Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/DsmozWa374HQeaCEKyY5Zf50-NA.mft
File:                     DsmozWa374HQeaCEKyY5Zf50-NA.mft (raw, json)
Hash identifier:          cc3LbfEzjCPb6eiYqlGD/u+5Kd9RPUCqqr3zvlcaT20=
Subject key identifier:   FE:7A:19:18:98:A1:C2:B0:6A:5A:DF:AB:61:9F:53:68:8A:C6:88:48
Authority key identifier: 0E:C9:A8:CD:66:B7:EF:81:D0:79:A0:84:2B:26:39:65:FE:74:F8:D0
Certificate issuer:       /CN=A91614E3/serialNumber=0EC9A8CD66B7EF81D079A0842B263965FE74F8D0
Certificate serial:       0F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DsmozWa374HQeaCEKyY5Zf50-NA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/DsmozWa374HQeaCEKyY5Zf50-NA.mft
Manifest number:          0D
Signing time:             Mon 11 May 2026 09:19:45 +0000
Manifest this update:     Mon 11 May 2026 09:19:45 +0000
Manifest next update:     Mon 18 May 2026 09:19:45 +0000
Files and hashes:         1: DsmozWa374HQeaCEKyY5Zf50-NA.crl (hash: 09piqHGXpNq2xAl960XRnj4NmasI4rOAwgNTRdfMe48=)
                          2: 5A98E30A42CB11F1992134BCC5833773.roa (hash: 1GzxVrWXwmq6D+IOsW7P45S3VHfpVtuLEfB3vhPmPmc=)
                          3: FE7346D642CC11F1A52BA276C6833773.roa (hash: U80wdjKrFdkd4k7mDaI1dER/kEU7/YWh7Nwr30a+PjI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/DsmozWa374HQeaCEKyY5Zf50-NA.crl
                          rsync://rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/DsmozWa374HQeaCEKyY5Zf50-NA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DsmozWa374HQeaCEKyY5Zf50-NA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 09:19:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91614E3, serialNumber=0EC9A8CD66B7EF81D079A0842B263965FE74F8D0
        Validity
            Not Before: May 11 09:19:45 2026 GMT
            Not After : May 18 09:19:45 2026 GMT
        Subject: CN=6a019f31-a060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ea:20:e5:03:ba:fa:2c:cf:29:5b:5b:fc:e9:
                    81:10:1e:cf:9f:f8:78:c1:24:54:dc:97:36:74:e5:
                    64:c6:e7:01:f7:61:11:2b:64:0c:ce:ed:8e:e8:e7:
                    1f:a4:3e:cd:87:24:80:51:f6:2b:47:b6:d5:d8:b1:
                    d3:17:5e:87:b5:36:4f:55:3b:a5:2d:ab:71:ce:98:
                    43:dd:a3:bf:9e:d2:0a:75:d4:77:f5:ee:8a:9f:13:
                    30:00:1d:6a:dc:f3:02:1c:04:14:66:2c:f8:c1:90:
                    fe:b7:be:ee:2b:41:5a:90:0a:0a:b2:30:db:a9:d3:
                    1d:8d:b5:4f:c6:df:86:e2:0c:90:80:a0:d5:98:6f:
                    56:01:3c:35:a5:a1:5c:ec:de:23:5a:b3:d5:27:13:
                    e2:33:71:d1:59:ff:06:f9:8e:df:5c:b4:7a:c4:7f:
                    4c:16:46:3c:cc:dd:26:c4:fe:25:78:bc:6b:74:12:
                    c6:53:3b:e0:f4:a4:23:ff:21:70:c7:bb:f3:b6:b1:
                    91:20:96:e1:ed:cf:61:50:14:2d:df:22:6f:33:0e:
                    6c:6b:8b:20:0e:e7:77:56:d3:3c:66:f9:d0:15:46:
                    e2:12:9e:1e:1b:bb:75:7d:74:68:ae:8e:29:91:9a:
                    ad:c9:db:c7:4c:55:d3:bc:e9:07:81:ea:df:61:8a:
                    49:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:7A:19:18:98:A1:C2:B0:6A:5A:DF:AB:61:9F:53:68:8A:C6:88:48
            X509v3 Authority Key Identifier:
                keyid:0E:C9:A8:CD:66:B7:EF:81:D0:79:A0:84:2B:26:39:65:FE:74:F8:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/DsmozWa374HQeaCEKyY5Zf50-NA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DsmozWa374HQeaCEKyY5Zf50-NA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/DsmozWa374HQeaCEKyY5Zf50-NA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:d0:83:1b:32:31:36:9c:ec:35:54:7e:80:e1:1c:dc:93:85:
         82:46:7b:60:f5:61:d5:a7:cc:57:49:32:34:c3:85:29:e4:fe:
         3c:a5:0c:41:12:b1:58:c3:22:f9:1b:0c:f5:9c:95:c8:7d:47:
         c9:20:f8:95:ac:bf:76:0d:fe:7c:da:f5:2c:5f:19:7d:a6:94:
         42:43:21:8d:0e:6f:9b:ff:d3:96:63:38:12:4f:93:4a:f9:c0:
         36:5a:93:1a:5d:77:32:46:65:9f:71:5b:59:07:84:8e:d3:3c:
         98:4d:4c:13:d5:70:b3:6c:55:f6:4b:3c:23:c4:57:46:fb:ba:
         61:29:15:bb:51:3a:30:02:fc:83:36:17:b3:9e:22:e5:f4:cb:
         6f:e3:c6:9e:45:fd:47:10:f8:92:e5:e5:ae:d1:51:eb:ec:53:
         80:57:01:49:84:1f:da:95:b4:95:76:ea:3b:72:00:48:1b:61:
         5c:a9:e3:38:07:54:8c:59:59:bb:bf:65:71:34:8f:fa:d9:46:
         fc:d5:e2:26:54:f8:0f:bc:b5:08:7a:0b:e5:eb:a1:1e:e9:16:
         f5:d2:35:38:2a:60:8e:dc:5b:29:25:bf:1b:22:fc:58:84:7e:
         4d:71:65:3f:c3:04:95:62:d9:6e:1a:0d:c6:88:8d:22:af:7d:
         92:74:a7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:36:33 2026 by rpki-client