Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.mft
File:                     DO-JBd1l6R5Qazs5nCCiIork_T8.mft (raw, json)
Hash identifier:          7gr+41Rl3SLL3z330whLFmsipVhP3MOdvy/sUtkaJ+k=
Subject key identifier:   15:28:93:3E:89:CC:DA:97:ED:A5:D6:13:53:26:0C:87:B5:41:69:B5
Authority key identifier: 0C:EF:89:05:DD:65:E9:1E:50:6B:3B:39:9C:20:A2:22:8A:E4:FD:3F
Certificate issuer:       /CN=A91DB421/serialNumber=0CEF8905DD65E91E506B3B399C20A2228AE4FD3F
Certificate serial:       0A14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO-JBd1l6R5Qazs5nCCiIork_T8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.mft
Manifest number:          0A0C
Signing time:             Tue 18 Aug 2026 20:04:46 +0000
Manifest this update:     Tue 18 Aug 2026 20:04:45 +0000
Manifest next update:     Tue 25 Aug 2026 20:04:45 +0000
Files and hashes:         1: DO-JBd1l6R5Qazs5nCCiIork_T8.crl (hash: l246a9PbxXL1/KbhrEqzEs+fUY+NtN0gtIbM72mKdYo=)
                          2: A9511B7AA0B511EA94365A38C4F9AE02.roa (hash: Odh6PwT4fG9VLouXcIwHNY2NadEY9PU7kLIfNQ4Io5U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.crl
                          rsync://rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO-JBd1l6R5Qazs5nCCiIork_T8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 20:04:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2580 (0xa14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB421, serialNumber=0CEF8905DD65E91E506B3B399C20A2228AE4FD3F
        Validity
            Not Before: Aug 18 20:04:45 2026 GMT
            Not After : Aug 25 20:04:45 2026 GMT
        Subject: CN=6a84bade-0f62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:02:e0:62:13:b1:0e:c3:b0:8a:9b:9e:71:74:
                    04:e1:ea:88:70:a0:e3:be:33:d6:25:8f:9e:d1:9a:
                    22:43:87:77:10:c1:1c:f1:4d:56:46:10:30:19:ea:
                    3e:7e:0d:78:08:be:2d:2b:ee:3e:ed:ab:86:a5:17:
                    d3:18:dc:1e:11:a2:ef:7c:49:49:f5:65:d7:00:b0:
                    ac:38:f6:e8:1c:a4:27:78:63:df:f2:82:d8:76:57:
                    d3:15:a8:07:59:79:e6:67:36:34:eb:b7:a9:bb:4e:
                    94:fd:8c:36:ad:3e:60:27:32:46:23:90:69:69:12:
                    13:ca:e2:6c:9f:25:f7:55:67:ac:ee:b4:dd:a7:49:
                    b2:72:b0:a3:89:fa:81:9b:bb:7a:30:a6:be:9a:8c:
                    c3:b0:59:de:27:16:cc:b7:6f:16:7d:63:f6:85:7e:
                    5b:8c:4a:ce:b2:1e:82:e5:3d:18:71:c8:f4:d8:c7:
                    b8:d7:c8:b9:72:48:9b:3e:36:6a:c2:33:79:73:e7:
                    b7:73:df:0c:03:b5:f6:2a:b5:f4:62:97:c5:1d:ad:
                    b9:f8:1f:4e:75:7b:f2:ea:2f:0d:50:77:3a:fe:02:
                    d8:06:99:d0:99:e2:29:4f:37:14:fb:a6:f5:15:5c:
                    40:55:30:72:cb:bd:da:88:2e:0a:4e:a9:94:b4:f1:
                    48:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:28:93:3E:89:CC:DA:97:ED:A5:D6:13:53:26:0C:87:B5:41:69:B5
