Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft
File:                     DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft (raw, json)
Hash identifier:          55GoY/nWfidC+4JJ+ZQY9NnoZNhPZ0tYsvs5RM52yLs=
Subject key identifier:   56:55:D3:22:0F:AC:59:D3:65:D0:B3:D0:47:AD:B0:99:FE:65:02:F0
Authority key identifier: 0E:03:D3:C2:E8:F2:C5:35:82:BE:D1:C2:14:C1:FD:3A:AE:A5:AE:5A
Certificate issuer:       /CN=A911418D/serialNumber=0E03D3C2E8F2C53582BED1C214C1FD3AAEA5AE5A
Certificate serial:       0651
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft
Manifest number:          0638
Signing time:             Tue 12 May 2026 22:53:45 +0000
Manifest this update:     Tue 12 May 2026 22:53:45 +0000
Manifest next update:     Tue 19 May 2026 22:53:45 +0000
Files and hashes:         1: DgPTwujyxTWCvtHCFMH9Oq6lrlo.crl (hash: e0kuDmaYSTxgaIO/jHFxvEtM7qVfKZN2p7ptIN48Z/o=)
                          2: CB7909B4B26C11F08ED1666AC4F9AE02.roa (hash: 8uzxFmMR3Sr3PxroRuZhI7xinnvv5MK7IdYyanz4uBY=)
                          3: F7AB4FF8058F11F1B7BFF5793E3D8C67.roa (hash: smzhzupHrKLINvK/TUbRvcJq4YEGD40s9iChZgILW3o=)
                          4: 33392DE2059011F1A8DF17AA3E3D8C67.roa (hash: q1rBnMxJ+DzQAHD3yWNtFqN06AdWDOlKoKntvnfHolI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.crl
                          rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:53:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1617 (0x651)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911418D, serialNumber=0E03D3C2E8F2C53582BED1C214C1FD3AAEA5AE5A
        Validity
            Not Before: May 12 22:53:45 2026 GMT
            Not After : May 19 22:53:45 2026 GMT
        Subject: CN=6a03af79-7a70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:30:91:fc:51:d1:80:cc:f2:f1:20:e4:37:0d:
                    ba:34:75:a3:69:15:3d:d3:0e:e9:6a:fe:fe:30:3d:
                    d3:d3:71:8c:0d:66:f8:43:11:1c:57:f5:7f:38:b3:
                    ab:65:9a:27:04:49:41:35:d9:7c:2a:4d:04:27:94:
                    4c:43:11:c2:80:6e:38:f8:ac:2c:66:4f:31:52:9e:
                    d8:c3:a1:0f:fc:e0:f3:47:52:b5:3e:f1:9b:d4:f6:
                    78:70:ed:ae:e5:aa:e9:45:e8:c9:9b:a1:e0:2e:4a:
                    1c:79:00:98:48:83:50:46:ae:7b:48:48:c0:b1:2b:
                    74:a7:0a:41:07:ae:55:d8:00:57:b9:a8:6d:7e:0a:
                    c0:3a:bf:93:aa:4b:2c:46:36:2d:1b:38:93:6b:78:
                    4a:f7:1d:1d:66:74:ff:ce:f1:df:8a:7e:84:ee:60:
                    9d:dc:16:cc:4b:91:fd:48:a3:92:08:47:62:60:7b:
                    51:4d:bb:75:bc:26:b4:cb:65:b1:39:ad:86:1d:b1:
                    fa:18:f2:07:fb:32:45:a2:42:60:c7:a4:96:95:ea:
                    c0:44:d5:df:7e:40:df:77:03:80:13:f9:10:99:84:
                    b0:2f:e4:c1:95:bf:ae:30:8f:2a:97:db:90:4a:4d:
                    96:8a:21:c2:b2:19:02:c9:ec:41:09:7f:32:63:d1:
                    80:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:55:D3:22:0F:AC:59:D3:65:D0:B3:D0:47:AD:B0:99:FE:65:02:F0
            X509v3 Authority Key Identifier:
                keyid:0E:03:D3:C2:E8:F2:C5:35:82:BE:D1:C2:14:C1:FD:3A:AE:A5:AE:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:4d:73:df:ee:e7:e3:45:7f:d1:2b:a8:bd:d9:62:52:7c:82:
         d0:22:5a:90:37:9a:12:73:c9:b3:e5:c3:2d:6b:6d:56:26:c9:
         fb:44:44:cf:f6:fa:ce:fc:b5:3f:a9:4a:73:ea:1f:47:2e:a0:
         1b:40:65:c6:6a:59:16:0e:ec:ac:01:9d:dc:0d:bc:78:95:7c:
         fe:94:53:33:5c:75:ac:e2:c7:c2:12:a9:da:b8:49:ee:45:9f:
         32:a9:86:2a:df:7c:21:16:43:4a:a4:d4:c1:01:e0:48:1e:10:
         92:4d:04:54:2d:e5:39:43:24:36:f4:05:80:14:89:ba:81:37:
         0c:a1:6e:c2:0d:9a:3d:5f:0c:90:3a:1d:37:a9:26:b2:a0:83:
         a5:d7:28:e0:45:ac:3f:ed:f9:93:7b:2c:b6:4c:68:4b:b6:fb:
         52:75:21:ec:ea:de:b2:0d:3f:2e:72:3b:b2:ed:7e:8b:57:11:
         fa:d5:ff:4c:d4:91:e9:37:67:e4:a4:46:07:5b:bf:f3:d0:d4:
         07:cc:44:8e:85:b8:41:a7:de:74:b0:13:52:86:e8:a7:30:29:
         83:e1:5d:13:89:35:1c:b6:8a:64:f3:21:60:fa:ea:de:2c:4c:
         ba:71:7d:97:8a:d1:61:04:3f:d8:b5:22:a3:e3:8f:ad:49:e6:
         3d:ef:bd:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:58:16 2026 by rpki-client