Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft
File:                     DNZOS9b605fHRxEYooA7h90sHVM.mft (raw, json)
Hash identifier:          S6qJxJ3d9myH5ImKXkcYLQ72N4kX9ty2EUKCpAoGU4k=
Subject key identifier:   39:AD:A4:63:C0:83:31:61:A1:68:4D:56:F4:61:55:0A:46:65:C7:59
Authority key identifier: 0C:D6:4E:4B:D6:FA:D3:97:C7:47:11:18:A2:80:3B:87:DD:2C:1D:53
Certificate issuer:       /CN=A917E151/serialNumber=0CD64E4BD6FAD397C7471118A2803B87DD2C1D53
Certificate serial:       0638
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft
Manifest number:          0621
Signing time:             Tue 14 Jul 2026 23:20:33 +0000
Manifest this update:     Tue 14 Jul 2026 23:20:32 +0000
Manifest next update:     Tue 21 Jul 2026 23:20:32 +0000
Files and hashes:         1: DNZOS9b605fHRxEYooA7h90sHVM.crl (hash: QScxcmupOJzZthTy3RWeW8zs951F9bXvUTM6liTLDUA=)
                          2: 632B0D382CE911F189BCFB9BA3833773.roa (hash: u9WZKjHsBFVMQNlf3mJaNZybmCa5wwJrixJxYO6Dng0=)
                          3: CBB9F6766CE211EEA9499734C4F9AE02.roa (hash: ntABWtYa9f0IkqV7PvPk9+2uIJ5vBaIf+7hA4+vUAmM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.crl
                          rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Jul 2026 23:20:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1592 (0x638)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E151, serialNumber=0CD64E4BD6FAD397C7471118A2803B87DD2C1D53
        Validity
            Not Before: Jul 14 23:20:32 2026 GMT
            Not After : Jul 21 23:20:32 2026 GMT
        Subject: CN=6a56c441-8100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4e:e1:39:2a:ab:df:5d:d9:f4:7c:a6:dc:30:
                    da:c1:ec:3b:37:f7:45:91:16:d3:ea:26:77:00:b1:
                    e3:2f:48:84:50:5e:82:52:d9:0b:47:66:e3:88:65:
                    d0:e6:32:06:31:8b:3f:c2:d4:4f:8d:ad:61:5f:c0:
                    75:b9:b4:63:39:b1:ef:fe:2f:a2:b8:48:53:51:eb:
                    2f:ed:32:b8:8c:df:16:76:e0:0e:00:7d:f2:73:41:
                    78:ee:3d:81:50:36:55:49:ab:a7:02:59:f7:25:5d:
                    4c:79:4c:77:1d:69:9a:f3:9b:db:8e:39:d5:76:55:
                    71:2c:f1:8b:cc:03:db:55:6b:c3:75:4f:5d:c1:3f:
                    9c:f9:9e:b0:70:f6:1d:6e:4e:93:99:22:2f:65:b8:
                    12:10:2f:9f:fd:e4:13:3c:fc:8d:5f:44:76:05:64:
                    bc:0e:8d:e9:18:ea:fb:e7:8d:b6:b3:10:67:43:4c:
                    1b:cf:d3:a7:ee:4c:0f:f4:25:08:a1:58:3f:15:39:
                    cf:e7:d3:09:96:ff:1c:8e:27:5b:bf:bc:65:44:da:
                    04:be:8b:24:46:94:da:68:ce:8b:42:77:42:2e:85:
                    6b:7e:50:9d:b5:4a:bd:57:02:5f:cf:80:06:f9:42:
                    18:29:f7:1e:a5:04:e9:2f:90:a3:93:56:2d:a6:19:
                    b8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:AD:A4:63:C0:83:31:61:A1:68:4D:56:F4:61:55:0A:46:65:C7:59
            X509v3 Authority Key Identifier:
                keyid:0C:D6:4E:4B:D6:FA:D3:97:C7:47:11:18:A2:80:3B:87:DD:2C:1D:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:3b:b1:67:de:10:8d:75:c5:c1:9f:8c:e7:de:a8:b8:54:6c:
         9a:a1:57:14:bf:4e:e2:f7:fa:c5:90:04:bd:e4:58:f6:e7:7c:
         73:ee:fc:6c:5b:36:0a:68:45:c8:8d:31:0f:b6:db:d6:27:0a:
         a2:d6:f7:7c:b8:aa:13:65:14:37:4b:31:39:a9:f6:f9:12:3d:
         00:55:ed:47:76:66:1c:ab:86:bb:37:d3:c7:55:b8:25:15:46:
         fe:cc:4d:5e:98:81:eb:d4:0e:8e:a7:8b:0b:aa:e7:5d:c9:f5:
         5b:88:f3:2b:ae:1e:fa:ec:f4:6a:37:19:12:69:76:4f:53:ec:
         09:34:27:38:ac:c2:3b:e6:f6:33:1d:d4:0b:48:fe:a2:a6:76:
         32:a8:50:59:9a:1b:18:d7:bd:49:6b:35:87:26:3c:d9:12:53:
         2d:98:d3:86:b9:41:8f:26:b1:54:fb:b5:12:fe:fd:f3:44:f1:
         8d:a8:08:c4:d9:15:e4:00:9d:35:c8:9e:94:0e:aa:07:01:e7:
         95:ad:1d:a4:99:02:48:4a:6f:1e:08:19:8a:23:f2:78:22:8f:
         4b:00:2a:2b:8f:99:ee:99:a8:6c:8b:dc:60:af:43:f7:b8:5e:
         f5:79:ea:13:d3:2f:20:9f:18:9b:1a:98:38:94:dd:88:d8:45:
         dc:93:5e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 06:24:41 2026 by rpki-client