Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.mft
File:                     DGlwyrnfjpvRDhw-kYkaCafojCA.mft (raw, json)
Hash identifier:          Gvsw+GpuF90DXdK3xmYt9Ykk9e8/uz7hRrDvr1wxaGY=
Subject key identifier:   98:21:69:05:E3:9C:F5:F7:FB:3A:8E:26:9C:AD:95:AE:70:7B:A9:00
Authority key identifier: 0C:69:70:CA:B9:DF:8E:9B:D1:0E:1C:3E:91:89:1A:09:A7:E8:8C:20
Certificate issuer:       /CN=A9179672/serialNumber=0C6970CAB9DF8E9BD10E1C3E91891A09A7E88C20
Certificate serial:       010A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGlwyrnfjpvRDhw-kYkaCafojCA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.mft
Manifest number:          0102
Signing time:             Wed 13 May 2026 05:20:06 +0000
Manifest this update:     Wed 13 May 2026 05:20:05 +0000
Manifest next update:     Wed 20 May 2026 05:20:05 +0000
Files and hashes:         1: DGlwyrnfjpvRDhw-kYkaCafojCA.crl (hash: LjxwbcfnN0nmnQ4vWM/nAZknqD/WfP8imcC1B5VT7SY=)
                          2: D1C1AFB2135511F0976BA50CC4F9AE02.roa (hash: cXnna13A37da56cbsTCo0fbmD5n4hI69trG/+73mamk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.crl
                          rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGlwyrnfjpvRDhw-kYkaCafojCA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 05:20:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 266 (0x10a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179672, serialNumber=0C6970CAB9DF8E9BD10E1C3E91891A09A7E88C20
        Validity
            Not Before: May 13 05:20:05 2026 GMT
            Not After : May 20 05:20:05 2026 GMT
        Subject: CN=6a040a06-931d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:bc:e8:2b:c3:a2:03:a3:2c:cb:76:30:a3:d3:
                    0c:b9:89:aa:d9:60:61:b5:5b:d9:fb:d7:1a:d3:2e:
                    0d:c0:98:62:96:30:08:1b:39:24:43:65:fd:fa:1f:
                    95:5a:59:40:75:a5:cf:aa:77:87:e8:4f:6c:17:2c:
                    fe:f7:10:b8:f6:87:be:a9:ed:f5:92:1e:01:3b:06:
                    d0:45:7f:e5:9d:46:09:2c:af:f3:a8:65:70:0f:4f:
                    6e:72:9a:a1:36:29:11:57:7e:36:38:59:be:40:85:
                    5a:27:1c:0d:61:6c:8e:40:89:cf:a6:55:57:83:65:
                    21:b0:16:e5:10:d1:47:9e:07:93:a3:3b:0e:0e:e6:
                    cd:ac:14:f0:a2:1b:79:c0:1f:95:26:bf:e1:7f:89:
                    3b:0c:9f:45:d1:e2:68:27:ca:71:35:b1:62:a5:5f:
                    25:c2:9c:d3:1c:62:2b:28:4d:27:82:02:4d:98:35:
                    a9:97:e0:4e:e6:3d:58:01:19:ff:35:16:2a:e3:e1:
                    75:b9:58:95:fd:33:db:a2:bc:73:0b:6a:41:43:03:
                    5c:f4:2d:49:a8:23:f2:32:a5:d0:9b:14:9b:bd:87:
                    96:4b:15:f0:83:d6:13:01:ae:28:aa:2a:e3:03:c8:
                    e7:66:c8:78:3d:78:ba:85:3f:8d:38:62:dd:64:40:
