Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.mft
File:                     dYrCvtrcujrXOBafs4nVCLVNdL8.mft (raw, json)
Hash identifier:          ilGCzDbCLddcfLzGqJFQ/pgB40JD2B6+Fp83s9CXXvg=
Subject key identifier:   15:3E:75:44:EB:9B:72:2E:EE:DE:96:A9:BF:75:15:9B:08:5F:E0:8A
Authority key identifier: 75:8A:C2:BE:DA:DC:BA:3A:D7:38:16:9F:B3:89:D5:08:B5:4D:74:BF
Certificate issuer:       /CN=A915479A/serialNumber=758AC2BEDADCBA3AD738169FB389D508B54D74BF
Certificate serial:       D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dYrCvtrcujrXOBafs4nVCLVNdL8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.mft
Manifest number:          D5
Signing time:             Wed 25 Mar 2026 05:51:57 +0000
Manifest this update:     Wed 25 Mar 2026 05:51:57 +0000
Manifest next update:     Wed 01 Apr 2026 05:51:57 +0000
Files and hashes:         1: dYrCvtrcujrXOBafs4nVCLVNdL8.crl (hash: DdVJrG6ujc6alltJZ9PQLqfnfLD8q+8Mhk1MSIxlgrM=)
                          2: 88A1F6DEE37B11EFB4D75458C4F9AE02.roa (hash: KUeckJ0OB4byF3En5Bb4XvKyGhsmfpzHrkkfXSO7Ip0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.crl
                          rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dYrCvtrcujrXOBafs4nVCLVNdL8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:51:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 216 (0xd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915479A, serialNumber=758AC2BEDADCBA3AD738169FB389D508B54D74BF
        Validity
            Not Before: Mar 25 05:51:57 2026 GMT
            Not After : Apr  1 05:51:57 2026 GMT
        Subject: CN=69c377fd-eb04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f9:0a:ef:aa:dc:8e:6f:24:a9:a6:35:30:4c:
                    f0:8e:2e:66:73:ad:46:bd:95:16:ab:03:4b:f3:69:
                    80:9d:54:f9:fb:89:f7:16:38:11:3b:98:a3:a2:38:
                    6a:9f:75:da:fd:d8:55:23:a3:95:ba:e6:8d:0f:2e:
                    92:d6:e2:74:79:f7:10:cf:c4:81:56:5a:7c:ac:e1:
                    fa:80:d5:be:fd:ca:f7:95:63:ed:6d:92:a4:90:34:
                    6b:c7:c4:34:1f:d9:82:e6:7d:ca:35:d5:46:da:dc:
                    e7:9a:de:ab:e2:3e:f2:12:c9:b3:1e:aa:54:4a:95:
                    39:8f:2b:ef:45:39:0a:55:1f:f1:2c:de:48:bc:37:
                    ca:d7:87:81:c4:56:17:7e:97:dc:40:07:a6:c0:32:
                    c6:5e:ec:6f:e1:34:e3:e0:8f:1d:99:39:36:3d:68:
                    6d:31:d8:16:d2:b9:b9:c4:4e:ea:2a:bd:c9:f0:3b:
                    37:7c:dd:89:ac:e7:ef:9b:6b:6b:cf:82:b2:13:2d:
                    88:33:c3:32:05:86:12:bf:ae:c4:3f:7b:ca:7f:57:
                    81:e6:4e:e8:b0:48:a1:96:1a:1f:8f:a6:4c:e4:56:
                    dc:e2:30:cd:2b:d4:c4:94:ca:f0:b4:50:93:97:09:
                    d6:bb:1a:af:3e:49:2a:cf:e0:8d:18:f0:c3:74:be:
                    9c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:3E:75:44:EB:9B:72:2E:EE:DE:96:A9:BF:75:15:9B:08:5F:E0:8A
            X509v3 Authority Key Identifier:
                keyid:75:8A:C2:BE:DA:DC:BA:3A:D7:38:16:9F:B3:89:D5:08:B5:4D:74:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dYrCvtrcujrXOBafs4nVCLVNdL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e4:0d:f1:b9:9d:6a:a4:86:c1:07:6a:05:8e:ac:ad:e9:03:66:
         18:f1:65:88:90:d2:e7:92:e7:67:8c:8b:4d:00:ce:58:fc:da:
         eb:de:dc:05:7a:17:33:51:40:7b:6a:ff:c5:99:b4:0d:b8:f7:
         d4:d1:4f:5c:a7:9f:91:65:c1:ad:ac:5e:9e:eb:c2:a3:d3:d1:
         49:6d:5f:b0:f0:2d:d4:91:eb:19:b8:38:9b:4a:70:8b:f9:b5:
         e2:8e:e0:8b:2e:dd:11:f0:ec:ab:5a:c2:13:52:54:5a:63:98:
         4d:e3:6a:aa:b8:d3:7e:91:64:c8:c5:58:20:da:07:ee:2e:44:
         5a:dd:ec:bd:4d:ef:e5:79:48:10:97:d6:c9:6e:c7:2e:3c:13:
         f3:1d:31:a7:c6:54:58:87:49:6b:31:c9:12:55:55:ba:1a:97:
         e0:60:fd:47:4a:fb:c6:49:e7:23:b3:5a:60:d1:9c:3c:e1:37:
         28:f4:8f:6b:b2:45:94:77:c9:c6:bf:15:d6:cd:5a:87:41:db:
         6c:9a:3d:3d:a7:d0:42:00:ca:e9:50:43:15:b5:74:c4:66:2f:
         f4:2f:9e:4e:ec:5f:ae:c0:a1:ed:77:7b:01:d4:12:f9:e2:17:
         b5:0f:5b:b8:4a:e8:36:83:da:74:f0:ba:c6:03:54:39:9e:f4:
         9f:d7:c8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:22:59 2026 by rpki-client