Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.mft
File:                     I_DaaXyqHZJHpmnfh4G6MBN9elk.mft (raw, json)
Hash identifier:          k/5woIkyo/0lbt0z1kQQr3Rt2pZeogZPauTbRw2p560=
Subject key identifier:   DA:DF:10:C5:4E:04:8F:3D:A6:D4:4B:B3:D0:28:62:AF:47:63:B2:55
Authority key identifier: 23:F0:DA:69:7C:AA:1D:92:47:A6:69:DF:87:81:BA:30:13:7D:7A:59
Certificate issuer:       /CN=A915EBC8/serialNumber=23F0DA697CAA1D9247A669DF8781BA30137D7A59
Certificate serial:       0228
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_DaaXyqHZJHpmnfh4G6MBN9elk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.mft
Manifest number:          0222
Signing time:             Wed 25 Mar 2026 02:10:19 +0000
Manifest this update:     Wed 25 Mar 2026 02:10:18 +0000
Manifest next update:     Wed 01 Apr 2026 02:10:18 +0000
Files and hashes:         1: I_DaaXyqHZJHpmnfh4G6MBN9elk.crl (hash: qOicru3XFdRlXgh9eB/Y8cWzSokrAzF/8E2OQDNoets=)
                          2: C662FB52399511EFA72CB43DC4F9AE02.roa (hash: Ff1Uf+eUposwwHM44+GIll0sBwmQpafQVQxIknpsjAI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.crl
                          rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_DaaXyqHZJHpmnfh4G6MBN9elk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:10:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 552 (0x228)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EBC8, serialNumber=23F0DA697CAA1D9247A669DF8781BA30137D7A59
        Validity
            Not Before: Mar 25 02:10:18 2026 GMT
            Not After : Apr  1 02:10:18 2026 GMT
        Subject: CN=69c3440a-4bb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8a:ff:de:b8:97:2f:05:c4:44:a2:8e:f9:f3:
                    e4:fe:c6:ee:65:82:ba:43:06:17:33:4d:4c:67:5a:
                    d1:f2:f7:5d:8e:05:cb:49:3a:46:c6:a8:48:22:95:
                    82:77:01:68:d6:76:9d:57:8d:34:8f:80:1a:9b:9c:
                    9a:58:4f:ef:2d:d3:81:5a:f6:ee:e9:5b:c0:7a:45:
                    07:df:eb:1d:31:e4:dd:62:40:c6:63:27:7b:76:9b:
                    fe:c0:70:a8:89:54:b8:30:00:86:1e:21:00:36:87:
                    d7:b5:c3:aa:6b:dc:42:60:63:63:ad:db:17:8e:24:
                    f1:fa:35:43:dc:27:71:39:d1:91:4f:de:ab:e3:fc:
                    ae:dc:32:26:9d:11:41:c8:db:df:a7:99:8f:05:7b:
                    44:68:66:9b:75:2c:87:63:89:06:a3:77:be:8b:f4:
                    09:4c:c9:a1:15:7b:87:6a:0c:60:e7:b2:7d:a7:b1:
                    4a:0c:6a:21:3b:9d:7a:f0:35:57:02:e6:74:97:2e:
                    c5:2b:3e:51:3a:0e:0f:9b:f8:29:18:c2:63:94:58:
                    b1:d5:c3:eb:1b:95:8e:70:16:18:57:ef:83:61:b3:
                    cb:b5:7c:be:ac:19:2c:79:45:74:40:33:12:9b:c4:
                    aa:ca:9a:8e:80:6e:3e:87:32:bb:15:e9:e8:1a:5f:
                    68:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:DF:10:C5:4E:04:8F:3D:A6:D4:4B:B3:D0:28:62:AF:47:63:B2:55
            X509v3 Authority Key Identifier:
                keyid:23:F0:DA:69:7C:AA:1D:92:47:A6:69:DF:87:81:BA:30:13:7D:7A:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_DaaXyqHZJHpmnfh4G6MBN9elk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:a2:9d:71:ba:d0:18:47:36:cd:f1:9d:46:c4:b2:1c:4b:2a:
         33:ce:7e:6d:82:81:b5:69:0b:51:17:a8:c4:47:46:78:4a:fe:
         ca:b0:d0:e2:2d:17:4a:d2:a9:f7:70:fb:47:90:7a:f2:a3:bc:
         b6:20:00:51:af:5e:47:7a:15:69:3f:e6:37:49:41:18:ba:59:
         a1:b5:4f:28:5e:0e:08:c8:1d:bd:e3:1d:3d:de:df:9b:66:20:
         52:d1:ea:3d:93:c7:1c:0c:34:fe:10:5e:9e:f3:b2:24:7c:5c:
         f1:d4:69:58:76:13:ee:b0:3f:62:23:53:b1:3f:55:53:ae:9f:
         8d:e3:66:4e:01:cc:28:c7:a6:63:e6:f2:14:59:c0:90:b1:64:
         00:ae:7d:4c:e3:8d:b6:d0:82:ae:72:14:2b:bd:54:92:53:9e:
         ee:48:84:8d:64:07:44:34:b9:32:af:3f:5f:b3:30:9b:05:96:
         28:66:bd:0d:b4:13:f6:dd:c8:49:82:81:dd:ca:f0:ca:99:ba:
         9a:2f:0d:3d:65:ea:43:49:2b:c4:43:d1:ed:f4:fe:35:85:3e:
         72:95:7a:e5:94:7a:a7:05:0c:4d:cd:4c:89:ad:a9:b2:f8:e1:
         a5:ce:72:07:63:76:b3:d2:32:65:b6:e0:94:1d:7d:94:89:6e:
         48:c2:7c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:07:25 2026 by rpki-client