Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft
File:                     DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft (raw, json)
Hash identifier:          P6Q6GzYh/Ev0pKIxs784UQo6r4jcSNMv6vdFme7Ns14=
Subject key identifier:   A4:72:BA:DB:5C:A4:C3:7B:A3:AC:7A:30:2A:75:2F:E0:51:26:28:13
Authority key identifier: 0D:E5:96:CB:2C:60:CB:75:7D:B8:F4:0E:B8:6F:24:76:52:C1:3A:30
Certificate issuer:       /CN=A9135033/serialNumber=0DE596CB2C60CB757DB8F40EB86F247652C13A30
Certificate serial:       0DC3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeWWyyxgy3V9uPQOuG8kdlLBOjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft
Manifest number:          0DB0
Signing time:             Tue 24 Mar 2026 17:46:53 +0000
Manifest this update:     Tue 24 Mar 2026 17:46:52 +0000
Manifest next update:     Tue 31 Mar 2026 17:46:52 +0000
Files and hashes:         1: DeWWyyxgy3V9uPQOuG8kdlLBOjA.crl (hash: TvzHjCXQQw0J9qjCpVpOQSLaQAhUtJ5SYBdOakGyAtE=)
                          2: 2328656A840211EEB9348E11C4F9AE02.roa (hash: AJ7U14HstgqbbA37ZAEyjfsIrPGL23cFMb8Jhil555M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.crl
                          rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeWWyyxgy3V9uPQOuG8kdlLBOjA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 17:46:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3523 (0xdc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135033, serialNumber=0DE596CB2C60CB757DB8F40EB86F247652C13A30
        Validity
            Not Before: Mar 24 17:46:52 2026 GMT
            Not After : Mar 31 17:46:52 2026 GMT
        Subject: CN=69c2ce0d-a1c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9f:c8:1e:ee:40:06:4e:56:a5:a6:68:f0:98:
                    9b:18:4b:45:f8:00:eb:3c:20:83:2c:25:76:64:6e:
                    c9:8a:ae:f1:d7:ef:3e:42:22:a7:b1:0d:96:a5:da:
                    61:88:07:9d:6c:cd:a7:b4:73:64:01:e4:11:26:68:
                    98:ff:f8:72:4b:11:5d:a2:78:af:c7:bc:d4:79:68:
                    ac:70:1b:50:cd:80:62:76:87:ea:26:ec:cc:90:87:
                    b9:19:3d:72:40:77:55:9a:3d:19:23:a1:0d:e0:d3:
                    f7:75:57:6c:cb:27:05:32:d2:38:49:7c:24:e1:46:
                    c6:f4:b4:bd:37:2c:d3:5e:d9:57:45:3d:ef:98:ce:
                    df:e0:84:12:ad:0b:dc:b6:83:7b:31:c1:57:56:e1:
                    ba:da:1a:6f:0d:ee:ab:2d:fc:72:30:5b:6f:5e:35:
                    13:f0:39:9c:99:8c:1c:50:7b:e7:86:a1:4d:92:e6:
                    4e:27:7e:c4:8b:36:22:ae:20:2a:77:08:30:cb:27:
                    c4:7b:20:fc:dc:a4:eb:b9:14:f0:a0:30:d9:6d:2b:
                    69:49:dd:03:e1:b8:53:16:90:ee:ed:80:92:40:ee:
                    1c:e4:fb:08:db:e6:ec:66:0c:90:98:40:92:b1:8a:
                    d1:01:ba:81:d2:3e:8f:49:d0:ce:ec:29:7a:f8:cb:
                    8c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:72:BA:DB:5C:A4:C3:7B:A3:AC:7A:30:2A:75:2F:E0:51:26:28:13
            X509v3 Authority Key Identifier:
                keyid:0D:E5:96:CB:2C:60:CB:75:7D:B8:F4:0E:B8:6F:24:76:52:C1:3A:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeWWyyxgy3V9uPQOuG8kdlLBOjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:13:fc:03:2b:92:1a:2d:31:50:05:d9:b2:4e:c3:e7:b0:00:
         4c:8f:b5:2e:38:73:b0:61:d3:cb:49:5e:81:cb:4e:7b:41:96:
         89:62:86:26:4d:bd:5f:5c:01:3c:9f:35:6d:83:dc:ba:c2:0b:
         f1:c5:a8:b2:f6:48:66:56:2f:44:7f:68:78:fc:56:ff:f9:9f:
         06:c1:a2:8c:77:a0:c9:dc:f7:1b:2d:43:6a:54:04:d2:a3:93:
         b1:3b:64:2c:23:27:da:76:b6:48:cb:ee:05:9f:67:ab:53:73:
         b3:02:ee:84:4e:0b:85:52:68:83:06:ae:b9:22:83:46:82:fb:
         54:90:35:0a:13:65:56:4f:ef:20:d4:0b:88:22:ad:fd:c0:a8:
         e8:0d:a0:49:68:8b:6a:87:28:f6:7b:d9:8d:48:6a:0c:e3:ea:
         bf:e9:84:a1:5b:fd:aa:68:35:80:9e:71:36:a8:b0:74:80:a1:
         91:09:a7:4e:3f:26:14:4a:4c:b5:18:ca:4e:b4:82:05:94:12:
         66:f7:5b:dd:7f:31:9b:b9:5f:e5:79:48:a9:5f:65:b8:44:33:
         57:7c:c1:c8:83:f5:c6:50:e1:0c:c5:5a:36:dc:93:86:f2:64:
         5b:b5:ad:07:14:c5:03:bd:69:08:61:d7:21:b0:dc:0a:92:92:
         f8:58:83:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:46:27 2026 by rpki-client