Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft
File:                     dKGUOXIqgzAE05VKV4ToXm6ZvME.mft (raw, json)
Hash identifier:          B19RNtK5nCfF9Tgs25e58NGvzZDL3bgtV/dgE2HqmxY=
Subject key identifier:   F5:ED:67:85:07:BF:AF:02:8F:57:CF:FE:DA:72:7D:90:DE:B5:20:F1
Authority key identifier: 74:A1:94:39:72:2A:83:30:04:D3:95:4A:57:84:E8:5E:6E:99:BC:C1
Certificate issuer:       /CN=A914454E/serialNumber=74A19439722A833004D3954A5784E85E6E99BCC1
Certificate serial:       08FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dKGUOXIqgzAE05VKV4ToXm6ZvME.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft
Manifest number:          08FF
Signing time:             Thu 26 Mar 2026 20:10:53 +0000
Manifest this update:     Thu 26 Mar 2026 20:10:52 +0000
Manifest next update:     Thu 02 Apr 2026 20:10:52 +0000
Files and hashes:         1: dKGUOXIqgzAE05VKV4ToXm6ZvME.crl (hash: qpLexuxcdCjJdSebTkVK1ieDxD8f7C0xvX840GXinhE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.crl
                          rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dKGUOXIqgzAE05VKV4ToXm6ZvME.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 20:10:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2303 (0x8ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914454E, serialNumber=74A19439722A833004D3954A5784E85E6E99BCC1
        Validity
            Not Before: Mar 26 20:10:52 2026 GMT
            Not After : Apr  2 20:10:52 2026 GMT
        Subject: CN=69c592cd-d715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:15:1b:1d:74:8f:cd:55:fc:94:9b:f5:3d:73:
                    d1:6c:8e:65:78:9b:1e:69:e1:60:ea:5b:3f:04:1c:
                    35:25:b2:ff:f1:6c:b1:49:49:a5:5a:ed:58:b5:4d:
                    25:6b:0d:91:55:aa:2b:f4:ae:b8:36:53:e9:7a:32:
                    af:05:4f:01:c2:29:62:ac:3d:51:f1:50:7a:25:c4:
                    1a:d9:a9:11:f9:49:d1:c7:e8:ff:4a:9d:ab:62:d7:
                    31:43:42:d9:19:c2:67:15:a6:29:ce:41:d5:cb:4d:
                    4b:5c:6d:4a:3f:7e:a4:d3:c5:88:d8:22:c0:67:ef:
                    fd:7f:d0:31:54:7e:9b:b7:6f:e2:ec:07:42:5e:80:
                    db:e5:05:65:65:56:fb:a6:72:70:a8:8e:c7:42:c2:
                    81:3c:92:0d:3f:15:fa:75:ca:f9:56:ee:bf:b9:27:
                    a2:c6:a9:d0:3f:7a:b1:45:d9:18:42:bc:1d:5e:46:
                    ff:a3:17:64:f1:ed:44:c8:73:ee:3d:9a:a6:a4:b2:
                    42:24:8c:04:01:01:e8:4b:de:69:c3:03:37:6c:45:
                    76:49:f8:df:84:1a:9c:1f:09:0a:18:e2:8d:c5:6f:
                    27:4b:72:b5:48:80:4f:7f:d2:d2:4e:21:e9:33:3b:
                    56:c6:4a:ee:59:3b:b1:0a:aa:ff:77:c4:97:5e:2b:
                    02:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:ED:67:85:07:BF:AF:02:8F:57:CF:FE:DA:72:7D:90:DE:B5:20:F1
            X509v3 Authority Key Identifier:
                keyid:74:A1:94:39:72:2A:83:30:04:D3:95:4A:57:84:E8:5E:6E:99:BC:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dKGUOXIqgzAE05VKV4ToXm6ZvME.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:8d:0d:b5:c7:7b:37:22:49:60:01:cc:a4:42:11:84:33:75:
         b5:cc:88:c8:06:e8:10:95:da:ea:9b:0e:1d:87:c0:92:ca:f6:
         b8:c7:4f:94:57:13:67:1f:46:c4:33:6e:23:29:70:c3:75:1b:
         45:81:44:22:7b:d3:85:d5:14:fa:5c:57:44:d1:b9:4b:fb:6f:
         26:92:91:ca:44:8c:47:3d:7e:26:a2:30:b8:75:ea:da:fd:ce:
         29:52:10:d6:d8:a2:17:69:98:e0:65:e1:4d:87:8c:b4:19:ed:
         bf:de:d6:0d:95:90:34:79:78:40:b8:df:0e:e3:2f:86:77:43:
         98:53:03:b0:89:dd:bc:84:d0:35:fa:a6:07:2d:2e:39:1a:e4:
         0a:84:c9:f9:2b:51:0c:53:4c:8d:50:5a:48:d8:71:ad:fa:1d:
         c3:6d:f6:62:39:42:19:02:ce:d8:df:94:31:32:e8:9d:44:91:
         51:4f:60:49:28:db:9a:5b:f2:a1:e0:58:0a:11:4f:3a:59:c3:
         92:f5:9f:93:4d:7c:e4:b2:39:12:34:ce:f7:60:07:50:5a:1e:
         96:14:31:80:6a:41:61:50:b7:97:7c:59:c8:90:c4:f2:1d:90:
         5e:00:46:29:a5:da:ae:68:6b:41:a8:f4:ef:6e:32:76:5f:0b:
         35:f3:1c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:07:37 2026 by rpki-client