Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.mft
File:                     dt6sBgRg9vilvVgpnFOryvmx01g.mft (raw, json)
Hash identifier:          ioWHO/l0DZGWFuAxa5fy+2RcOcaBSPdIsdvBmXckK8Y=
Subject key identifier:   08:9A:9A:07:B5:8F:A2:77:47:D1:FE:FB:57:84:17:3C:A0:30:1B:F3
Authority key identifier: 76:DE:AC:06:04:60:F6:F8:A5:BD:58:29:9C:53:AB:CA:F9:B1:D3:58
Certificate issuer:       /CN=A9171172/serialNumber=76DEAC060460F6F8A5BD58299C53ABCAF9B1D358
Certificate serial:       081E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dt6sBgRg9vilvVgpnFOryvmx01g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.mft
Manifest number:          080C
Signing time:             Tue 24 Mar 2026 20:52:20 +0000
Manifest this update:     Tue 24 Mar 2026 20:52:19 +0000
Manifest next update:     Tue 31 Mar 2026 20:52:19 +0000
Files and hashes:         1: dt6sBgRg9vilvVgpnFOryvmx01g.crl (hash: 4idKAgfyAmi5WPrpKxwKCaEnDjDwSmpP6kVz+pOOpqM=)
                          2: 0A94FC36198711EB80EAEF4CC4F9AE02.roa (hash: 6fP6rDBHclh/0NOHkluOXt1a6fQZ2ulzPfQPIbkh2Ik=)
                          3: 6DEC60FC198811EBAD4C384FC4F9AE02.roa (hash: RyCT9Kfh39JgpB62lsPr7X3rrbBLW034nB14BsTheqA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.crl
                          rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dt6sBgRg9vilvVgpnFOryvmx01g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:52:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2078 (0x81e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171172, serialNumber=76DEAC060460F6F8A5BD58299C53ABCAF9B1D358
        Validity
            Not Before: Mar 24 20:52:19 2026 GMT
            Not After : Mar 31 20:52:19 2026 GMT
        Subject: CN=69c2f984-b22a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:17:d5:fc:c3:3e:bd:b9:4e:3d:8f:c1:b3:5d:
                    69:68:66:17:97:8b:9b:02:6a:14:77:c9:79:7b:07:
                    ec:cb:0c:76:9f:0e:66:06:b9:c6:f3:ec:b8:10:f4:
                    28:2a:34:be:ce:a3:25:d4:76:fa:ac:f3:af:00:bc:
                    14:4e:c3:fb:85:ca:83:f6:27:b6:14:33:e1:94:8f:
                    ee:62:72:92:06:d3:c9:18:83:84:1f:e9:69:6d:3c:
                    e9:48:bf:73:39:95:77:09:84:66:c2:69:1d:1f:42:
                    89:70:c6:55:57:94:0c:6c:ad:21:14:9f:17:c7:2b:
                    62:1e:02:7a:88:20:b9:7e:dc:5d:40:62:7c:a0:1e:
                    f9:a0:15:f4:0f:f9:b9:c3:06:10:32:79:e9:97:c0:
                    fa:87:d3:2f:02:64:d2:ed:c9:45:ed:97:2d:3d:bb:
                    e9:86:7f:2e:b3:e4:ca:15:29:9f:e7:5b:7d:da:bf:
                    1b:c1:6c:c5:a0:2e:2b:b7:d6:fa:1c:1f:2d:36:6b:
                    df:96:98:cb:d7:54:1e:33:b3:e7:1c:5c:69:b5:b7:
                    a1:c3:1d:5e:25:d1:ad:4e:f8:57:ae:7d:b7:f3:4d:
                    3c:bb:98:39:ed:ce:f6:46:49:a5:e2:dc:f8:c4:5f:
                    93:8e:93:55:fc:8f:f3:82:1e:e5:d7:17:bd:42:ae:
                    b5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:9A:9A:07:B5:8F:A2:77:47:D1:FE:FB:57:84:17:3C:A0:30:1B:F3
            X509v3 Authority Key Identifier:
                keyid:76:DE:AC:06:04:60:F6:F8:A5:BD:58:29:9C:53:AB:CA:F9:B1:D3:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dt6sBgRg9vilvVgpnFOryvmx01g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:bf:14:0b:d3:ff:48:7d:aa:9c:49:72:17:a8:59:9f:c3:93:
         fc:5a:43:b2:e9:60:39:4f:4b:c5:c1:08:a6:a2:09:90:90:58:
         de:b1:80:6a:ba:c5:cd:ba:95:82:68:86:e4:10:db:69:94:dd:
         f8:3f:01:05:4b:24:a6:10:1c:64:f5:fc:37:3a:b7:8c:c2:1f:
         ec:68:b2:01:55:de:cf:59:69:df:44:d5:91:a3:b2:51:57:d5:
         0a:38:7d:cf:02:b3:ec:0c:b5:81:ab:65:f7:53:3c:77:17:2d:
         53:59:cf:99:2f:b9:09:eb:00:a1:24:be:18:2f:99:cc:47:d3:
         ac:14:ac:8d:03:a5:a5:c8:f6:75:75:2c:85:ab:38:93:9d:a3:
         6d:69:b9:26:37:cb:b8:a1:51:00:19:40:b4:55:92:3f:0a:b8:
         fb:06:3a:cd:23:8f:ae:3f:b8:58:69:27:87:72:da:78:88:1d:
         30:be:ed:a6:2d:20:b5:1b:44:62:1a:d0:27:bf:a3:fc:33:6d:
         22:48:0c:aa:a0:70:19:b6:e4:37:85:c8:7f:72:f6:64:5c:c0:
         1f:21:e6:8f:a7:68:b5:21:01:fc:cd:aa:ee:2a:b6:1c:1b:94:
         b1:c0:65:83:fe:b9:fe:9f:3c:ea:70:a4:1d:6d:e5:cb:59:c1:
         46:5d:cc:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:32:45 2026 by rpki-client