Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft
File:                     dKGUOXIqgzAE05VKV4ToXm6ZvME.mft (raw, json)
Hash identifier:          eA+c8Jtjx56jcllV90WW0SgXEaxcsX7CXERUP83jkyA=
Subject key identifier:   19:04:7E:57:7C:1B:8A:F9:70:34:E7:8F:93:D8:72:7C:E6:D4:91:8A
Authority key identifier: 74:A1:94:39:72:2A:83:30:04:D3:95:4A:57:84:E8:5E:6E:99:BC:C1
Certificate issuer:       /CN=A914454E/serialNumber=74A19439722A833004D3954A5784E85E6E99BCC1
Certificate serial:       0917
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dKGUOXIqgzAE05VKV4ToXm6ZvME.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft
Manifest number:          0917
Signing time:             Tue 12 May 2026 20:18:44 +0000
Manifest this update:     Tue 12 May 2026 20:18:43 +0000
Manifest next update:     Tue 19 May 2026 20:18:43 +0000
Files and hashes:         1: dKGUOXIqgzAE05VKV4ToXm6ZvME.crl (hash: bnbcAJEJrH3WnFfliCW2DbtKL0ziVJdmaJQd/dUUxqM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.crl
                          rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dKGUOXIqgzAE05VKV4ToXm6ZvME.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:18:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2327 (0x917)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914454E, serialNumber=74A19439722A833004D3954A5784E85E6E99BCC1
        Validity
            Not Before: May 12 20:18:43 2026 GMT
            Not After : May 19 20:18:43 2026 GMT
        Subject: CN=6a038b24-fdc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c1:cf:e3:40:2f:68:29:a8:fe:a1:8a:ee:7e:
                    33:90:f4:77:10:62:51:33:51:33:61:3c:58:37:2e:
                    04:a4:83:bb:37:0b:ef:b7:46:b5:fe:8b:62:0d:77:
                    b6:9c:6a:df:67:c7:c1:a2:07:f3:d2:39:6d:24:01:
                    77:4f:20:04:56:af:7c:a2:e3:dd:d0:93:b0:ae:d9:
                    0f:ad:cb:ba:20:24:20:b7:7e:cb:33:49:15:c6:f6:
                    4e:6c:4c:0d:93:88:5d:6e:6d:35:5e:42:71:9c:c5:
                    26:57:a2:f7:bf:57:c0:05:6c:69:92:c4:4b:1d:19:
                    01:ea:29:e0:dc:ae:cc:28:9a:8b:5e:1a:70:ef:af:
                    9b:a8:7d:57:b7:1e:38:66:a5:51:3c:2d:62:dd:9e:
                    7e:6c:88:ce:4f:aa:51:ab:c3:ed:4a:73:06:6f:96:
                    d3:7a:9f:43:de:77:64:a5:4d:08:d0:17:03:84:06:
                    13:40:42:f3:b6:7a:95:5a:32:20:55:c9:39:b4:2a:
                    dd:b9:b9:36:dc:c5:c6:f6:79:82:b1:0c:e3:00:65:
                    bf:3c:23:7a:00:c1:ff:0f:4a:0f:61:32:5b:12:e5:
                    fd:4f:1c:d0:61:80:dd:60:79:6f:0b:ba:63:50:c7:
                    97:53:ef:7e:00:4d:c9:ef:c7:89:4a:98:36:d1:1e:
                    24:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:04:7E:57:7C:1B:8A:F9:70:34:E7:8F:93:D8:72:7C:E6:D4:91:8A
            X509v3 Authority Key Identifier:
                keyid:74:A1:94:39:72:2A:83:30:04:D3:95:4A:57:84:E8:5E:6E:99:BC:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dKGUOXIqgzAE05VKV4ToXm6ZvME.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:6e:e1:35:8d:b2:01:de:e4:c7:6a:71:d8:f6:6a:ff:f9:80:
         49:ab:a7:72:cd:af:9c:b1:9d:2e:35:e4:25:17:6e:d2:3a:38:
         42:b3:b7:9c:d3:89:26:c0:f8:3b:28:39:57:db:c3:01:0f:2b:
         f4:5f:bd:d5:e0:ee:63:c2:87:e2:3b:24:27:87:7e:e3:d2:5e:
         36:a1:ae:f7:9f:40:44:4e:59:83:eb:4a:5d:fa:dc:cb:3f:f0:
         9f:93:61:1d:9b:1d:6a:da:41:d4:07:e1:3f:f3:39:7e:d0:11:
         07:95:c3:5d:17:76:d3:6d:7f:c3:5a:84:70:a1:6a:37:e7:f3:
         84:c0:98:f2:0a:91:06:df:1e:7a:9b:6e:ee:cc:f6:cf:4b:88:
         c3:6b:7b:dd:09:91:f5:b4:31:71:d8:5e:d8:f6:5f:e3:c9:0f:
         63:04:6e:b5:14:23:08:7f:6f:5f:83:a7:e4:d0:5b:02:1a:ea:
         1a:09:58:9e:ab:8d:c4:19:f3:cb:25:02:d6:3c:27:82:fa:77:
         92:3d:fa:6c:c4:0f:6b:a6:6b:24:75:ba:20:a0:97:47:e9:15:
         65:f2:4d:00:18:00:84:75:a2:6c:80:bc:c2:1c:f4:e7:97:35:
         7e:2d:8f:e6:53:96:82:7b:28:2d:5f:db:5a:f0:98:93:5a:6a:
         fb:9e:75:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:26:34 2026 by rpki-client