Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.mft
File:                     DS-zVcvfDQGqBVJ7xHEo5QuzWrA.mft (raw, json)
Hash identifier:          1aQcb41yrYJFhH7vqGw5IM67AGo417xvlyKyS2QucLg=
Subject key identifier:   87:EC:3F:1C:2A:C3:C5:BD:02:23:F2:46:AD:08:46:04:B9:B2:40:D4
Authority key identifier: 0D:2F:B3:55:CB:DF:0D:01:AA:05:52:7B:C4:71:28:E5:0B:B3:5A:B0
Certificate issuer:       /CN=A916DD4C/serialNumber=0D2FB355CBDF0D01AA05527BC47128E50BB35AB0
Certificate serial:       22
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.mft
Manifest number:          21
Signing time:             Fri 17 Jul 2026 10:13:17 +0000
Manifest this update:     Fri 17 Jul 2026 10:13:16 +0000
Manifest next update:     Fri 24 Jul 2026 10:13:16 +0000
Files and hashes:         1: DS-zVcvfDQGqBVJ7xHEo5QuzWrA.crl (hash: XPUhmPTn7NQrenjKv3ilIyn3P+L01kMboVmz8m/FmbM=)
                          2: B542E6104F5111F19B10B1EBBC833773.roa (hash: mP6zUQytayXrN1Je1WI2oXHvaN9oSuIafOIFenUItbk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.crl
                          rsync://rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 10:13:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DD4C, serialNumber=0D2FB355CBDF0D01AA05527BC47128E50BB35AB0
        Validity
            Not Before: Jul 17 10:13:16 2026 GMT
            Not After : Jul 24 10:13:16 2026 GMT
        Subject: CN=6a5a003d-29a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ab:36:ca:ce:9c:66:12:9d:56:e2:f9:af:f6:
                    25:7f:c1:47:d1:3c:6b:11:97:84:9c:ed:65:8b:3f:
                    18:df:9b:f2:4e:ea:3e:d2:2f:1b:bb:96:a3:2e:10:
                    ef:2b:d0:75:3f:3b:6e:ed:2c:5f:99:58:dd:f0:d1:
                    1b:b6:11:d5:8d:58:24:28:24:d9:b3:ab:f3:47:28:
                    9f:f4:cd:70:a8:d2:03:8a:f9:86:21:00:d7:a4:3b:
                    d0:2f:f2:47:31:9c:85:05:d8:fd:77:06:7d:3d:b2:
                    d4:71:22:9e:4c:2a:35:7e:f5:1e:57:51:a4:e3:39:
                    67:38:b6:ac:49:15:c3:42:a1:0b:fd:5f:9b:74:5b:
                    ee:ee:87:c3:a3:d5:ee:bd:aa:24:73:4f:36:aa:f7:
                    96:1c:4f:f2:be:55:5d:1c:82:aa:fd:f1:35:b1:a5:
                    c3:8c:c0:2d:e0:f2:6d:77:5b:87:14:26:61:39:1f:
                    ec:51:b4:d7:5e:ef:0a:69:92:5e:bb:28:19:1a:53:
                    27:56:3c:11:f4:f4:ba:d8:cb:6a:48:8c:02:e6:16:
                    92:4b:d7:67:fa:6a:13:71:9f:4f:6f:4c:94:9d:77:
                    45:ab:2e:04:cc:6f:95:98:a1:58:be:4f:25:d9:99:
                    69:e8:13:18:f5:27:b2:e1:89:89:68:1e:c3:14:e2:
                    e2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:EC:3F:1C:2A:C3:C5:BD:02:23:F2:46:AD:08:46:04:B9:B2:40:D4
            X509v3 Authority Key Identifier:
                keyid:0D:2F:B3:55:CB:DF:0D:01:AA:05:52:7B:C4:71:28:E5:0B:B3:5A:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:6f:8a:d2:90:13:4f:9a:7f:e6:a9:13:41:27:8f:43:9d:78:
         8b:9c:80:cb:3f:42:b5:5b:18:27:7b:51:4e:46:47:f8:06:4e:
         e4:86:2a:b8:89:86:0f:07:87:69:73:6a:dd:f8:c6:18:f4:d8:
         a4:6a:5e:36:5c:3c:ce:da:3f:a9:51:d3:4e:eb:7e:c1:5a:2c:
         5b:89:06:94:c6:f1:0d:dc:68:42:96:2b:73:07:88:43:05:a3:
         82:8c:f3:7b:e3:53:65:08:36:6e:a6:cf:88:34:69:63:09:fe:
         cf:42:6d:7e:43:92:81:ed:45:b2:40:0c:c8:d1:6b:3e:ba:a9:
         94:4c:bf:94:e9:f7:da:61:93:07:a0:46:2b:ad:69:38:f4:b1:
         c8:be:cb:60:93:fc:d7:7c:ea:88:82:7c:52:0b:60:67:8c:46:
         d0:a4:1d:37:84:a7:dc:17:2c:ed:84:17:94:4e:22:02:88:01:
         0c:f2:86:54:4a:a3:19:c4:3e:cd:65:5e:b4:68:e6:47:74:1b:
         eb:45:97:a3:70:dd:a6:cf:e8:9b:da:e6:be:7e:c0:94:af:48:
         11:f9:16:e9:f7:5d:f4:3c:f8:36:00:41:9b:5b:ca:be:8e:3e:
         4b:f8:27:2e:b8:6b:da:c0:b7:06:49:9a:1d:2d:78:d4:dc:bc:
         ec:b1:30:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:50 2026 by rpki-client