                    91:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:21:69:05:E3:9C:F5:F7:FB:3A:8E:26:9C:AD:95:AE:70:7B:A9:00
            X509v3 Authority Key Identifier:
                keyid:0C:69:70:CA:B9:DF:8E:9B:D1:0E:1C:3E:91:89:1A:09:A7:E8:8C:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGlwyrnfjpvRDhw-kYkaCafojCA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:37:4e:bf:b8:b6:02:fc:09:3a:69:56:c4:3b:f7:66:70:a9:
         6d:d8:87:e3:e4:4b:8f:5c:9e:55:a6:90:ad:7c:6f:35:35:30:
         be:1b:d1:67:c6:6d:c5:24:da:d7:7a:c3:d6:a0:f6:9c:bf:51:
         9c:bb:d8:fa:b7:53:ca:33:61:fc:23:f9:48:60:a4:8f:61:77:
         d5:a1:ff:71:87:1d:4c:f1:39:04:53:5b:fb:e4:7a:8b:8d:24:
         c6:2b:83:1d:5e:c2:6c:0a:3b:ff:5f:c6:28:9c:d1:7a:d7:8c:
         3f:46:e1:f3:5a:9c:73:fa:f0:5e:09:8c:cc:2d:0a:29:99:88:
         3b:90:9f:d0:13:ea:f2:4f:71:68:c9:1e:a0:b3:30:fd:d9:0b:
         14:c7:ea:f5:b6:7b:24:96:bf:f4:52:77:e9:89:ac:af:8d:b3:
         4a:5c:c8:c1:8b:22:a0:b8:8d:c1:17:b0:55:70:1e:76:b2:0a:
         79:7f:62:1b:32:91:71:59:36:b7:a2:ed:cc:d0:f5:39:46:e0:
         d1:fc:98:f2:be:a0:ae:ed:b4:83:69:33:52:8e:e5:03:12:8a:
         e6:ec:75:78:f2:81:cf:c4:50:21:eb:eb:e2:62:75:89:a1:d2:
         7d:7d:00:cd:bd:f3:ef:ee:d5:5e:97:33:74:ed:e0:9b:7f:f3:
         75:f6:d6:ef
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Nzk2NzIxMTAvBgNVBAUTKDBDNjk3MENBQjlERjhFOUJEMTBFMUMzRTkxODkxQTA5
QTdFODhDMjAwHhcNMjYwNTEzMDUyMDA1WhcNMjYwNTIwMDUyMDA1WjAYMRYwFAYD
VQQDEw02YTA0MGEwNi05MzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0bzoK8OiA6Msy3Ywo9MMuYmq2WBhtVvZ+9ca0y4NwJhiljAIGzkkQ2X9+h+V
WllAdaXPqneH6E9sFyz+9xC49oe+qe31kh4BOwbQRX/lnUYJLK/zqGVwD09ucpqh
NikRV342OFm+QIVaJxwNYWyOQInPplVXg2UhsBblENFHngeTozsODubNrBTwoht5
wB+VJr/hf4k7DJ9F0eJoJ8pxNbFipV8lwpzTHGIrKE0nggJNmDWpl+BO5j1YARn/
NRYq4+F1uViV/TPborxzC2pBQwNc9C1JqCPyMqXQmxSbvYeWSxXwg9YTAa4oqirj
A8jnZsh4PXi6hT+NOGLdZECRTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJghaQXj
nPX3+zqOJpytla5we6kAMB8GA1UdIwQYMBaAFAxpcMq5346b0Q4cPpGJGgmn6Iwg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTY3Mi84OEFEQ0E5OENC
RUYxMUVGOTE2NUMyNDZDNEY5QUUwMi9ER2x3eXJuZmpwdlJEaHcta1lrYUNhZm9q
Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RHbHd5cm5manB2UkRody1rWWthQ2Fmb2pDQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
OTY3Mi84OEFEQ0E5OENCRUYxMUVGOTE2NUMyNDZDNEY5QUUwMi9ER2x3eXJuZmpw
dlJEaHcta1lrYUNhZm9qQ0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADjdOv7i2AvwJOmlWxDv3ZnCpbdiH4+RLj1yeVaaQrXxvNTUwvhvRZ8ZtxSTa
13rD1qD2nL9RnLvY+rdTyjNh/CP5SGCkj2F31aH/cYcdTPE5BFNb++R6i40kxiuD
HV7CbAo7/1/GKJzReteMP0bh81qcc/rwXgmMzC0KKZmIO5Cf0BPq8k9xaMkeoLMw
/dkLFMfq9bZ7JJa/9FJ36Ymsr42zSlzIwYsioLiNwRewVXAedrIKeX9iGzKRcVk2
t6LtzND1OUbg0fyY8r6gru20g2kzUo7lAxKK5ux1ePKBz8RQIevr4mJ1iaHSfX0A
zb3z7+7VXpczdO3gm3/zdfbW7w==
-----END CERTIFICATE-----
Generated at Wed May 13 12:45:36 2026 by rpki-client