Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft
File:                     dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft (raw, json)
Hash identifier:          IwWK+rGxZ54YDW0Dh/Hj9SewJXYSkCJURgDkvhUgGJg=
Subject key identifier:   E5:CF:58:71:F6:B6:7F:E4:52:EA:99:5B:B1:D6:B4:EE:5D:49:9E:EF
Authority key identifier: 76:D6:FA:7C:F9:BF:8E:41:5F:2F:42:61:9B:80:42:88:76:3E:67:A2
Certificate issuer:       /CN=A914C651/serialNumber=76D6FA7CF9BF8E415F2F42619B804288763E67A2
Certificate serial:       01B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft
Manifest number:          01A7
Signing time:             Mon 11 May 2026 04:14:57 +0000
Manifest this update:     Mon 11 May 2026 04:14:57 +0000
Manifest next update:     Mon 18 May 2026 04:14:57 +0000
Files and hashes:         1: dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl (hash: y4AMsdcZJ1gTUpmlR8xNj0tL6vUcgIgx4ccSh6J/Rvg=)
                          2: E6BD4CAECEEC11EEB0E9E665C4F9AE02.roa (hash: nqdMcW1cqYt2/q2Bt8CB/e8QcYBAYu8tfj1XxULchaE=)
                          3: 1577D3D4CEED11EEAD68A169C4F9AE02.roa (hash: AQI2bwJCuqKXIuSLIUCmPdyM40gof3FT5HfSxWUNveA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl
                          rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 04:14:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 439 (0x1b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C651, serialNumber=76D6FA7CF9BF8E415F2F42619B804288763E67A2
        Validity
            Not Before: May 11 04:14:57 2026 GMT
            Not After : May 18 04:14:57 2026 GMT
        Subject: CN=6a0157c1-f886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9e:60:98:d9:ee:10:74:f4:c1:63:43:02:e9:
                    85:b7:d7:69:d6:a7:c5:73:f4:3c:c3:8f:5a:85:9a:
                    6b:41:71:6c:d0:37:ad:87:76:29:4b:9e:28:18:04:
                    27:7e:c7:34:cf:2c:75:be:8f:17:0a:ee:8d:92:40:
                    5e:e7:c4:e7:a8:2f:d8:74:7c:9e:cd:e8:3b:65:c0:
                    6e:0a:2f:b1:31:da:9d:17:55:d7:97:e3:33:7d:c9:
                    ae:c4:27:84:fc:b7:c4:b7:ab:57:d4:75:72:c3:aa:
                    bb:cc:98:3a:d1:53:6d:41:50:50:6d:70:da:1c:93:
                    16:fe:97:f2:2a:3a:88:fe:d0:c5:96:97:b4:99:48:
                    43:12:3f:8d:5d:82:0b:2d:80:0e:bf:9f:36:b4:d1:
                    5c:3b:c8:da:07:f1:dd:df:15:3d:2d:39:fd:0d:df:
                    4a:3b:c9:07:24:d2:ef:a3:d2:57:4d:23:a6:a7:4b:
                    c2:c6:27:18:7e:f5:5e:db:61:f3:30:48:2c:e1:a2:
                    c6:66:e1:19:d6:ec:b2:17:94:56:6d:28:59:6c:5c:
                    00:9c:11:bd:cc:84:c1:35:b0:4f:00:34:f3:87:5f:
                    18:a8:f7:87:73:1a:d2:e5:b6:10:32:47:ec:8e:19:
                    b7:a7:ec:34:b8:c3:90:c8:4f:90:5d:3d:da:60:86:
                    f0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:CF:58:71:F6:B6:7F:E4:52:EA:99:5B:B1:D6:B4:EE:5D:49:9E:EF
            X509v3 Authority Key Identifier:
                keyid:76:D6:FA:7C:F9:BF:8E:41:5F:2F:42:61:9B:80:42:88:76:3E:67:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:34:9e:d2:76:2f:9e:ca:b1:51:3b:60:de:4c:39:2e:3b:a9:
         f6:ec:c6:45:61:d0:da:ba:6e:19:72:57:9b:4c:59:da:70:a4:
         73:1c:c9:86:54:3e:d6:87:12:32:03:8e:68:65:eb:2c:ae:50:
         84:24:90:31:f8:41:7c:4f:d4:98:81:8f:fc:7e:84:40:3d:63:
         f0:53:8c:5d:e2:a5:22:14:4f:d6:f3:34:3b:cd:26:f8:4f:bd:
         49:fb:6c:62:b8:f8:43:f0:b5:99:9b:9c:b1:44:0c:62:7f:46:
         7f:e4:cd:e3:24:3e:57:64:e4:49:c4:da:ea:97:55:31:1b:d6:
         2d:53:78:86:17:22:56:2e:84:fe:0d:87:fc:0f:17:74:87:8e:
         5f:dc:13:bf:25:a9:16:e3:a6:5b:46:a8:e6:b2:0a:f2:fb:62:
         8f:70:d9:33:aa:1a:3d:3e:4a:5c:37:e5:84:41:dc:d5:96:f1:
         b8:ae:d9:fe:61:73:33:bb:9d:dc:53:10:1b:97:b1:b5:42:96:
         53:f8:5e:c6:62:8c:15:9a:31:48:9b:57:34:1a:34:33:c4:99:
         88:c1:75:8e:85:d9:71:40:b2:bb:83:70:a5:82:21:25:68:01:
         b1:0c:3d:cc:94:aa:ad:ef:c6:49:c7:60:65:13:96:03:df:f2:
         55:0e:e3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:13:10 2026 by rpki-client