Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft
File:                     DYxttID--Lv1xosdQ5bdhfWTwUY.mft (raw, json)
Hash identifier:          aHSbDsJ1VWNzslfcTofpVeGjQlAMkw1DgbQW2OByMQ8=
Subject key identifier:   5F:BB:4E:F1:A1:49:A3:CD:0B:32:36:54:48:84:CF:9B:81:A4:59:34
Authority key identifier: 0D:8C:6D:B4:80:FE:F8:BB:F5:C6:8B:1D:43:96:DD:85:F5:93:C1:46
Certificate issuer:       /CN=A9150A44/serialNumber=0D8C6DB480FEF8BBF5C68B1D4396DD85F593C146
Certificate serial:       1228
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYxttID--Lv1xosdQ5bdhfWTwUY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft
Manifest number:          121B
Signing time:             Mon 20 Jul 2026 17:17:18 +0000
Manifest this update:     Mon 20 Jul 2026 17:17:18 +0000
Manifest next update:     Mon 27 Jul 2026 17:17:18 +0000
Files and hashes:         1: DYxttID--Lv1xosdQ5bdhfWTwUY.crl (hash: eQRbWt9sPRcL1ZvZFON1YPHKvc5DqKeSBhVgAfs+Lu0=)
                          2: 9F3D07940A3D11E9A4A5D873C4F9AE02.roa (hash: CBq8LWgrgXC9mO0SUvr0TrX8pn6h91JP7Wdayc/HFqk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.crl
                          rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYxttID--Lv1xosdQ5bdhfWTwUY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 17:17:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4648 (0x1228)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150A44, serialNumber=0D8C6DB480FEF8BBF5C68B1D4396DD85F593C146
        Validity
            Not Before: Jul 20 17:17:18 2026 GMT
            Not After : Jul 27 17:17:18 2026 GMT
        Subject: CN=6a5e581e-5699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:67:99:88:72:cf:3f:ff:45:59:c9:e1:97:67:
                    a2:bb:7b:02:f5:53:8d:35:ed:94:be:1f:f4:85:56:
                    e6:e4:a3:35:38:e8:e8:33:d6:46:92:d7:d2:f5:ed:
                    a3:f6:d2:a5:72:36:60:7e:31:c4:9b:23:95:72:49:
                    eb:a3:3e:b3:a0:4a:93:f9:ae:f8:2b:73:be:84:2f:
                    52:c0:f5:26:76:5e:ad:5b:2b:4c:c3:5c:4c:ae:46:
                    bd:2f:cb:80:7f:e6:d9:22:4f:4c:4e:0b:d0:7d:c3:
                    c6:4e:ec:ef:29:18:7d:ac:74:c5:f0:46:b4:5e:88:
                    ae:30:66:09:59:76:4a:88:b4:e3:b9:6d:6c:b3:0a:
                    73:c1:36:39:3d:c9:9e:37:71:c3:0a:e0:f0:ad:7f:
                    63:3a:5a:68:11:db:a8:8b:9f:bf:02:c2:20:e9:9f:
                    24:20:86:5f:a0:23:0c:19:64:da:7e:a1:3b:29:08:
                    06:7e:28:1d:89:be:6f:15:a9:f9:7e:0d:35:af:99:
                    b7:19:9e:09:53:e5:e0:d0:71:f9:f5:6d:0d:aa:6d:
                    ff:42:57:e5:4a:b0:97:6e:c2:f3:56:15:e5:2a:f0:
                    8a:53:4b:64:96:f0:15:17:b4:af:e6:69:03:04:6f:
                    96:f4:2d:10:ef:a2:9e:24:8b:b2:4f:04:61:a6:19:
