Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.mft
File:                     diAma5iRohjA5fLvKI94LVcX8rw.mft (raw, json)
Hash identifier:          SX3USbG7OD8fJkSCNMbwOQL0PAVW4K81jIU8llqXlpc=
Subject key identifier:   DC:EB:D9:8F:D2:2C:8A:5E:8E:46:08:0F:D1:FA:B8:7F:E1:34:84:D3
Authority key identifier: 76:20:26:6B:98:91:A2:18:C0:E5:F2:EF:28:8F:78:2D:57:17:F2:BC
Certificate issuer:       /CN=A911E660/serialNumber=7620266B9891A218C0E5F2EF288F782D5717F2BC
Certificate serial:       014D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/diAma5iRohjA5fLvKI94LVcX8rw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.mft
Manifest number:          0149
Signing time:             Sun 11 Oct 2026 05:58:13 +0000
Manifest this update:     Sun 11 Oct 2026 05:58:12 +0000
Manifest next update:     Sun 18 Oct 2026 05:58:12 +0000
Files and hashes:         1: diAma5iRohjA5fLvKI94LVcX8rw.crl (hash: HWsBmgULUhbQJfXg5aceU27Z47RymQpKY/JUIwyUQmM=)
                          2: 4ECE44B0D24311EF919B6D12C4F9AE02.roa (hash: Duer1WVGQHeYZI/Azd1wOhsGz2PF1wG4VU8KdNzFWQc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.crl
                          rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/diAma5iRohjA5fLvKI94LVcX8rw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 333 (0x14d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E660, serialNumber=7620266B9891A218C0E5F2EF288F782D5717F2BC
        Validity
            Not Before: Oct 11 05:58:12 2026 GMT
            Not After : Oct 18 05:58:12 2026 GMT
        Subject: CN=6acb2575-4835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ce:e8:e2:21:15:b3:ab:b5:f9:6e:8b:f3:c8:
                    1a:d2:07:d8:5c:7c:44:65:33:1d:aa:8f:65:64:9a:
                    42:e8:72:1e:82:f8:fd:2e:7b:64:e5:75:4d:55:10:
                    cd:89:0c:ea:9c:0f:09:3e:0e:6a:ad:90:8a:c4:c5:
                    a7:23:72:d4:8f:d5:36:09:f4:09:24:8e:ca:ec:91:
                    1c:4b:4f:1a:2e:f0:16:d0:17:f1:dc:21:3f:10:0e:
                    c9:4e:fd:62:79:e3:d5:99:8d:be:1d:96:8b:07:d8:
                    1e:3a:04:3c:01:c7:c9:eb:d2:95:05:75:b7:a7:15:
                    47:74:35:9c:88:32:99:53:11:e5:99:13:5b:02:f3:
                    b8:f3:d0:1d:6a:82:97:dd:f5:68:29:ff:8c:96:41:
                    c3:50:0c:19:0b:a0:61:94:ee:20:ca:33:26:a2:d2:
                    f1:96:5f:be:e8:bb:87:35:7b:c2:35:2c:72:a4:04:
                    f5:c5:6e:70:8f:0f:fc:20:dd:79:6a:f8:b9:67:a7:
                    c5:5b:74:99:4c:b3:a6:f9:d3:04:34:9b:68:2d:20:
                    83:3f:a7:c4:87:af:3e:15:89:9d:47:69:eb:03:0e:
                    ee:1f:5a:af:ab:01:f0:58:96:64:78:81:f4:44:4c:
                    c7:69:fc:4d:ee:2d:24:2a:da:6e:9e:e0:af:0f:92:
                    81:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:EB:D9:8F:D2:2C:8A:5E:8E:46:08:0F:D1:FA:B8:7F:E1:34:84:D3
            X509v3 Authority Key Identifier:
                keyid:76:20:26:6B:98:91:A2:18:C0:E5:F2:EF:28:8F:78:2D:57:17:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/diAma5iRohjA5fLvKI94LVcX8rw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:d1:bf:b4:42:6d:ba:09:8c:86:ec:82:a6:1b:6d:f9:39:05:
         82:49:3f:57:44:d5:f7:4d:b1:17:81:09:39:3a:33:93:2c:74:
         3f:d9:b4:4e:ef:cc:f2:b7:49:38:ad:ea:c2:fb:74:0b:d2:88:
         4c:d9:a8:fd:82:5f:85:6e:75:d3:bc:ca:42:25:79:6b:12:3f:
         96:6c:81:1d:10:c3:fb:28:be:9d:45:e5:e1:9f:ef:d9:5e:41:
         43:2d:8e:79:ef:cd:5b:2e:0f:b3:dd:08:2b:c7:76:d2:f0:b7:
         34:b9:77:9a:af:de:da:2c:99:0c:75:7b:8b:6c:f2:49:51:ba:
         1e:74:e3:f7:36:4f:87:f1:2b:bb:e1:88:51:48:34:48:f3:cf:
         84:09:5d:db:1b:bc:54:45:3a:74:de:27:9a:30:93:4c:a1:91:
         04:4c:0d:7d:6f:79:70:76:ec:a9:1f:98:da:34:51:f8:d0:a7:
         ef:ea:15:e4:10:30:41:6c:1a:7c:b9:b5:ae:18:6d:72:f3:48:
         2e:f6:1b:cd:c3:6d:82:c6:0f:0b:27:3c:82:21:b8:62:eb:05:
         48:8e:87:57:1b:4e:07:61:97:f2:cf:ae:46:8f:26:c7:9e:eb:
         2a:11:77:0b:c4:e9:b2:96:e5:20:b2:8c:7f:22:a7:5a:ff:e6:
         40:d6:f8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:36:18 2026 by rpki-client