Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91838AE/7070A0F0559B11EBBA117137C4F9AE02/dJQnIYER0vL1pXC5lRfKCOV3NyQ.mft
File:                     dJQnIYER0vL1pXC5lRfKCOV3NyQ.mft (raw, json)
Hash identifier:          g2QkPtxmg7UUgGpxVVGH8n8fUmtzO3R95Q/qCinwJ2I=
Subject key identifier:   80:E5:F7:BA:E9:A2:E0:EA:C6:CA:E0:D8:45:49:F7:F9:54:11:87:3A
Authority key identifier: 74:94:27:21:81:11:D2:F2:F5:A5:70:B9:95:17:CA:08:E5:77:37:24
Certificate issuer:       /CN=A91838AE/serialNumber=749427218111D2F2F5A570B99517CA08E5773724
Certificate serial:       07A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJQnIYER0vL1pXC5lRfKCOV3NyQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91838AE/7070A0F0559B11EBBA117137C4F9AE02/dJQnIYER0vL1pXC5lRfKCOV3NyQ.mft
Manifest number:          07A0
Signing time:             Mon 22 Jun 2026 21:33:33 +0000
Manifest this update:     Mon 22 Jun 2026 21:33:33 +0000
Manifest next update:     Mon 29 Jun 2026 21:33:33 +0000
Files and hashes:         1: dJQnIYER0vL1pXC5lRfKCOV3NyQ.crl (hash: 55Uhr0frvJFskCohvSpxeClRRgHoTFY93ktR4YX77OU=)
                          2: 33EA4CE055AE11EBA5EFA876C4F9AE02.roa (hash: /z2DGv7fYaarpOtsTpCTZorjAYHFMh4lTVORf3xDc3s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91838AE/7070A0F0559B11EBBA117137C4F9AE02/dJQnIYER0vL1pXC5lRfKCOV3NyQ.crl
                          rsync://rpki.apnic.net/member_repository/A91838AE/7070A0F0559B11EBBA117137C4F9AE02/dJQnIYER0vL1pXC5lRfKCOV3NyQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJQnIYER0vL1pXC5lRfKCOV3NyQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 21:33:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1961 (0x7a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91838AE, serialNumber=749427218111D2F2F5A570B99517CA08E5773724
        Validity
            Not Before: Jun 22 21:33:33 2026 GMT
            Not After : Jun 29 21:33:33 2026 GMT
        Subject: CN=6a39aa2d-ef66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:75:d5:cc:c7:b0:9e:ad:ae:d7:90:07:8e:2a:
                    d3:3c:6d:27:cc:de:1a:da:0a:95:b7:b6:e7:96:30:
                    27:53:e2:99:eb:a9:03:08:0d:8a:88:c0:e4:3b:92:
                    0b:1f:a4:dd:8c:30:15:e3:35:37:92:aa:cc:ea:7f:
                    77:0e:b5:06:0c:f8:5b:10:4a:eb:23:22:d0:1d:7b:
                    a7:67:60:42:f2:b5:b4:26:d0:af:69:2f:bf:d5:19:
                    39:dc:f4:2d:d3:08:c2:a4:cb:56:5c:b6:ea:05:15:
                    be:de:be:4d:60:98:7c:6b:9e:6d:35:81:37:34:f8:
                    cb:98:a0:e7:22:65:0f:b3:65:46:f2:2c:87:9b:73:
                    80:89:79:2e:e1:a5:01:01:48:c5:19:e9:b2:5b:1e:
                    f9:f2:74:45:a5:a1:ec:83:80:bc:ee:b9:30:6b:3e:
                    0f:81:d3:f9:74:70:ac:b6:86:c6:e8:32:9a:c9:0d:
                    32:dd:1b:bd:0c:17:b1:e0:79:f2:9b:a8:84:90:e2:
                    67:0a:38:a1:2a:ed:87:b3:d4:bc:36:30:36:1c:c1:
                    56:e0:6d:40:5a:e5:01:4d:b4:7d:87:f7:d0:57:73:
                    45:65:2c:25:a7:86:e9:26:0e:11:99:11:ae:df:01:
                    c1:3a:cc:ce:1a:a4:29:38:78:6a:e8:43:5a:d9:e7:
                    09:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E5:F7:BA:E9:A2:E0:EA:C6:CA:E0:D8:45:49:F7:F9:54:11:87:3A
            X509v3 Authority Key Identifier:
                keyid:74:94:27:21:81:11:D2:F2:F5:A5:70:B9:95:17:CA:08:E5:77:37:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91838AE/7070A0F0559B11EBBA117137C4F9AE02/dJQnIYER0vL1pXC5lRfKCOV3NyQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJQnIYER0vL1pXC5lRfKCOV3NyQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91838AE/7070A0F0559B11EBBA117137C4F9AE02/dJQnIYER0vL1pXC5lRfKCOV3NyQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:76:94:2f:cf:35:52:db:b8:57:36:6b:d1:52:0b:77:18:9f:
         7b:d2:7b:54:6e:51:b2:79:23:fa:36:78:e8:4d:8b:55:9d:0f:
         72:80:e2:3d:61:aa:92:47:ef:6a:8c:8c:0f:56:67:c5:de:0d:
         59:cc:fc:6f:8f:ac:5d:bb:46:5f:f8:d5:84:96:22:ea:53:dd:
         b1:c4:81:22:ce:3a:52:7e:26:d0:c9:31:fb:ef:ad:a4:9a:88:
         b4:c9:0e:4a:cc:72:a6:07:df:9c:c8:cf:42:65:2f:92:7a:11:
         f5:4c:dd:96:8e:2a:13:6a:06:cf:d3:30:14:a3:1f:76:17:ca:
         f9:2f:e0:66:f3:9a:73:a8:fd:5b:74:6a:65:b1:cc:9d:28:db:
         6b:16:54:14:48:ea:16:f6:60:50:f4:b2:78:b4:ea:e1:c4:92:
         df:df:46:56:6a:2a:83:18:2d:f3:9a:bb:68:94:97:d6:9a:e3:
         20:51:df:ce:d5:ab:76:1b:00:7c:45:b8:e2:e5:db:f0:72:fb:
         fb:35:e4:d4:03:0f:e2:fc:02:6a:42:b7:e7:91:6b:85:83:af:
         2b:95:a4:d2:fb:a0:0c:b7:5a:23:f4:cc:b2:02:ed:91:3c:d7:
         c6:87:22:dc:ca:3d:91:19:cd:87:12:6c:78:b6:63:ef:6a:29:
         d7:35:b7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:28:52 2026 by rpki-client