Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.mft
File:                     DOpooCxSn4h1LGQt4NL--fXXoUo.mft (raw, json)
Hash identifier:          IhCyiQlGm+9n72mgLw4OI0Pm1Pjcb6CM3P+kA/y1vu0=
Subject key identifier:   B6:7B:90:BB:EB:4C:5A:1F:5E:04:21:C5:22:7C:ED:50:D2:57:17:E0
Authority key identifier: 0C:EA:68:A0:2C:52:9F:88:75:2C:64:2D:E0:D2:FE:F9:F5:D7:A1:4A
Certificate issuer:       /CN=A913025C/serialNumber=0CEA68A02C529F88752C642DE0D2FEF9F5D7A14A
Certificate serial:       0793
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOpooCxSn4h1LGQt4NL--fXXoUo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.mft
Manifest number:          0782
Signing time:             Tue 12 May 2026 21:42:03 +0000
Manifest this update:     Tue 12 May 2026 21:42:02 +0000
Manifest next update:     Tue 19 May 2026 21:42:02 +0000
Files and hashes:         1: DOpooCxSn4h1LGQt4NL--fXXoUo.crl (hash: uR8TEWtyhjQIOw9jvsYGIznRMzUwPYBVJPhEpMBaT70=)
                          2: E072F73492DF11EE9803F859C4F9AE02.roa (hash: Ex32OuK8cYYdQNaH5Et0DlGn+H8d2IBO5mMVFj93THg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.crl
                          rsync://rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOpooCxSn4h1LGQt4NL--fXXoUo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 21:42:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1939 (0x793)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913025C, serialNumber=0CEA68A02C529F88752C642DE0D2FEF9F5D7A14A
        Validity
            Not Before: May 12 21:42:02 2026 GMT
            Not After : May 19 21:42:02 2026 GMT
        Subject: CN=6a039eab-55c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:92:5e:cc:f7:f1:00:ab:1a:c5:b4:ad:1c:5d:
                    cc:77:8e:d6:d4:dc:5f:4d:28:28:fe:67:00:1b:00:
                    fe:e0:02:df:14:89:46:4f:80:12:02:5c:5d:7f:00:
                    6b:f6:78:20:bb:6c:6b:1d:cb:b8:f8:e5:ea:f9:55:
                    35:6e:66:dd:1b:61:f2:41:52:2f:5d:d1:92:13:41:
                    19:dd:45:3c:fc:6a:a2:2d:da:06:e4:c7:25:15:19:
                    79:f1:96:e4:0d:c9:54:74:11:cb:ee:06:c5:d5:34:
                    10:94:ef:1f:d6:dc:5e:82:40:41:68:3b:9a:95:db:
                    4d:8f:75:31:f0:7c:43:80:6a:4b:e1:ba:d9:18:78:
                    c5:cd:27:c7:b2:c7:b5:69:a2:8a:47:3a:42:78:c1:
                    fc:2f:52:ba:0a:1a:32:3e:66:e4:3e:b0:e1:ab:06:
                    98:0f:28:79:d1:93:62:f4:dd:5e:68:2c:82:34:a5:
                    3e:0f:75:49:07:71:f8:e2:52:4e:45:1f:5c:ab:90:
                    8a:db:0c:26:0b:fb:a9:3e:82:0b:b5:f2:a6:42:42:
                    b3:09:67:99:7a:7d:bb:b7:75:98:37:cb:f5:e2:8f:
                    0c:d3:66:38:fd:52:89:60:00:4c:6c:0a:86:c1:32:
                    dd:33:45:b0:bb:c9:d3:1f:cc:cd:f6:26:9f:04:53:
                    f4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:7B:90:BB:EB:4C:5A:1F:5E:04:21:C5:22:7C:ED:50:D2:57:17:E0
            X509v3 Authority Key Identifier:
                keyid:0C:EA:68:A0:2C:52:9F:88:75:2C:64:2D:E0:D2:FE:F9:F5:D7:A1:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOpooCxSn4h1LGQt4NL--fXXoUo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:61:1a:5f:be:66:05:da:ab:6a:bf:3e:51:98:86:6a:b9:0f:
         95:fa:f6:ad:c3:3d:27:0b:90:51:2e:85:af:15:3f:03:ea:71:
         9a:af:25:70:0f:cc:94:20:3c:4e:e4:7f:9b:56:9d:bb:bd:b8:
         60:dc:e4:e8:a0:a8:ae:c3:da:34:a9:f3:1f:5b:10:88:bc:c6:
         6e:df:36:79:ea:4f:ef:36:56:dd:68:74:9f:30:9e:b5:3f:51:
         06:9b:2e:4f:ce:da:20:e1:22:4c:1d:57:c5:25:fd:89:ad:35:
         44:4e:df:fe:86:e7:0d:c9:cb:66:70:8c:e3:06:62:98:d6:e3:
         9b:cd:3d:5c:27:61:8b:8a:23:c9:55:94:13:53:2c:8f:1c:0e:
         0c:8f:cd:da:5d:63:d9:2f:5d:0b:a4:71:6a:98:0e:a1:38:da:
         4b:74:8c:e0:ab:27:fb:ba:ad:37:60:6a:a5:9f:c4:f7:4a:72:
         a2:12:f2:62:1a:70:4e:52:1e:54:c3:d8:6f:8e:6e:04:7a:da:
         76:d2:d7:11:0f:d6:4a:b4:43:ec:59:da:ac:d0:53:47:9e:21:
         9e:20:3f:0e:c8:32:7e:ef:d0:af:dc:e0:ab:48:e5:2d:37:62:
         6f:f6:a7:50:27:e5:a8:42:59:28:e0:16:80:a0:ab:6c:41:ec:
         a1:37:fa:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:44:50 2026 by rpki-client