Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.mft
File:                     DpNmGsFhVPZdKi94GgMfNckxAQM.mft (raw, json)
Hash identifier:          yexwX1yKDjCnkbbBj6s1VXwtj+dSaOBxPHNGrZDmad4=
Subject key identifier:   CB:35:47:15:82:73:4E:2A:29:DC:AB:17:F7:16:09:96:A5:F9:35:26
Authority key identifier: 0E:93:66:1A:C1:61:54:F6:5D:2A:2F:78:1A:03:1F:35:C9:31:01:03
Certificate issuer:       /CN=A9138959/serialNumber=0E93661AC16154F65D2A2F781A031F35C9310103
Certificate serial:       F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DpNmGsFhVPZdKi94GgMfNckxAQM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.mft
Manifest number:          E7
Signing time:             Wed 25 Mar 2026 05:41:32 +0000
Manifest this update:     Wed 25 Mar 2026 05:41:32 +0000
Manifest next update:     Wed 01 Apr 2026 05:41:32 +0000
Files and hashes:         1: DpNmGsFhVPZdKi94GgMfNckxAQM.crl (hash: 6do0zJaYPleG4R66qC1gXE0hZyt3zdxXzhHwavw8x90=)
                          2: B534A848E2CE11EFA7030E56C4F9AE02.roa (hash: DkhuldH+A9mYCIox+Ay4O9Fu6YyyyV2CawGamuW15Qk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.crl
                          rsync://rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DpNmGsFhVPZdKi94GgMfNckxAQM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:41:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 241 (0xf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138959, serialNumber=0E93661AC16154F65D2A2F781A031F35C9310103
        Validity
            Not Before: Mar 25 05:41:32 2026 GMT
            Not After : Apr  1 05:41:32 2026 GMT
        Subject: CN=69c3758c-bc56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:65:87:76:9a:41:5b:55:66:93:54:a8:43:67:
                    63:0a:25:e3:ee:43:65:b9:9c:78:60:8c:10:93:21:
                    1a:27:fc:54:54:3a:77:f2:0a:90:93:6a:b5:7f:39:
                    8b:fd:18:88:90:61:f0:83:12:8d:46:96:17:9c:80:
                    e2:77:cd:0b:53:0c:cf:ec:a0:30:40:9a:32:cd:12:
                    7f:7f:b2:d4:91:84:33:a2:cc:37:39:f2:30:33:df:
                    73:d0:7b:00:d0:90:ea:b9:36:5d:bf:13:f9:18:b3:
                    49:3d:49:a0:ae:e7:1b:fd:a6:68:cf:cd:11:6f:b9:
                    0f:ab:94:95:6c:1b:38:10:a6:5d:a6:87:4a:1d:56:
                    64:a8:e0:54:e6:bb:b5:89:9f:2b:f4:b5:37:cf:ba:
                    20:09:c2:35:89:de:2d:a4:0c:2b:53:a8:7d:e8:d3:
                    c3:f7:1e:98:64:33:9b:b7:a1:46:2e:c4:01:a8:da:
                    63:1d:5a:f3:10:87:c6:5b:41:2c:02:63:8c:16:61:
                    ae:a9:a1:df:c4:ed:78:5a:58:9f:99:68:a4:fb:6e:
                    54:88:e0:c2:63:5e:f4:cc:1f:8f:85:18:f4:99:0e:
                    81:18:5d:6b:41:b4:9b:d2:1d:38:de:a2:d7:21:ff:
                    e4:d5:a3:45:b2:4e:f4:e6:4f:77:87:e2:e1:c2:28:
                    ee:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:35:47:15:82:73:4E:2A:29:DC:AB:17:F7:16:09:96:A5:F9:35:26
            X509v3 Authority Key Identifier:
                keyid:0E:93:66:1A:C1:61:54:F6:5D:2A:2F:78:1A:03:1F:35:C9:31:01:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DpNmGsFhVPZdKi94GgMfNckxAQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:b6:cb:09:ee:64:f7:10:df:81:b0:90:28:2b:ab:e8:79:58:
         78:99:09:15:58:12:8b:bd:b8:75:55:13:b4:83:19:4b:38:4a:
         fe:63:9a:98:bd:90:82:fc:52:f2:55:6f:42:16:de:c3:f8:eb:
         35:66:cf:55:56:19:84:62:1f:f2:28:cb:86:5c:8a:54:1a:a9:
         a1:95:e2:b6:e7:c0:d2:49:0a:cc:72:07:aa:e0:cf:11:ff:4c:
         9b:41:66:4d:18:cd:bc:35:41:35:a3:c9:a3:fa:97:43:0b:8c:
         31:12:2f:3c:54:b7:b2:ec:95:cd:12:f6:2c:b5:d6:21:12:39:
         79:23:49:c9:a9:3d:eb:8b:d8:3f:12:21:37:a7:ae:3c:43:b6:
         d4:5b:6f:61:fc:3a:3f:5b:a6:a8:cd:35:c1:0b:6b:86:89:e8:
         f5:9f:28:0e:f9:da:d7:e7:5c:4e:04:4f:e3:a2:27:94:c6:22:
         b3:68:bd:05:a4:26:2f:67:c6:2a:2c:13:91:bc:5e:39:f8:58:
         f0:5c:93:58:54:da:f0:27:34:9a:dc:b9:96:7b:a7:67:ee:b5:
         5d:61:b7:42:4e:fe:26:c6:5b:39:bd:b2:7d:aa:df:ee:ba:3e:
         03:b0:5a:60:6f:e7:6f:72:e4:73:ce:71:09:18:05:d8:2d:e0:
         f1:c0:84:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:55:38 2026 by rpki-client