Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5732/8A7E9E422F2311EA903C1439C4F9AE02/DOryj-6BLxzJfxyWvKZFLvcubUw.mft
File:                     DOryj-6BLxzJfxyWvKZFLvcubUw.mft (raw, json)
Hash identifier:          IwxxasJ1kSJ/sP354zisVpfJu5JuWF/UcclFhv2uabM=
Subject key identifier:   88:1F:88:BF:D4:5D:69:85:3F:5E:9D:73:ED:85:3F:91:4A:1A:04:3A
Authority key identifier: 0C:EA:F2:8F:EE:81:2F:1C:C9:7F:1C:96:BC:A6:45:2E:F7:2E:6D:4C
Certificate issuer:       /CN=A91B5732/serialNumber=0CEAF28FEE812F1CC97F1C96BCA6452EF72E6D4C
Certificate serial:       0C46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOryj-6BLxzJfxyWvKZFLvcubUw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5732/8A7E9E422F2311EA903C1439C4F9AE02/DOryj-6BLxzJfxyWvKZFLvcubUw.mft
Manifest number:          0C3A
Signing time:             Mon 22 Jun 2026 18:44:51 +0000
Manifest this update:     Mon 22 Jun 2026 18:44:50 +0000
Manifest next update:     Mon 29 Jun 2026 18:44:50 +0000
Files and hashes:         1: DOryj-6BLxzJfxyWvKZFLvcubUw.crl (hash: WrGN2Ow1B0XSzQU4b0Cy+qCyXN1wgSmKhx5M95z/WWM=)
                          2: 707BA10E9DB211EAB3A85A19C4F9AE02.roa (hash: 8POaocpMFP4OKfeekt39NHI2suyTClKvLejF+mBZsSc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5732/8A7E9E422F2311EA903C1439C4F9AE02/DOryj-6BLxzJfxyWvKZFLvcubUw.crl
                          rsync://rpki.apnic.net/member_repository/A91B5732/8A7E9E422F2311EA903C1439C4F9AE02/DOryj-6BLxzJfxyWvKZFLvcubUw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOryj-6BLxzJfxyWvKZFLvcubUw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 18:44:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3142 (0xc46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5732, serialNumber=0CEAF28FEE812F1CC97F1C96BCA6452EF72E6D4C
        Validity
            Not Before: Jun 22 18:44:50 2026 GMT
            Not After : Jun 29 18:44:50 2026 GMT
        Subject: CN=6a3982a2-ab9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7d:0d:f1:67:17:00:ef:60:ab:01:98:9f:df:
                    6e:34:5a:52:f1:4c:49:38:35:36:33:a6:cb:5d:79:
                    1d:7c:0d:76:7e:77:ed:01:5f:cf:68:b0:57:d4:a1:
                    36:05:eb:03:32:6a:95:cb:5a:f8:48:6c:2a:33:d5:
                    63:c7:c7:67:62:2c:43:1d:95:46:b4:33:c0:dc:77:
                    65:ba:9c:f5:6c:e5:0a:70:01:9b:72:b2:0c:3a:35:
                    19:86:4d:83:90:27:12:00:96:c0:d9:ac:42:91:5a:
                    42:a8:e5:92:f5:a9:51:cb:82:53:d7:35:85:ef:2a:
                    b6:4b:b4:bb:bc:cb:0e:7d:bd:2d:23:5b:ea:e1:ef:
                    5c:c7:db:d0:07:32:7f:fa:90:79:a9:76:f1:d9:a8:
                    a5:ed:fa:27:4b:80:aa:d1:36:d8:91:94:eb:35:43:
                    07:7b:76:4a:5d:ba:be:24:bd:f9:85:84:04:9f:fc:
                    0d:7b:7d:97:9b:9c:0c:01:c5:fe:68:a6:c2:73:c8:
                    36:0d:64:d4:2c:13:f2:71:3f:bf:8b:fd:71:aa:10:
                    c7:67:97:61:89:2e:e8:64:cb:cb:0f:5e:15:6b:db:
                    9c:66:ec:cc:72:a1:c4:70:22:7e:6f:85:82:22:c5:
                    c0:3d:af:52:41:92:d6:a5:55:84:54:e9:ce:f1:2d:
                    dc:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:1F:88:BF:D4:5D:69:85:3F:5E:9D:73:ED:85:3F:91:4A:1A:04:3A
            X509v3 Authority Key Identifier:
                keyid:0C:EA:F2:8F:EE:81:2F:1C:C9:7F:1C:96:BC:A6:45:2E:F7:2E:6D:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5732/8A7E9E422F2311EA903C1439C4F9AE02/DOryj-6BLxzJfxyWvKZFLvcubUw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOryj-6BLxzJfxyWvKZFLvcubUw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5732/8A7E9E422F2311EA903C1439C4F9AE02/DOryj-6BLxzJfxyWvKZFLvcubUw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:d6:29:bd:d2:1f:7e:f4:44:2a:ae:85:b0:aa:cf:90:4e:52:
         e9:91:e6:20:38:61:ac:33:23:d4:fa:26:a1:52:22:fc:94:cd:
         41:f3:a1:d1:03:21:d7:0f:c2:da:f0:d9:21:d3:48:9c:de:b8:
         4b:08:2b:cb:dc:08:7b:1b:d1:ce:56:75:86:31:50:c7:82:c5:
         89:af:53:8b:36:f4:15:52:82:c1:66:6f:24:9b:ef:4e:a4:19:
         50:36:60:b0:d5:6b:b7:0e:60:f7:8c:29:b6:94:c4:c8:22:09:
         a2:f0:a2:7b:cf:b8:88:c6:b6:52:fd:90:f6:89:c6:c9:cf:7e:
         a9:93:34:70:b9:b9:bd:4a:d3:0f:3e:d7:d0:73:da:cf:f4:d2:
         a0:30:e9:15:c5:94:b4:8b:7b:2c:ca:d7:f4:9b:e8:81:e5:c6:
         fc:ff:5e:bf:f3:d1:23:98:f9:a2:5e:95:04:9c:c5:e7:42:cd:
         bf:7c:99:1c:77:20:fd:a4:bc:b1:bf:32:fb:81:70:19:a3:87:
         2e:cc:68:03:37:02:d2:e2:2b:cc:29:1d:35:9f:54:38:4a:5f:
         74:bd:7a:3c:f2:1a:9a:9f:65:f9:c7:3f:78:81:2d:f6:2e:08:
         f2:2a:2a:52:15:dd:82:0d:7b:1e:49:9e:ab:25:94:31:df:69:
         6c:e0:10:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:30:51 2026 by rpki-client