:00:42:fb:62:d9:82:65:a2:14:86:8f:2b:f5:c6:64:
         1b:1c:2c:d4:a7:d2:83:5c:68:4b:8a:94:aa:cd:59:10:af:2b:
         92:31:ae:15:8e:cd:2e:48:37:12:f9:fd:b1:8f:67:fe:6e:0a:
         22:cf:3a:e7:8b:8e:4f:e5:e1:ba:7b:31:7f:f6:7d:c1:bb:48:
         0f:a5:03:04:4d:36:b4:08:16:dc:df:49:1b:8d:ca:e0:47:16:
         e3:f7:07:8a:ce:e7:50:e3:03:f1:b2:4a:4e:93:1b:a1:b5:b4:
         a8:d1:16:3e:92:6d:fe:20:b6:a0:df:e8:d2:77:9d:31:6c:6d:
         b3:37:b2:72:2c:a1:f4:4a:ee:70:7c:0b:57:ad:77:d8:71:1d:
         82:f4:7b:33:9e:26:8f:e7:52:c7:dc:5d:ae:c1:fc:b6:9b:e3:
         4e:fd:68:12:8f:a8:68:1b:7f:f5:3f:a9:14:f7:7b:50:39:f9:
         09:06:54:33:17:92:7d:3d:f0:70:15:7b:e6:29:2e:a4:43:0a:
         08:33:97:8c:10:1b:41:a6:cd:b2:35:c4:8b:43:90:6d:db:64:
         34:a4:84:e0:db:64:9b:0d:d7:77:5d:e9:77:56:c8:7d:e1:70:
         f7:a3:4b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 11:28:41 2026 by rpki-client