Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5732/8A7E9E422F2311EA903C1439C4F9AE02/DOryj-6BLxzJfxyWvKZFLvcubUw.mft
File:                     DOryj-6BLxzJfxyWvKZFLvcubUw.mft (raw, json)
Hash identifier:          bja0f4q0dn68plV2IWnhbsVai3COBTjhwzkq4ZfnlDQ=
Subject key identifier:   B6:5F:E0:01:DC:66:91:08:A5:0F:AF:D6:9B:08:34:C6:EB:0F:B9:48
Authority key identifier: 0C:EA:F2:8F:EE:81:2F:1C:C9:7F:1C:96:BC:A6:45:2E:F7:2E:6D:4C
Certificate issuer:       /CN=A91B5732/serialNumber=0CEAF28FEE812F1CC97F1C96BCA6452EF72E6D4C
Certificate serial:       0C63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOryj-6BLxzJfxyWvKZFLvcubUw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5732/8A7E9E422F2311EA903C1439C4F9AE02/DOryj-6BLxzJfxyWvKZFLvcubUw.mft
Manifest number:          0C57
Signing time:             Tue 18 Aug 2026 18:58:13 +0000
Manifest this update:     Tue 18 Aug 2026 18:58:13 +0000
Manifest next update:     Tue 25 Aug 2026 18:58:13 +0000
Files and hashes:         1: DOryj-6BLxzJfxyWvKZFLvcubUw.crl (hash: SGh1aRruoOVCVLgrXrKXKCeb9NRBONQu53m1TKoNrlA=)
                          2: 707BA10E9DB211EAB3A85A19C4F9AE02.roa (hash: 8POaocpMFP4OKfeekt39NHI2suyTClKvLejF+mBZsSc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5732/8A7E9E422F2311EA903C1439C4F9AE02/DOryj-6BLxzJfxyWvKZFLvcubUw.crl
                          rsync://rpki.apnic.net/member_repository/A91B5732/8A7E9E422F2311EA903C1439C4F9AE02/DOryj-6BLxzJfxyWvKZFLvcubUw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOryj-6BLxzJfxyWvKZFLvcubUw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 18:58:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3171 (0xc63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5732, serialNumber=0CEAF28FEE812F1CC97F1C96BCA6452EF72E6D4C
        Validity
            Not Before: Aug 18 18:58:13 2026 GMT
            Not After : Aug 25 18:58:13 2026 GMT
        Subject: CN=6a84ab45-827e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:27:6c:3c:00:1a:e1:2c:02:fa:c9:c9:ad:81:
                    d3:80:d1:0e:2a:cf:62:9a:3e:73:b8:58:e6:d0:f7:
                    4b:11:be:ae:f7:03:da:79:8f:7e:e8:a8:1b:a5:35:
                    d3:0a:e2:42:05:ec:b7:fc:5b:72:d7:48:57:db:c7:
                    8b:c9:16:69:4d:72:30:91:f5:ee:9b:20:fc:48:f5:
                    ba:a9:37:fd:1f:e7:bd:64:1e:af:0a:1d:5c:e6:81:
                    ac:47:86:80:65:83:0c:a4:46:92:7e:c7:59:f0:52:
                    5b:d5:06:68:9e:e4:35:0c:47:fe:8d:33:83:99:49:
                    82:0f:c9:eb:4c:03:79:12:8e:07:15:fc:1b:3f:fd:
                    a3:16:67:f2:a7:f1:36:44:6a:2b:b5:eb:d3:d4:f0:
                    68:51:e4:1a:4b:46:8b:f6:d6:3e:28:2a:aa:a5:c9:
                    53:a7:2e:61:e6:f3:29:f3:f9:9a:80:30:25:09:e8:
                    ea:b1:a8:f8:b7:34:af:be:73:1d:a6:34:e2:0e:ee:
                    6f:8d:ab:be:7f:6f:5e:00:b3:03:30:39:21:8e:ef:
                    76:3d:b3:67:d9:ca:15:03:28:dc:3c:07:d2:3a:de:
                    17:48:4f:0b:58:9e:10:59:86:93:9b:9a:0b:dd:18:
                    cb:b0:f6:e2:4a:78:e7:f8:b2:6c:10:4a:0d:7c:a3:
                    4e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:5F:E0:01:DC:66:91:08:A5:0F:AF:D6:9B:08:34:C6:EB:0F:B9:48
            X509v3 Authority Key Identifier:
                keyid:0C:EA:F2:8F:EE:81:2F:1C:C9:7F:1C:96:BC:A6:45:2E:F7:2E:6D:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5732/8A7E9E422F2311EA903C1439C4F9AE02/DOryj-6BLxzJfxyWvKZFLvcubUw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOryj-6BLxzJfxyWvKZFLvcubUw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5732/8A7E9E422F2311EA903C1439C4F9AE02/DOryj-6BLxzJfxyWvKZFLvcubUw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:12:27:e4:2c:c9:14:30:d6:60:f7:c1:5c:25:89:6e:b5:b0:
         f1:e7:56:5f:e0:9c:b7:8b:89:c0:44:58:43:0f:e7:33:81:e5:
         9d:55:ee:07:04:99:48:a0:04:a0:cc:e4:8b:79:af:93:da:dc:
         fd:f7:3a:76:a5:df:e3:81:8f:e7:07:79:f5:04:53:76:d9:f7:
         23:6e:c7:21:25:7a:9b:08:bc:5e:cd:7d:a3:ed:43:63:39:98:
         c0:80:ec:74:ab:15:3c:8c:fc:71:90:c4:91:c9:3f:07:35:ec:
         ab:39:e0:ab:ba:19:c4:84:cd:cc:12:92:54:ae:ba:48:54:da:
         40:fd:f9:89:aa:da:ce:30:07:b5:d7:06:a8:5a:6b:7f:40:d6:
         54:5f:9d:65:65:9d:f2:e5:26:4b:76:f9:49:7d:66:ce:5d:e0:
         4a:bb:c2:f2:09:dc:9d:6f:ed:e3:15:bb:7d:65:8c:52:a9:4d:
         ba:e5:60:2d:9b:75:fe:f6:d4:6a:78:a6:a5:3d:b6:22:61:18:
         7d:6c:32:a7:b1:5a:2f:6d:23:f3:eb:9e:e6:a7:31:f1:9f:83:
         11:eb:26:1b:fe:1b:54:61:e9:8a:a6:4a:09:dd:37:eb:02:67:
         77:0a:d6:06:5e:59:00:78:b6:f6:61:ce:df:15:f3:a7:a3:70:
         d2:c0:31:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:51 2026 by rpki-client