Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.mft
File:                     dOHLgzYmhzR4kyyiEYioj98uneA.mft (raw, json)
Hash identifier:          01WId27ETr+m3fqFIFXQSrSTWoTjDWb4hNGWeMAY/Lc=
Subject key identifier:   DC:83:A4:35:2D:D6:A2:6D:0A:18:76:CD:8B:1D:80:C7:90:05:80:69
Authority key identifier: 74:E1:CB:83:36:26:87:34:78:93:2C:A2:11:88:A8:8F:DF:2E:9D:E0
Certificate issuer:       /CN=A9121E13/serialNumber=74E1CB833626873478932CA21188A88FDF2E9DE0
Certificate serial:       06EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOHLgzYmhzR4kyyiEYioj98uneA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.mft
Manifest number:          06EA
Signing time:             Tue 24 Mar 2026 14:46:43 +0000
Manifest this update:     Tue 24 Mar 2026 14:46:43 +0000
Manifest next update:     Tue 31 Mar 2026 14:46:43 +0000
Files and hashes:         1: dOHLgzYmhzR4kyyiEYioj98uneA.crl (hash: S3TiyYqnTz3hoUP07hfWYJPYwUR4TuMD63/DceP6tuU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.crl
                          rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOHLgzYmhzR4kyyiEYioj98uneA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 14:46:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1771 (0x6eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121E13, serialNumber=74E1CB833626873478932CA21188A88FDF2E9DE0
        Validity
            Not Before: Mar 24 14:46:43 2026 GMT
            Not After : Mar 31 14:46:43 2026 GMT
        Subject: CN=69c2a3d3-76a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2f:cc:e9:0f:23:49:8e:ce:dd:47:ee:38:f0:
                    70:cc:0f:19:45:f2:16:0d:8d:36:f6:f5:d8:28:ad:
                    9d:f1:47:b5:b4:99:2f:81:6f:b8:e0:8a:ac:0f:4e:
                    11:26:e0:89:1a:6c:3a:cf:e1:a0:7e:55:3a:7e:ff:
                    c2:0f:01:69:79:a2:b6:ce:17:8a:97:1f:4d:67:27:
                    1c:c0:eb:b1:92:04:e1:55:21:95:4a:a4:70:69:95:
                    eb:ab:f1:8c:cc:ce:26:e0:2d:2f:4c:c5:90:46:7f:
                    15:0f:71:af:72:cf:2c:b1:97:e8:b3:6a:ca:32:f5:
                    76:c3:ee:fc:a0:a4:73:54:8c:97:bc:30:1a:65:ba:
                    b3:81:64:47:d3:f1:e7:97:ff:35:22:ad:ff:87:5b:
                    93:a5:66:89:6e:4d:dd:be:40:7e:f7:a6:fc:18:0a:
                    bb:00:e9:30:48:51:a8:ec:e3:8c:f1:8b:67:fa:2d:
                    32:a1:a8:84:48:b0:ac:aa:00:a5:13:22:64:49:f0:
                    d1:2d:7f:cc:3d:0a:c9:b8:ff:26:05:77:d2:c5:50:
                    f0:78:08:49:4e:16:56:35:77:54:7a:f2:f0:d3:10:
                    59:5d:14:bd:50:c1:0e:22:37:48:94:9b:6f:00:86:
                    eb:79:d9:1b:7f:4c:98:28:52:6c:d2:06:19:c3:5d:
                    66:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:83:A4:35:2D:D6:A2:6D:0A:18:76:CD:8B:1D:80:C7:90:05:80:69
            X509v3 Authority Key Identifier:
                keyid:74:E1:CB:83:36:26:87:34:78:93:2C:A2:11:88:A8:8F:DF:2E:9D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOHLgzYmhzR4kyyiEYioj98uneA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:e0:3e:a8:b0:d1:a1:69:7e:98:4b:0e:0b:58:12:52:06:9a:
         c6:6d:9c:e3:cf:03:df:3c:32:25:0f:7f:f6:2c:b4:d3:8b:24:
         c3:ce:34:3f:39:61:86:78:3b:6c:89:31:e4:fe:63:5d:16:5f:
         c6:65:0c:33:9d:57:08:fa:b8:30:eb:6a:8f:f1:62:3b:bd:a3:
         9d:79:c4:50:1f:1f:ab:39:44:f7:c3:58:57:cb:79:61:f6:6b:
         23:16:26:86:20:02:5c:3f:7c:ee:19:02:74:9e:17:7a:f7:60:
         18:f9:97:fd:5e:a8:ca:f7:35:ed:c1:0a:84:11:0b:4f:7a:b1:
         95:a6:4a:e4:7e:25:65:bd:80:50:e4:e7:19:f2:59:da:04:82:
         02:9d:a1:69:2a:39:79:1f:62:2a:83:32:73:2b:02:0d:09:bb:
         83:f2:00:d1:5b:0c:a9:f8:1e:79:3b:29:66:4b:90:79:af:52:
         93:44:7b:b3:87:d0:b8:7c:f9:e9:85:cb:cf:a8:95:da:05:49:
         57:cf:33:16:f9:db:5d:a9:2f:60:1a:bd:31:0b:0a:98:ed:88:
         7f:99:34:b4:91:1c:73:28:26:f2:af:b0:54:f8:21:1d:ae:79:
         b5:1f:3c:c7:67:a6:92:b8:ea:f6:a9:0b:8c:fd:26:75:38:6a:
         ca:ef:fc:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:38:04 2026 by rpki-client