Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft
File:                     dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft (raw, json)
Hash identifier:          Lf2c/lf7AyBF4GPwYsLt757DuL81h2oC1+cSGAh9Akk=
Subject key identifier:   E8:FC:44:D5:89:8D:3A:1D:DA:A9:28:A7:06:AA:68:D7:24:37:2B:18
Authority key identifier: 76:66:10:08:DA:C8:92:84:C5:37:F2:DC:E0:A9:20:BA:94:E0:78:CF
Certificate issuer:       /CN=A91828F3/serialNumber=76661008DAC89284C537F2DCE0A920BA94E078CF
Certificate serial:       0286
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmYQCNrIkoTFN_Lc4KkgupTgeM8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft
Manifest number:          0280
Signing time:             Sun 05 Jul 2026 02:24:12 +0000
Manifest this update:     Sun 05 Jul 2026 02:24:12 +0000
Manifest next update:     Sun 12 Jul 2026 02:24:12 +0000
Files and hashes:         1: dmYQCNrIkoTFN_Lc4KkgupTgeM8.crl (hash: pfnVDxXQbsdARHljp1+epjPg0DfGZ6ngl5cTIsaIn7s=)
                          2: 05E078B2A5D211EDBC42DA12C4F9AE02.roa (hash: 21k7xo1DVvGDuKsBBbSZADbL50JKJ6QopBZblEvUm/c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.crl
                          rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmYQCNrIkoTFN_Lc4KkgupTgeM8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Jul 2026 02:24:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 646 (0x286)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91828F3, serialNumber=76661008DAC89284C537F2DCE0A920BA94E078CF
        Validity
            Not Before: Jul  5 02:24:12 2026 GMT
            Not After : Jul 12 02:24:12 2026 GMT
        Subject: CN=6a49c04c-782c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d3:e5:4d:0f:0c:42:b7:f8:bf:7a:7e:bc:6a:
                    b8:65:2d:8a:52:5e:fc:da:d8:65:23:16:cf:62:d7:
                    8c:2d:bd:ec:9c:d9:9e:b5:80:aa:3c:98:43:64:ca:
                    38:cd:d4:b9:28:c8:0a:e4:1a:cd:79:40:48:40:46:
                    2c:c1:58:1f:47:1a:a7:28:5f:19:65:b2:43:a2:04:
                    80:2d:07:6b:47:42:dc:c4:2e:fc:b2:91:42:04:a0:
                    d6:e3:a5:40:14:27:e6:9e:89:5b:1d:8c:2e:9e:59:
                    15:54:e4:5f:99:6d:d2:c3:ed:91:08:62:12:35:86:
                    30:db:8c:25:96:1a:89:ba:36:e9:c4:32:f2:03:f1:
                    7e:8e:f0:b8:97:06:e3:e0:57:d0:eb:aa:6a:bb:d3:
                    02:da:6d:45:f0:77:df:93:9a:4c:2a:61:80:42:fb:
                    59:dc:5f:cf:ca:b8:f5:8a:9d:46:e1:ff:6a:12:ce:
                    3e:28:25:a3:ff:90:68:49:a1:81:fe:0b:fc:08:46:
                    05:6d:27:dc:e8:ca:c8:a7:b7:6c:10:89:dc:29:ae:
                    e4:9b:64:0d:17:b6:ad:01:de:64:a1:85:3f:52:b1:
                    bd:c4:a5:fb:16:f9:5c:c4:b8:5c:9d:a9:38:00:2b:
                    6e:47:77:d1:33:9f:40:d8:14:90:d4:23:c3:34:46:
                    07:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:FC:44:D5:89:8D:3A:1D:DA:A9:28:A7:06:AA:68:D7:24:37:2B:18
            X509v3 Authority Key Identifier:
                keyid:76:66:10:08:DA:C8:92:84:C5:37:F2:DC:E0:A9:20:BA:94:E0:78:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmYQCNrIkoTFN_Lc4KkgupTgeM8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:a6:fd:ee:78:e1:42:2b:1c:48:58:58:95:40:c7:f2:61:bd:
         71:94:b3:a7:17:7e:32:ea:f6:e9:d9:03:3c:79:af:c6:bf:2e:
         68:55:34:44:97:92:9e:8e:38:20:03:8f:65:27:ac:8b:3d:67:
         23:59:46:22:2b:c1:f0:c2:8a:f1:b7:c7:7a:1c:63:09:96:3e:
         2a:3b:64:8b:2a:34:db:38:18:3f:94:1d:99:02:8d:73:a9:86:
         ed:71:7c:49:2c:9f:f1:29:55:48:d2:f7:84:02:17:87:16:5c:
         b6:cd:40:c6:f9:47:6e:6f:41:d1:99:0e:eb:a7:0b:12:98:2e:
         9a:49:0f:2a:12:94:37:34:ae:33:c2:7c:63:2a:54:83:47:5a:
         75:1c:98:f2:02:eb:10:71:c0:06:4b:89:e9:a3:69:45:7d:03:
         3a:27:87:d4:a2:21:c1:4e:eb:91:10:72:8a:50:74:af:54:e9:
         9b:6d:f5:95:91:c8:01:11:72:45:e6:8e:3f:c4:70:b2:95:0d:
         91:b3:04:ba:d1:20:e2:65:08:e4:9e:06:e2:e3:70:02:94:2b:
         13:df:b4:ea:78:12:60:f8:03:81:45:42:2c:b8:fb:ca:f9:1d:
         5a:29:d6:85:0f:15:a9:8e:3d:64:11:be:fe:df:df:01:d7:62:
         07:bb:6e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:40:28 2026 by rpki-client