            X509v3 Authority Key Identifier:
                keyid:0C:EF:89:05:DD:65:E9:1E:50:6B:3B:39:9C:20:A2:22:8A:E4:FD:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO-JBd1l6R5Qazs5nCCiIork_T8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:3e:57:4d:22:f7:d7:b8:b9:da:8c:4e:0f:26:85:90:75:eb:
         35:3f:87:67:3c:97:00:a5:b3:4e:78:8d:72:0e:38:13:7d:1b:
         aa:e5:0e:d8:2b:dc:82:41:9a:5b:b4:1c:b8:66:59:94:43:e7:
         9e:40:3c:47:f0:26:0b:66:50:b2:bc:a5:78:b2:05:32:5a:2b:
         2a:b7:e2:47:65:38:db:1d:d8:3d:af:89:35:f4:12:f8:47:c0:
         f9:52:db:bf:72:29:18:1b:24:d4:8e:70:8a:c9:88:e3:c1:d3:
         93:ec:55:4f:dd:83:93:79:00:e8:f6:88:20:85:a9:ac:3f:3d:
         8b:66:23:35:53:54:d5:2c:0e:67:49:86:dc:da:50:35:f1:64:
         cf:73:8d:68:96:11:52:65:40:74:f1:18:18:7b:ae:a8:91:54:
         be:eb:db:ba:8a:8b:4b:ef:a2:6f:16:1b:69:f9:02:76:61:91:
         e1:b0:df:33:03:6d:c2:46:eb:5b:e2:8a:95:f0:81:65:22:12:
         c5:c5:7e:e3:09:b1:77:28:36:8e:17:ac:cb:31:b0:03:19:61:
         72:af:4f:c6:5d:81:0e:1a:20:34:41:49:e5:b3:2b:0c:b5:dd:
         a2:9e:82:68:e3:f7:ff:7b:52:39:8b:24:7a:8d:18:eb:ad:fc:
         ee:90:bf:22
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICChQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REI0MjExMTAvBgNVBAUTKDBDRUY4OTA1REQ2NUU5MUU1MDZCM0IzOTlDMjBBMjIy
OEFFNEZEM0YwHhcNMjYwODE4MjAwNDQ1WhcNMjYwODI1MjAwNDQ1WjAYMRYwFAYD
VQQDEw02YTg0YmFkZS0wZjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1gLgYhOxDsOwipuecXQE4eqIcKDjvjPWJY+e0ZoiQ4d3EMEc8U1WRhAwGeo+
fg14CL4tK+4+7auGpRfTGNweEaLvfElJ9WXXALCsOPboHKQneGPf8oLYdlfTFagH
WXnmZzY067epu06U/Yw2rT5gJzJGI5BpaRITyuJsnyX3VWes7rTdp0mycrCjifqB
m7t6MKa+mozDsFneJxbMt28WfWP2hX5bjErOsh6C5T0Yccj02Me418i5ckibPjZq
wjN5c+e3c98MA7X2KrX0YpfFHa25+B9OdXvy6i8NUHc6/gLYBpnQmeIpTzcU+6b1
FVxAVTByy73aiC4KTqmUtPFI8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBUokz6J
zNqX7aXWE1MmDIe1QWm1MB8GA1UdIwQYMBaAFAzviQXdZekeUGs7OZwgoiKK5P0/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjQyMS8xMTk4MDYwQUEw
QjQxMUVBOTc3MTlFMzVDNEY5QUUwMi9ETy1KQmQxbDZSNVFhenM1bkNDaUlvcmtf
VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RPLUpCZDFsNlI1UWF6czVuQ0NpSW9ya19UOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QjQyMS8xMTk4MDYwQUEwQjQxMUVBOTc3MTlFMzVDNEY5QUUwMi9ETy1KQmQxbDZS
NVFhenM1bkNDaUlvcmtfVDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfD5XTSL317i52oxODyaFkHXrNT+HZzyXAKWzTniNcg44E30bquUO2CvcgkGa
W7QcuGZZlEPnnkA8R/AmC2ZQsryleLIFMlorKrfiR2U42x3YPa+JNfQS+EfA+VLb
v3IpGBsk1I5wismI48HTk+xVT92Dk3kA6PaIIIWprD89i2YjNVNU1SwOZ0mG3NpQ
NfFkz3ONaJYRUmVAdPEYGHuuqJFUvuvbuoqLS++ibxYbafkCdmGR4bDfMwNtwkbr
W+KKlfCBZSISxcV+4wmxdyg2jhesyzGwAxlhcq9Pxl2BDhogNEFJ5bMrDLXdop6C
aOP3/3tSOYskeo0Y66387pC/Ig==
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:46:03 2026 by rpki-client