Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.mft
File:                     DPzMWYD1fmvITfEbTFcZNdJdrMo.mft (raw, json)
Hash identifier:          Sktb8Mv+REI+qX7YPcLCmOAF+vK+LE+imMI7Iv0hWhY=
Subject key identifier:   33:96:79:6B:B4:B3:64:FA:3E:F4:1D:07:0B:10:ED:C2:9C:C7:47:B1
Authority key identifier: 0C:FC:CC:59:80:F5:7E:6B:C8:4D:F1:1B:4C:57:19:35:D2:5D:AC:CA
Certificate issuer:       /CN=A91415AA/serialNumber=0CFCCC5980F57E6BC84DF11B4C571935D25DACCA
Certificate serial:       0111
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DPzMWYD1fmvITfEbTFcZNdJdrMo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.mft
Manifest number:          151B
Signing time:             Thu 26 Mar 2026 19:14:44 +0000
Manifest this update:     Thu 26 Mar 2026 19:14:44 +0000
Manifest next update:     Thu 02 Apr 2026 19:14:44 +0000
Files and hashes:         1: DPzMWYD1fmvITfEbTFcZNdJdrMo.crl (hash: 1U6ECWjszw16djIeGxtOS8O3HL2P7FA70L7HWdpd+HI=)
                          2: CB04F4409BE611EF8AFF947CC4F9AE02.roa (hash: qD+BUgUhK3DI5i4LAigsq9eVcd7R9m6jCEFQfslUH2g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.crl
                          rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DPzMWYD1fmvITfEbTFcZNdJdrMo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 19:14:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 273 (0x111)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91415AA, serialNumber=0CFCCC5980F57E6BC84DF11B4C571935D25DACCA
        Validity
            Not Before: Mar 26 19:14:44 2026 GMT
            Not After : Apr  2 19:14:44 2026 GMT
        Subject: CN=69c585a4-58fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7a:17:02:9e:ec:c4:1a:f1:84:11:01:79:9b:
                    c2:4b:60:8a:f0:a2:5d:22:60:70:c0:d7:b4:df:f2:
                    65:6a:5f:2e:2b:54:c6:f4:42:09:f1:88:46:19:f9:
                    5a:aa:64:7c:49:80:ed:ae:e0:49:33:7d:e3:54:c6:
                    88:77:68:dc:42:c0:07:4a:6d:88:1c:1c:47:05:20:
                    ba:07:43:7e:0f:f4:5a:0e:52:0f:01:09:91:0a:bf:
                    30:85:ba:15:01:5a:bd:cc:a7:a5:6d:bd:11:8f:91:
                    5a:98:15:3a:e2:d3:66:22:62:98:58:d4:6b:4f:82:
                    60:2a:6a:75:0a:db:60:77:fa:b0:0a:d0:e3:2f:08:
                    bf:18:52:7e:82:a4:7e:d7:6b:f2:c6:58:83:88:2a:
                    15:24:f1:72:2e:81:7b:f6:b1:42:bb:68:3d:ad:5c:
                    f0:af:7d:bb:e4:5f:7a:bc:4b:76:f0:3d:e8:55:73:
                    05:39:b9:5d:f6:01:ac:69:f0:11:ef:89:f6:ee:4d:
                    81:2e:6b:3e:a3:23:ba:c5:87:f4:5d:5e:f2:3e:b0:
                    12:e1:f4:ed:56:17:a4:cf:10:0f:8b:18:74:a3:5e:
                    e6:e0:12:64:86:1a:b6:21:c1:f5:2b:2c:32:3f:1f:
                    92:c8:a9:05:e3:38:92:6e:3a:41:3f:ec:94:a8:b8:
                    18:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:96:79:6B:B4:B3:64:FA:3E:F4:1D:07:0B:10:ED:C2:9C:C7:47:B1
            X509v3 Authority Key Identifier:
                keyid:0C:FC:CC:59:80:F5:7E:6B:C8:4D:F1:1B:4C:57:19:35:D2:5D:AC:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DPzMWYD1fmvITfEbTFcZNdJdrMo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:c9:84:2f:3c:f8:11:b8:f2:93:21:f5:c7:c1:a0:e0:e4:e1:
         5c:b2:46:c2:c0:07:b3:69:e5:ba:89:94:50:31:f8:d6:38:9b:
         99:28:ed:40:d0:6d:8e:d0:fc:ea:ea:0f:4f:76:71:bb:b1:43:
         9f:f3:5b:2e:6c:06:e7:7d:9c:66:f0:2f:d1:99:c3:7c:2e:e1:
         2b:ca:01:0b:7b:bf:58:e8:e8:3e:d1:5e:15:b8:bd:02:a4:7e:
         eb:23:0f:74:0b:27:5b:13:2d:52:c5:e7:23:58:5b:8f:a2:fb:
         f0:fc:71:9a:4a:84:82:ec:aa:75:14:2f:00:5a:18:e9:f9:21:
         7b:8b:99:c3:33:f7:5c:ef:d5:50:3d:39:4f:8b:dc:d5:9e:69:
         a4:7a:93:9f:c9:48:0f:b3:c5:86:7a:cf:9a:c5:e5:25:3b:92:
         28:d3:b8:a8:2c:52:c5:ab:3c:51:21:3a:94:3c:41:09:d2:3f:
         b5:cd:08:26:a8:c9:43:89:3f:7b:44:e5:c6:de:00:bd:97:14:
         17:bc:27:85:7e:4a:f0:ba:7a:0e:f9:59:b7:e9:fb:2c:fa:fb:
         f4:70:ba:11:58:9d:a0:26:c7:bb:f0:b7:9e:d0:3c:d0:5d:75:
         04:76:ed:07:f3:0b:ec:db:76:48:bb:a9:c8:c5:e9:0a:79:ea:
         31:5a:1e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:36:58 2026 by rpki-client