Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft
File:                     dNMDVT5gXDFRHphkxWZZnU24o5M.mft (raw, json)
Hash identifier:          puEpUgd+JI93qqb6uZJ5xDyAdQhKpb8RV31JBETYZ6A=
Subject key identifier:   C7:43:06:72:BA:7E:26:76:79:4B:52:A0:66:66:62:A3:D1:9C:F8:E8
Authority key identifier: 74:D3:03:55:3E:60:5C:31:51:1E:98:64:C5:66:59:9D:4D:B8:A3:93
Certificate issuer:       /CN=A912C1EC/serialNumber=74D303553E605C31511E9864C566599D4DB8A393
Certificate serial:       058B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNMDVT5gXDFRHphkxWZZnU24o5M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft
Manifest number:          0581
Signing time:             Tue 24 Mar 2026 22:58:03 +0000
Manifest this update:     Tue 24 Mar 2026 22:58:02 +0000
Manifest next update:     Tue 31 Mar 2026 22:58:02 +0000
Files and hashes:         1: dNMDVT5gXDFRHphkxWZZnU24o5M.crl (hash: 75ufMfJKxUPzF+bih4mngX1SdfjzQLBS8A128ww3+Ak=)
                          2: 92C0558C1A3B11EC91C03279C4F9AE02.roa (hash: O7zzjDBWEUSYqll/hl0eb8ojldYcS/JklLQk1YXiDkE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.crl
                          rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNMDVT5gXDFRHphkxWZZnU24o5M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:58:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1419 (0x58b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C1EC, serialNumber=74D303553E605C31511E9864C566599D4DB8A393
        Validity
            Not Before: Mar 24 22:58:02 2026 GMT
            Not After : Mar 31 22:58:02 2026 GMT
        Subject: CN=69c316fb-dd3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:90:d3:48:2f:82:dd:27:24:50:0c:09:93:8d:
                    19:00:55:bd:2a:51:a7:30:3b:ab:0d:8b:ec:59:cb:
                    f9:b8:d4:88:66:7d:ba:8e:89:38:9c:e4:60:49:62:
                    d0:7b:9f:45:48:4c:7d:5e:cd:e3:21:eb:1f:6d:02:
                    be:4b:42:09:a2:bd:21:c2:65:9a:f5:0c:02:c4:4f:
                    72:b9:7b:6f:d2:94:90:60:6b:28:96:2a:06:b3:d5:
                    95:0e:52:f9:78:35:27:f5:25:76:bd:13:07:85:00:
                    27:f4:32:7a:6f:6b:8e:d3:36:0f:bf:a2:cc:74:62:
                    1d:74:b6:b1:12:d5:d0:2a:cb:d5:7d:20:5b:b7:cd:
                    47:2f:84:fc:80:09:d1:d6:5b:d0:e5:84:08:2e:4b:
                    f4:03:6f:03:cb:2d:85:5a:76:46:09:3a:5a:92:db:
                    3a:da:40:30:23:9c:61:36:27:9e:47:ac:60:60:e8:
                    68:95:39:ce:30:8a:df:63:f5:94:bb:a8:b9:91:7e:
                    bb:f8:fd:9c:9d:d0:a2:40:f0:80:ed:75:cd:4c:60:
                    8b:f4:c4:9d:53:9e:bc:09:6c:eb:4d:f3:21:4e:36:
                    47:ea:34:81:4d:02:57:67:5f:8a:e1:86:d1:7b:8e:
                    86:a7:46:50:cb:3f:c2:24:a4:32:bc:74:ab:77:06:
                    9a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:43:06:72:BA:7E:26:76:79:4B:52:A0:66:66:62:A3:D1:9C:F8:E8
            X509v3 Authority Key Identifier:
                keyid:74:D3:03:55:3E:60:5C:31:51:1E:98:64:C5:66:59:9D:4D:B8:A3:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNMDVT5gXDFRHphkxWZZnU24o5M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:e5:12:57:43:b3:63:51:75:7e:36:82:30:df:13:9d:39:e7:
         43:c5:7f:06:fa:f8:a0:eb:0d:69:95:0f:c1:26:01:18:10:44:
         35:0a:76:cf:23:2b:87:71:d4:ac:23:a9:46:c2:81:ce:93:10:
         a7:4c:e9:36:18:3c:4f:a5:f5:11:4a:e1:04:32:2b:b0:ae:93:
         c9:7c:5c:22:41:c0:51:cf:9c:33:84:57:15:37:97:8b:d2:a8:
         97:22:ab:3e:64:2c:3d:3e:ba:0b:99:36:9c:cb:cb:de:49:50:
         60:42:96:7c:59:1a:22:98:b1:39:ca:c0:32:5c:9d:dc:b2:0c:
         d4:b9:7e:2a:49:ff:21:79:18:47:8c:11:28:a5:d9:e0:be:d6:
         6e:ef:ac:11:83:d8:ea:9d:a5:8e:eb:67:48:72:b4:31:e5:71:
         bd:a4:bb:14:02:58:b4:dc:ee:72:33:b1:74:84:0c:d9:ba:f1:
         42:6c:2d:d9:25:41:0c:b0:f4:e0:44:82:7c:41:81:f9:f3:51:
         c1:9b:41:15:33:9f:8b:83:d9:fe:00:4f:ef:66:15:e1:20:66:
         2e:ba:ba:60:b1:d2:2c:ed:9e:64:7f:de:90:ed:dd:72:52:23:
         ac:a8:82:c3:9c:fe:7c:ae:e7:b7:b9:55:ad:da:4c:f8:94:3d:
         aa:10:6b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:29:50 2026 by rpki-client