Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/DvqgEPOwbVMhkO827SAodPggF8k.mft
File:                     DvqgEPOwbVMhkO827SAodPggF8k.mft (raw, json)
Hash identifier:          sdolnsBhz9YhYiPpnEa0V+R5TK5IHlvzNh61v2CmuM4=
Subject key identifier:   93:A2:52:81:28:E1:D9:18:CE:0C:EB:9A:11:02:17:A0:F3:20:08:61
Authority key identifier: 0E:FA:A0:10:F3:B0:6D:53:21:90:EF:36:ED:20:28:74:F8:20:17:C9
Certificate issuer:       /CN=A9167F0C/serialNumber=0EFAA010F3B06D532190EF36ED202874F82017C9
Certificate serial:       1004
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DvqgEPOwbVMhkO827SAodPggF8k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/DvqgEPOwbVMhkO827SAodPggF8k.mft
Manifest number:          1AC2
Signing time:             Mon 22 Jun 2026 17:26:40 +0000
Manifest this update:     Mon 22 Jun 2026 17:26:40 +0000
Manifest next update:     Mon 29 Jun 2026 17:26:40 +0000
Files and hashes:         1: DvqgEPOwbVMhkO827SAodPggF8k.crl (hash: CXfggYkrcouW/trYEhA2jPEWOwzoCcUyuD7gDKaolwY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/DvqgEPOwbVMhkO827SAodPggF8k.crl
                          rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/DvqgEPOwbVMhkO827SAodPggF8k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DvqgEPOwbVMhkO827SAodPggF8k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 17:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4100 (0x1004)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167F0C, serialNumber=0EFAA010F3B06D532190EF36ED202874F82017C9
        Validity
            Not Before: Jun 22 17:26:40 2026 GMT
            Not After : Jun 29 17:26:40 2026 GMT
        Subject: CN=6a397050-81d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8b:81:eb:3d:9c:02:38:b0:71:5a:c1:35:78:
                    c3:4b:7a:75:6b:56:26:69:31:c4:06:e8:c6:4a:a3:
                    f7:89:be:e0:e3:f0:80:1d:76:62:3b:a2:bc:dd:dc:
                    b2:87:d5:ae:b2:e8:20:fc:01:74:9b:12:62:b8:a5:
                    a4:ce:71:63:a7:77:10:8b:3c:d3:34:1c:2d:0f:ab:
                    21:70:2e:54:02:ab:11:89:17:4f:74:21:89:f3:91:
                    42:9f:a5:de:16:b5:8d:54:96:4e:c3:e3:bf:e7:e8:
                    17:c6:bd:4e:4b:a7:8d:60:e4:3e:27:f7:03:97:e3:
                    73:42:99:d4:d4:c4:8a:b5:eb:68:3d:d7:17:15:46:
                    59:c9:3e:83:cf:f0:dc:f5:8a:81:f4:22:f0:43:c7:
                    34:68:b8:1d:3b:fa:01:38:c9:e5:53:e3:ae:92:69:
                    0d:ed:57:60:e1:ec:73:55:54:4d:13:82:81:e7:b8:
                    47:f5:25:b5:83:91:1b:ad:d6:09:c1:c2:76:de:be:
                    b1:86:00:e5:28:6b:7d:bd:79:13:c5:ab:f3:dd:a6:
                    ed:0d:c2:a8:55:cb:53:4d:96:b8:66:4a:90:20:28:
                    92:f8:a4:c6:60:84:b2:6d:7d:1f:2d:18:63:34:b2:
                    1f:53:e4:15:b6:ae:2d:6a:f0:29:a5:ee:ea:a8:25:
                    09:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A2:52:81:28:E1:D9:18:CE:0C:EB:9A:11:02:17:A0:F3:20:08:61
            X509v3 Authority Key Identifier:
                keyid:0E:FA:A0:10:F3:B0:6D:53:21:90:EF:36:ED:20:28:74:F8:20:17:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/DvqgEPOwbVMhkO827SAodPggF8k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DvqgEPOwbVMhkO827SAodPggF8k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/DvqgEPOwbVMhkO827SAodPggF8k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:5d:75:82:08:3d:cf:d3:99:86:7e:31:76:56:bc:08:3a:ae:
         1b:25:66:2e:95:9b:30:ce:ec:d5:2f:67:be:f3:d0:d7:83:fe:
         a3:21:03:99:4a:e4:c2:10:74:45:f3:ed:e9:18:f3:e9:d8:c4:
         69:a7:96:b8:69:18:ed:9d:0f:57:7b:14:31:67:ce:ba:c5:77:
         dc:b6:c7:2f:b6:90:fb:0d:26:95:e3:38:b3:ba:10:69:97:34:
         25:9a:91:32:95:90:61:4f:2c:00:9f:84:d5:11:4d:6d:71:8d:
         7b:1c:f5:d2:c2:53:3d:20:69:30:df:89:48:d2:cf:36:2c:1a:
         1f:1f:30:67:4e:7d:76:5d:1b:cc:12:f2:e9:16:68:b5:ef:7d:
         55:9c:fb:3f:91:24:99:56:2a:7a:d7:fb:dc:a9:dd:20:5e:6f:
         6e:77:7e:91:aa:c5:9f:6f:4e:aa:ed:05:b3:9e:f3:98:2e:5a:
         07:e8:da:1e:2c:7c:ff:b1:f3:73:d4:a6:0a:f5:57:d7:e7:20:
         f8:a3:d8:29:72:de:ad:d8:33:8f:22:7e:19:e6:f5:12:40:7e:
         8b:eb:f1:88:ba:7c:ad:b0:b6:42:3f:ab:07:e7:13:7e:93:f2:
         9e:13:9a:7e:c0:c1:85:01:06:08:17:da:40:a1:d9:41:4e:49:
         53:3d:9b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:20:56 2026 by rpki-client