Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.mft
File:                     DAsd1farZExXB4GkKeRIBQIY6es.mft (raw, json)
Hash identifier:          2hRs3o2Lc2SzJv7vfyLBqBRz0XFit1diSpqyuvelSfs=
Subject key identifier:   98:9F:76:28:98:0B:9D:A6:A0:85:25:BD:9D:27:3A:7D:0A:5A:7A:84
Authority key identifier: 0C:0B:1D:D5:F6:AB:64:4C:57:07:81:A4:29:E4:48:05:02:18:E9:EB
Certificate issuer:       /CN=A9134C3E/serialNumber=0C0B1DD5F6AB644C570781A429E448050218E9EB
Certificate serial:       05E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAsd1farZExXB4GkKeRIBQIY6es.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.mft
Manifest number:          05DA
Signing time:             Tue 24 Mar 2026 22:40:45 +0000
Manifest this update:     Tue 24 Mar 2026 22:40:44 +0000
Manifest next update:     Tue 31 Mar 2026 22:40:44 +0000
Files and hashes:         1: DAsd1farZExXB4GkKeRIBQIY6es.crl (hash: stHdv/V50xa3oVbtuNKMJscT1rOt0IFVRA9ESf51JQQ=)
                          2: 9222BEB4F42811EB93675638C4F9AE02.roa (hash: 4nv58WeFwiY1zxyiWfVWrgEuksWPrYq1We1YAcf12uM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.crl
                          rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAsd1farZExXB4GkKeRIBQIY6es.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:40:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1505 (0x5e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134C3E, serialNumber=0C0B1DD5F6AB644C570781A429E448050218E9EB
        Validity
            Not Before: Mar 24 22:40:44 2026 GMT
            Not After : Mar 31 22:40:44 2026 GMT
        Subject: CN=69c312ed-dec8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:49:7b:ad:31:3c:c7:9f:c9:a0:ab:8b:27:9d:
                    a9:25:da:90:47:62:4e:84:b0:5d:15:16:65:20:f4:
                    08:68:b4:18:c1:51:1c:5d:f7:a4:db:3d:f9:fc:47:
                    02:34:c1:2f:74:ff:8d:97:4a:df:d1:97:b9:24:11:
                    27:57:26:47:ef:38:71:c1:2a:ab:73:a2:1c:32:0f:
                    ce:82:e5:f3:58:e4:04:25:16:3e:dc:25:d5:36:86:
                    1a:42:f8:da:3a:e3:05:5a:ff:4f:7e:0d:df:4e:8e:
                    6e:c6:03:76:6d:17:93:bf:4c:4b:24:d7:0f:4b:28:
                    d9:82:d6:08:04:3b:5f:f2:37:77:7b:a1:0e:95:35:
                    2e:72:03:16:08:2b:f8:cb:71:47:7b:2e:9c:41:25:
                    6e:34:4d:82:e9:3b:84:50:52:aa:d4:43:95:76:50:
                    f0:c1:fe:51:8d:8a:7b:0c:0a:03:21:21:87:d9:84:
                    bd:d5:50:c6:86:6a:f9:80:94:f6:3d:b8:9b:ea:31:
                    f0:1e:63:c9:d9:a8:37:4f:f3:c0:57:12:2e:6c:f8:
                    48:3e:00:de:cc:72:82:c2:be:8c:15:e6:2a:b8:4a:
                    0c:a0:95:3d:af:e2:47:06:a7:09:08:b3:26:cb:22:
                    6b:fb:7a:10:82:6f:e8:f4:dd:88:88:eb:8c:2d:4d:
                    b9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:9F:76:28:98:0B:9D:A6:A0:85:25:BD:9D:27:3A:7D:0A:5A:7A:84
            X509v3 Authority Key Identifier:
                keyid:0C:0B:1D:D5:F6:AB:64:4C:57:07:81:A4:29:E4:48:05:02:18:E9:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAsd1farZExXB4GkKeRIBQIY6es.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:c4:61:ba:96:92:62:c2:5e:5a:57:38:2e:33:9a:06:e4:b3:
         92:0e:ee:ae:fe:1c:ac:b6:c4:60:c1:eb:be:c6:f8:1a:30:67:
         4a:30:9e:d1:ee:76:0f:a9:26:4e:04:7a:54:80:47:9d:09:c1:
         5b:b2:31:c9:3e:29:63:19:5b:c7:27:03:27:97:6d:f0:9b:90:
         24:06:7e:90:55:b1:52:3e:5d:7b:22:ae:71:4e:10:19:ae:60:
         b2:96:d3:d3:82:a0:ad:6c:2f:cf:ad:92:52:fc:4d:3d:a8:df:
         a5:dd:cb:e3:6a:ad:4e:98:77:35:aa:78:0a:09:fc:29:0c:a2:
         ec:3d:18:53:dc:87:ff:e8:9f:3f:0e:a9:cc:70:b4:72:eb:af:
         76:77:78:49:fa:b5:74:53:e0:33:e0:aa:dd:1c:e0:31:a6:aa:
         a7:b2:6f:62:46:d8:39:2d:40:39:c5:4e:7a:66:a3:af:98:91:
         c1:4a:86:82:e7:aa:9d:44:53:5a:29:e4:85:03:17:4b:7b:5b:
         dd:cf:0f:9a:a7:69:4b:bb:33:b9:f8:c3:24:e3:a8:11:cd:21:
         2f:0d:9b:b5:0f:31:c6:4c:07:02:1e:83:cd:58:cd:0c:0b:29:
         e5:eb:a0:cc:06:f1:05:53:fc:ba:22:14:aa:0d:07:fe:30:49:
         ab:1c:18:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:42:31 2026 by rpki-client