Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.mft
File:                     DAUkO371VhHkCk279_5-kSCSplI.mft (raw, json)
Hash identifier:          AjqYlWpv/1GxP0DuI3FgIJtMoXXShbDJEfVf2UB/wnU=
Subject key identifier:   67:B6:2D:08:CB:2F:59:FB:69:86:38:92:62:4A:5C:A8:9B:2C:D6:C3
Authority key identifier: 0C:05:24:3B:7E:F5:56:11:E4:0A:4D:BB:F7:FE:7E:91:20:92:A6:52
Certificate issuer:       /CN=A916A8E2/serialNumber=0C05243B7EF55611E40A4DBBF7FE7E912092A652
Certificate serial:       0134
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAUkO371VhHkCk279_5-kSCSplI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.mft
Manifest number:          0128
Signing time:             Fri 27 Mar 2026 05:12:35 +0000
Manifest this update:     Fri 27 Mar 2026 05:12:35 +0000
Manifest next update:     Fri 03 Apr 2026 05:12:35 +0000
Files and hashes:         1: DAUkO371VhHkCk279_5-kSCSplI.crl (hash: vCRa1ZVl86MVwK/S7DVZhlI9yBrjMRd2hU7Em0nNwTQ=)
                          2: 04679AF66F3411EF833F4C23C4F9AE02.roa (hash: 5qrFUmAuxor0241J4ycCeOd0FvlMJ2jn2CaFq+L9oWc=)
                          3: 04EFECDA6F3411EF833F4C23C4F9AE02.roa (hash: pcNbG6mwMq3QyGse4iuZOM7V06FeUq9yS12qQm/8IJA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.crl
                          rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAUkO371VhHkCk279_5-kSCSplI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 05:12:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 308 (0x134)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A8E2, serialNumber=0C05243B7EF55611E40A4DBBF7FE7E912092A652
        Validity
            Not Before: Mar 27 05:12:35 2026 GMT
            Not After : Apr  3 05:12:35 2026 GMT
        Subject: CN=69c611c3-2eed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f0:2c:39:aa:6f:98:29:9b:5d:61:d8:0a:a0:
                    0a:f2:f7:c8:21:86:c2:cb:22:8c:b8:dc:31:e3:ab:
                    40:77:d2:25:a8:e8:6d:4d:75:b6:c9:b0:e3:d7:af:
                    b2:fe:cf:62:5b:57:1d:7e:a2:fd:42:4a:07:51:b3:
                    41:82:9c:a8:c9:d0:0b:43:27:46:e4:fa:e5:7c:4f:
                    dd:8a:db:76:23:f9:65:ea:3c:86:2b:55:5c:88:54:
                    bf:a9:ea:00:d2:83:6f:83:6e:06:5f:b0:d9:fe:45:
                    49:ff:7c:dd:c9:1e:a7:41:8a:5c:2d:d2:9e:3a:79:
                    7e:19:11:88:de:8e:ae:14:ef:a8:61:cb:df:45:b0:
                    a4:d4:49:c1:d1:2c:79:2b:fe:28:54:14:ba:07:96:
                    cb:71:10:bf:6a:eb:2c:bf:cd:dd:dd:60:8e:2a:53:
                    68:88:e7:a9:7a:84:20:15:fb:fd:39:31:5c:90:e8:
                    e0:7f:e6:e3:b0:65:68:ef:3b:83:9e:6d:c8:30:67:
                    1e:30:90:ec:a9:53:49:70:84:61:82:10:37:60:df:
                    9c:13:df:63:99:ac:b9:89:98:89:4f:62:48:64:81:
                    20:86:6f:a0:24:a8:1f:0b:d9:15:93:20:32:84:ea:
                    26:86:cc:89:a0:f9:8a:67:11:3a:bf:50:91:0d:24:
                    da:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B6:2D:08:CB:2F:59:FB:69:86:38:92:62:4A:5C:A8:9B:2C:D6:C3
            X509v3 Authority Key Identifier:
                keyid:0C:05:24:3B:7E:F5:56:11:E4:0A:4D:BB:F7:FE:7E:91:20:92:A6:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAUkO371VhHkCk279_5-kSCSplI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:68:2d:2e:5c:00:0a:18:5d:9c:54:c9:6c:70:3a:38:3b:f1:
         6b:88:e0:16:85:d7:46:d3:43:7b:fd:e8:0a:81:c4:5f:c3:b5:
         9a:83:0c:72:e6:14:57:5a:0a:a8:ec:1d:e8:26:18:7b:1d:b5:
         57:c8:af:9e:ff:b4:83:50:52:1c:80:44:86:d3:1b:a9:b0:4b:
         27:c2:0f:ec:38:a4:7e:d5:a5:0e:9b:35:54:d9:fb:39:f5:ba:
         08:56:34:a6:c6:1e:39:70:da:73:51:4f:1d:71:68:a9:c7:29:
         7a:39:46:3c:cc:52:d2:d7:06:80:b1:47:26:b6:74:18:91:b1:
         86:43:d2:f3:38:07:47:08:31:15:c1:3e:e1:08:f0:e0:39:1d:
         02:41:30:88:d9:62:e5:9d:91:20:a8:c9:63:62:37:32:dd:82:
         b3:e8:c2:2d:3a:f1:8f:eb:52:4e:ff:c1:88:f7:32:ab:ca:ab:
         3a:ca:82:fd:e0:60:e2:d2:a8:d1:56:8a:99:7b:bf:6c:23:46:
         26:59:16:13:70:1e:43:f3:25:25:bc:f7:db:eb:4a:6d:8b:d5:
         91:e1:c0:6e:b8:94:71:35:ae:0f:9d:94:34:4c:5b:c4:ac:a7:
         66:3e:e6:8e:78:53:30:57:7b:17:f7:fb:30:a8:b9:35:1d:91:
         07:12:e5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:55 2026 by rpki-client