Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/DvqgEPOwbVMhkO827SAodPggF8k.mft
File:                     DvqgEPOwbVMhkO827SAodPggF8k.mft (raw, json)
Hash identifier:          JyEeZdE5zk10ONFspfy1SwPRpMVbK2XbKS07IN43wzk=
Subject key identifier:   0F:F8:22:47:AB:E1:9C:25:F3:A6:DB:3A:87:87:53:09:80:2C:FA:27
Authority key identifier: 0E:FA:A0:10:F3:B0:6D:53:21:90:EF:36:ED:20:28:74:F8:20:17:C9
Certificate issuer:       /CN=A9167F0C/serialNumber=0EFAA010F3B06D532190EF36ED202874F82017C9
Certificate serial:       0FD7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DvqgEPOwbVMhkO827SAodPggF8k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/DvqgEPOwbVMhkO827SAodPggF8k.mft
Manifest number:          1A68
Signing time:             Thu 26 Mar 2026 17:26:59 +0000
Manifest this update:     Thu 26 Mar 2026 17:26:58 +0000
Manifest next update:     Thu 02 Apr 2026 17:26:58 +0000
Files and hashes:         1: DvqgEPOwbVMhkO827SAodPggF8k.crl (hash: DUetg/xyikElYeU6m59K8n7KLef+721SORZu2j5S07s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/DvqgEPOwbVMhkO827SAodPggF8k.crl
                          rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/DvqgEPOwbVMhkO827SAodPggF8k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DvqgEPOwbVMhkO827SAodPggF8k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 17:26:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4055 (0xfd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167F0C, serialNumber=0EFAA010F3B06D532190EF36ED202874F82017C9
        Validity
            Not Before: Mar 26 17:26:58 2026 GMT
            Not After : Apr  2 17:26:58 2026 GMT
        Subject: CN=69c56c62-ac94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5e:49:a8:82:9f:ba:cc:a1:8a:1d:97:cf:da:
                    b8:d7:ef:28:09:a7:31:75:9e:ce:51:23:0e:5b:93:
                    bc:a5:26:d1:29:8e:8c:e9:d0:01:a4:6b:a1:b2:2b:
                    a2:0a:0d:85:5a:26:fe:ab:1d:28:2f:82:67:91:d5:
                    15:49:e0:30:ea:41:0d:6b:8f:aa:0b:b6:27:e6:f2:
                    fa:2b:9c:6f:05:6d:9b:53:8e:98:8d:c2:8d:2e:6c:
                    9c:46:fa:80:50:12:df:1f:9f:28:5e:d8:ab:f5:92:
                    f0:2f:21:21:c8:b7:b1:37:80:c2:78:94:07:73:b9:
                    66:b6:9b:d0:99:2e:ed:93:da:ea:39:b2:fd:9f:79:
                    be:c8:0c:31:5a:3b:57:4f:dd:0f:a6:8d:4c:6a:10:
                    43:f5:5b:46:71:5d:b6:71:8e:c6:b2:71:72:0c:cb:
                    9a:55:79:15:ee:ca:61:dd:50:9b:08:46:f4:17:88:
                    b6:c3:d8:da:59:cd:30:79:e5:f2:fe:9d:fe:f8:5b:
                    11:db:2a:c9:69:94:34:3c:9f:96:7c:4b:2a:cf:5a:
                    db:b2:60:2f:aa:c7:d2:34:d1:9d:1d:d7:09:3c:69:
                    17:29:f0:6a:8e:a0:2c:7e:4b:34:18:46:ba:cb:e7:
                    e4:bc:bc:f0:79:ae:ea:0b:af:45:db:52:19:c3:ff:
                    d0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F8:22:47:AB:E1:9C:25:F3:A6:DB:3A:87:87:53:09:80:2C:FA:27
            X509v3 Authority Key Identifier:
                keyid:0E:FA:A0:10:F3:B0:6D:53:21:90:EF:36:ED:20:28:74:F8:20:17:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/DvqgEPOwbVMhkO827SAodPggF8k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DvqgEPOwbVMhkO827SAodPggF8k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/DvqgEPOwbVMhkO827SAodPggF8k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:3a:40:37:ca:c6:25:f2:f8:00:65:b5:67:de:26:7e:e2:20:
         8d:11:f0:36:dd:0f:d5:81:19:ed:95:a5:19:6a:24:cd:c5:a5:
         10:0c:73:24:dc:ed:fb:73:c6:1a:b1:24:28:0a:09:61:85:21:
         61:2e:b3:7a:d2:11:18:51:2d:cf:de:96:31:0b:60:ed:d7:40:
         28:49:c1:d2:5c:91:e8:53:35:f7:62:a3:2c:28:4b:a6:80:60:
         db:4b:5c:1e:84:37:15:b3:50:f2:18:07:f3:68:be:61:6a:4d:
         ef:03:e5:af:9e:84:b5:a5:fc:d0:89:b6:b6:4f:f9:25:64:37:
         f3:4c:d5:49:3f:92:e6:0c:1f:f3:69:92:81:7d:8e:42:ee:36:
         b9:7e:97:92:41:cb:6d:f3:04:c5:98:6d:3f:4f:29:5b:0f:c5:
         63:e4:df:92:af:be:bc:60:5a:64:60:ba:9a:2e:25:fc:6d:56:
         3c:dd:a6:a1:1b:60:44:58:db:af:6e:32:fa:ff:ce:78:80:70:
         69:5f:01:0c:d1:19:44:9b:8d:e7:91:da:c9:72:a4:5d:1b:a5:
         a4:75:fb:de:c7:00:e3:ec:d7:e2:e2:11:2d:11:1a:5d:19:eb:
         11:45:8d:54:f8:01:9d:c6:12:41:d0:9e:19:67:51:9b:93:ba:
         9d:85:75:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 14:15:43 2026 by rpki-client