Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.mft
File:                     dEjHMKEFTX8eKdwRlRWF3RHeF4c.mft (raw, json)
Hash identifier:          YbiDbz5ydCjCla0UJKrHlxG6mVfelyr6ZI8H0ZD31nY=
Subject key identifier:   79:A2:18:C9:70:53:0A:2F:79:C6:3E:6F:37:42:AF:E8:AE:59:A2:3B
Authority key identifier: 74:48:C7:30:A1:05:4D:7F:1E:29:DC:11:95:15:85:DD:11:DE:17:87
Certificate issuer:       /CN=A915A0F9/serialNumber=7448C730A1054D7F1E29DC11951585DD11DE1787
Certificate serial:       0663
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEjHMKEFTX8eKdwRlRWF3RHeF4c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.mft
Manifest number:          064B
Signing time:             Tue 24 Mar 2026 22:26:40 +0000
Manifest this update:     Tue 24 Mar 2026 22:26:40 +0000
Manifest next update:     Tue 31 Mar 2026 22:26:40 +0000
Files and hashes:         1: dEjHMKEFTX8eKdwRlRWF3RHeF4c.crl (hash: Wac6f2GKaSCHRna2WkfjUhc9nxM9H0lceG2DctEvT3o=)
                          2: 77A20CBE5BDC11F0BE617A76C4F9AE02.roa (hash: YSObMkEBXS6AGJ0rnW9kv0JoHduUwC+6vftJJjp6P4c=)
                          3: B00A7E6A5BDC11F098C0ED78C4F9AE02.roa (hash: f58Ln8YgOMKXm+UFFvevk+7pdNWbPHPbGAfBZzTmoKo=)
                          4: C2B9483E5BDC11F0AA574A7AC4F9AE02.roa (hash: rn2+8W21dCl6lnIgpMbqK+DXRVpz1iSyuq7a+y1/Ps0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.crl
                          rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEjHMKEFTX8eKdwRlRWF3RHeF4c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1635 (0x663)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0F9, serialNumber=7448C730A1054D7F1E29DC11951585DD11DE1787
        Validity
            Not Before: Mar 24 22:26:40 2026 GMT
            Not After : Mar 31 22:26:40 2026 GMT
        Subject: CN=69c30fa0-59d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4a:34:ef:cb:4e:1c:aa:08:39:31:da:80:6d:
                    2d:5c:51:10:a3:04:26:ad:0c:65:fe:ed:e0:f7:0f:
                    9a:7a:f9:f8:e6:34:b8:61:c2:68:91:33:59:8e:6a:
                    07:fa:40:13:75:90:47:af:cc:41:96:82:f7:bd:b2:
                    12:63:2d:bc:dd:ab:3f:04:13:57:33:c3:74:4a:1c:
                    8d:c4:a9:ca:00:fb:de:f5:ed:6b:52:10:da:db:02:
                    73:00:ad:aa:77:0e:5d:81:ca:07:b7:7e:35:eb:15:
                    b8:dd:14:2f:69:94:86:a5:59:2a:93:e6:24:dd:04:
                    03:3c:27:f0:fd:80:04:5a:83:3c:25:1a:ec:f7:8e:
                    32:24:da:9a:19:0d:12:72:18:df:98:67:4d:a9:a4:
                    4d:a3:3a:f9:38:54:8d:b0:af:0c:4e:03:65:dc:8d:
                    27:74:c3:a1:11:7d:fe:c8:ca:73:69:29:e9:40:26:
                    61:99:4a:58:93:8c:6a:8a:f1:b4:4d:32:b7:d3:e2:
                    f7:f6:47:9a:88:fd:78:f8:e5:f2:f8:db:84:13:f7:
                    0b:88:be:3f:7d:9a:b3:4e:a1:00:fa:39:72:85:af:
                    4b:89:10:ac:aa:86:c6:4a:14:5f:48:8c:00:6d:36:
                    3d:26:72:68:3a:13:e7:36:30:e4:ca:7a:fa:6a:24:
                    8a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A2:18:C9:70:53:0A:2F:79:C6:3E:6F:37:42:AF:E8:AE:59:A2:3B
            X509v3 Authority Key Identifier:
                keyid:74:48:C7:30:A1:05:4D:7F:1E:29:DC:11:95:15:85:DD:11:DE:17:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEjHMKEFTX8eKdwRlRWF3RHeF4c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:2d:d1:d7:b6:2e:bf:f9:26:51:22:dd:ec:2f:8d:9a:4f:d5:
         7b:df:d4:10:fc:1e:de:e3:05:7f:ee:88:00:ae:cf:ed:74:9e:
         b8:5b:4d:0e:a0:cc:6b:65:70:dd:25:96:bb:06:3b:5e:d0:d1:
         48:5a:bc:e8:19:0d:49:ab:b3:62:5c:6e:97:aa:77:00:37:93:
         1b:a8:de:c6:da:b4:69:2c:48:c6:9f:b2:72:cf:b4:40:0e:34:
         8e:1e:05:bd:67:41:4e:84:2a:a7:19:bc:b7:06:f9:1c:8c:89:
         4d:78:95:78:8b:83:a0:4a:6d:a3:b2:66:a0:08:b4:46:9e:95:
         e8:62:4b:86:f7:d0:bf:be:e3:72:11:73:bf:b5:32:59:3d:ca:
         b2:d9:01:59:9c:51:53:ea:1c:b7:69:56:d9:04:5f:5d:05:8c:
         de:e0:ab:9e:ab:28:fa:af:a8:84:86:94:65:f5:15:15:21:71:
         0b:ed:31:f8:65:05:35:e5:af:7c:5f:bd:9a:e7:48:c1:e0:d3:
         a0:2e:c2:66:e6:1b:40:99:9d:48:92:ae:97:5a:fd:82:ad:85:
         21:0f:83:8d:24:fa:c8:ed:a8:e0:e0:1e:89:85:f0:f2:97:94:
         81:4c:76:46:74:a1:cf:80:97:ce:c0:e2:21:53:3a:de:01:74:
         5c:19:a4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:15:47 2026 by rpki-client