                    41:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:BB:4E:F1:A1:49:A3:CD:0B:32:36:54:48:84:CF:9B:81:A4:59:34
            X509v3 Authority Key Identifier:
                keyid:0D:8C:6D:B4:80:FE:F8:BB:F5:C6:8B:1D:43:96:DD:85:F5:93:C1:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYxttID--Lv1xosdQ5bdhfWTwUY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:5e:9b:e8:80:4b:23:3f:77:ef:0f:84:e3:dc:c0:f5:fb:56:
         23:c2:0b:e9:e5:e3:df:7e:4d:64:4d:7d:c9:89:4c:91:da:ce:
         c6:f7:56:f5:42:73:eb:69:18:4e:57:a4:bf:7d:93:1e:35:0e:
         ea:a4:e9:14:52:2d:af:3a:ab:ba:03:a9:b6:d4:f0:3a:5f:15:
         f3:d9:ff:19:a8:40:00:34:3c:8e:3f:3e:30:86:08:6d:89:aa:
         ee:ca:8f:8b:2f:5b:6d:ab:7b:3f:0c:f6:ca:cc:8b:36:f0:30:
         dd:b2:5b:31:64:db:0c:c8:71:cf:ef:c3:a0:55:28:f6:ce:ec:
         8a:f8:37:4c:69:af:20:4d:c3:d3:85:b1:52:ce:db:db:9a:f6:
         6c:7e:34:ec:40:e3:45:88:42:3c:63:ba:3e:c8:0f:65:f5:ba:
         de:d3:a8:4a:99:3e:44:69:46:1a:4b:fe:79:38:f6:66:ae:31:
         1b:56:25:45:95:9a:d0:d7:9d:ab:17:47:57:d4:46:87:97:49:
         80:c7:89:f3:fb:9d:6b:1e:b0:b2:d2:fd:af:39:c6:3c:12:60:
         02:01:3d:0b:a5:4d:6b:d2:f4:06:75:a4:98:0a:94:80:26:10:
         07:89:0a:e9:e1:2b:82:6a:6d:b6:66:85:54:f9:ae:c0:ca:bf:
         01:c0:b0:b2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTBBNDQxMTAvBgNVBAUTKDBEOEM2REI0ODBGRUY4QkJGNUM2OEIxRDQzOTZERDg1
RjU5M0MxNDYwHhcNMjYwNzIwMTcxNzE4WhcNMjYwNzI3MTcxNzE4WjAYMRYwFAYD
VQQDEw02YTVlNTgxZS01Njk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp2eZiHLPP/9FWcnhl2eiu3sC9VONNe2Uvh/0hVbm5KM1OOjoM9ZGktfS9e2j
9tKlcjZgfjHEmyOVcknroz6zoEqT+a74K3O+hC9SwPUmdl6tWytMw1xMrka9L8uA
f+bZIk9MTgvQfcPGTuzvKRh9rHTF8Ea0XoiuMGYJWXZKiLTjuW1sswpzwTY5Pcme
N3HDCuDwrX9jOlpoEduoi5+/AsIg6Z8kIIZfoCMMGWTafqE7KQgGfigdib5vFan5
fg01r5m3GZ4JU+Xg0HH59W0Nqm3/QlflSrCXbsLzVhXlKvCKU0tklvAVF7Sv5mkD
BG+W9C0Q76KeJIuyTwRhphlBoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF+7TvGh
SaPNCzI2VEiEz5uBpFk0MB8GA1UdIwQYMBaAFA2MbbSA/vi79caLHUOW3YX1k8FG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEE0NC83Mzk3NzVDRTBB
MzQxMUU5OEVFODcxNUVDNEY5QUUwMi9EWXh0dElELS1MdjF4b3NkUTViZGhmV1R3
VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RZeHR0SUQtLUx2MXhvc2RRNWJkaGZXVHdVWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MEE0NC83Mzk3NzVDRTBBMzQxMUU5OEVFODcxNUVDNEY5QUUwMi9EWXh0dElELS1M
djF4b3NkUTViZGhmV1R3VVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvF6b6IBLIz937w+E49zA9ftWI8IL6eXj335NZE19yYlMkdrOxvdW9UJz62kY
Tlekv32THjUO6qTpFFItrzqrugOpttTwOl8V89n/GahAADQ8jj8+MIYIbYmq7sqP
iy9bbat7Pwz2ysyLNvAw3bJbMWTbDMhxz+/DoFUo9s7sivg3TGmvIE3D04WxUs7b
25r2bH407EDjRYhCPGO6PsgPZfW63tOoSpk+RGlGGkv+eTj2Zq4xG1YlRZWa0Ned
qxdHV9RGh5dJgMeJ8/udax6wstL9rznGPBJgAgE9C6VNa9L0BnWkmAqUgCYQB4kK
6eErgmpttmaFVPmuwMq/AcCwsg==
-----END CERTIFICATE-----
Generated at Wed Jul 22 03:06:48 2026 by rpki-client