Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft
File:                     dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft (raw, json)
Hash identifier:          irBaigRrv0/ivOEQBFewRQ17TDzyPst4KajO+kdTv1k=
Subject key identifier:   1D:A7:47:96:B9:B9:3C:05:99:59:3B:59:7B:8E:CA:61:89:21:83:0B
Authority key identifier: 75:C0:71:77:40:E9:18:7D:D5:35:11:61:39:01:2F:0F:31:D8:40:97
Certificate issuer:       /CN=A915060F/serialNumber=75C0717740E9187DD535116139012F0F31D84097
Certificate serial:       3582
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft
Manifest number:          3578
Signing time:             Tue 18 Aug 2026 14:17:32 +0000
Manifest this update:     Tue 18 Aug 2026 14:17:32 +0000
Manifest next update:     Tue 25 Aug 2026 14:17:32 +0000
Files and hashes:         1: dcBxd0DpGH3VNRFhOQEvDzHYQJc.crl (hash: XZzHYdhQGpYzB83Yzt10pNUnCg0FBEqnVn7A0xOFd14=)
                          2: FAB5FE6E101811EA9A30176EC4F9AE02.roa (hash: UVjNs6Ee7f+G00eKucHkD5VRAwAYtWeaPm0YXsnnb+4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.crl
                          rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 14:17:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13698 (0x3582)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915060F, serialNumber=75C0717740E9187DD535116139012F0F31D84097
        Validity
            Not Before: Aug 18 14:17:32 2026 GMT
            Not After : Aug 25 14:17:32 2026 GMT
        Subject: CN=6a84697c-197f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:17:11:40:8b:59:ad:93:fb:b7:66:19:24:8c:
                    d1:b8:e6:33:47:47:04:6c:51:40:50:5b:8e:04:64:
                    9e:ce:dc:e8:fc:23:4b:5b:fc:14:d4:31:f9:7d:dc:
                    ea:61:ae:c3:dc:96:e9:1d:2f:93:ca:13:1e:f9:f8:
                    3c:1c:9b:e8:af:6c:d8:ab:8a:18:7c:79:dd:ed:a7:
                    dd:f0:6b:fe:df:ef:01:31:f6:96:d3:7d:85:64:c5:
                    0d:a4:c1:e7:f0:de:4d:82:a5:32:63:41:25:21:a4:
                    03:52:50:7f:cb:17:26:78:0c:28:73:e4:7f:d0:99:
                    b8:79:1d:8b:78:da:0b:c5:bc:40:b6:75:7e:d6:5e:
                    bf:f6:ce:e2:8e:66:4b:93:a8:50:bf:7d:9d:2d:e2:
                    cf:03:ea:b7:94:ab:7d:2c:19:88:8b:e0:7d:4d:84:
                    ad:cb:d7:13:dd:e5:e2:16:42:de:30:da:3b:8e:6f:
                    cc:34:f1:49:16:40:8f:5a:84:46:fc:4e:f1:5b:e2:
                    0f:7b:de:e1:90:6b:80:93:12:77:80:b5:d4:69:5d:
                    b3:02:d8:00:7c:11:7d:3c:36:4c:9e:63:00:76:d2:
                    25:35:2a:ad:36:5a:55:06:4f:f4:bb:eb:20:99:49:
                    36:29:3e:e0:a7:5a:43:76:98:66:20:9b:78:1e:37:
                    c8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:A7:47:96:B9:B9:3C:05:99:59:3B:59:7B:8E:CA:61:89:21:83:0B
            X509v3 Authority Key Identifier:
                keyid:75:C0:71:77:40:E9:18:7D:D5:35:11:61:39:01:2F:0F:31:D8:40:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:0c:04:19:74:ea:b1:4d:20:4d:7e:b0:3d:65:e3:d4:84:ed:
         f3:84:7a:2c:a3:43:da:2d:16:00:0f:66:97:f9:42:ba:c7:26:
         74:f4:64:d0:59:10:30:f9:f4:c5:24:50:9f:2a:92:00:ee:3e:
         2d:1d:41:bf:a3:a1:42:b5:25:d0:ae:3a:05:1d:93:02:88:44:
         bc:90:b9:a8:ce:03:16:27:51:56:db:7a:62:fa:51:02:72:72:
         a9:96:ef:f2:2a:48:1b:18:17:42:83:8a:b5:c6:46:3f:a7:49:
         ba:4e:ec:58:5d:1d:4a:a0:16:7e:cc:bf:fc:df:4b:77:f0:f1:
         8b:d1:f7:5a:0d:6f:30:28:e8:8d:96:92:b7:23:dc:02:16:b0:
         7b:4d:e3:92:4f:70:9a:93:78:09:a7:02:f0:c8:a0:4d:47:0b:
         e3:47:52:11:14:2a:f8:26:9c:33:d4:d6:fa:f3:58:f6:02:81:
         3d:de:a9:23:28:5a:38:34:8a:c2:23:7e:24:fe:81:14:a0:16:
         da:d4:62:2c:76:86:2d:5c:fe:48:4c:0e:72:2d:6f:45:e5:6b:
         a3:ec:96:37:e7:40:62:8c:23:91:aa:f2:21:63:79:a6:b6:f7:
         b8:5e:5c:14:3e:23:e9:7b:7d:ce:a4:1a:fe:37:fa:ae:6f:e9:
         24:35:d0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:47:32 2026 by rpki-client