Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft
File:                     DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft (raw, json)
Hash identifier:          wr0aXSuoYnou5pm4hXpbLdbEY8IBxi1U+3jnvYNrPNU=
Subject key identifier:   E8:29:18:9A:9C:4B:93:32:71:D7:D0:B3:01:09:BB:49:E6:50:4B:6E
Authority key identifier: 0D:8C:1F:11:0B:DB:33:D0:53:B6:56:BB:A0:07:3B:93:0C:64:F3:14
Certificate issuer:       /CN=A917D114/serialNumber=0D8C1F110BDB33D053B656BBA0073B930C64F314
Certificate serial:       70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYwfEQvbM9BTtla7oAc7kwxk8xQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft
Manifest number:          6C
Signing time:             Wed 25 Mar 2026 07:07:07 +0000
Manifest this update:     Wed 25 Mar 2026 07:07:07 +0000
Manifest next update:     Wed 01 Apr 2026 07:07:07 +0000
Files and hashes:         1: DYwfEQvbM9BTtla7oAc7kwxk8xQ.crl (hash: gRkIfScu7mUIJcIG5cDb6CupuX+m2BPu6NnWqL26NvU=)
                          2: 77248CD0889111F0810C3E1FC4F9AE02.roa (hash: C+v8DxSw3+udVzZSqwvQqRGQ9Pr2cv6HbsmEoxT6o4g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.crl
                          rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYwfEQvbM9BTtla7oAc7kwxk8xQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112 (0x70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D114, serialNumber=0D8C1F110BDB33D053B656BBA0073B930C64F314
        Validity
            Not Before: Mar 25 07:07:07 2026 GMT
            Not After : Apr  1 07:07:07 2026 GMT
        Subject: CN=69c3899b-6f5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:82:e4:ec:23:42:ad:6e:bd:61:b3:c7:05:e4:
                    3b:c1:93:5d:6d:f6:ce:70:b7:e8:9f:47:c9:1c:10:
                    d5:dc:bb:05:70:d9:f3:ed:96:9e:ff:90:94:23:e5:
                    05:7c:49:61:46:5a:4d:ba:92:65:75:de:19:1c:57:
                    fe:70:1e:85:ed:9e:2c:dc:db:76:95:ce:a5:15:66:
                    5b:26:a7:d2:f8:e6:c1:ec:e5:97:aa:7b:3e:40:af:
                    80:23:df:92:04:3e:68:65:30:23:46:28:77:2e:0e:
                    55:52:24:93:00:5a:a3:76:f3:0d:1f:57:9e:c2:87:
                    f0:0a:ba:5c:ea:6b:34:b9:f2:73:49:a6:a1:2f:1b:
                    bc:7d:1e:8a:d4:05:9a:3c:5d:fc:94:cc:92:12:10:
                    2a:26:7e:6c:62:3e:e4:8a:fd:55:cb:c7:4c:4b:b0:
                    bc:71:81:6e:95:57:95:1c:74:07:b5:71:97:b9:c4:
                    76:28:b7:57:b0:1d:fd:c8:f5:02:cf:e6:3d:cc:a2:
                    e6:5a:7c:3e:94:cb:e8:e4:08:e5:9c:1d:93:5b:38:
                    47:ab:cc:4c:ad:9b:bc:79:d8:4f:64:fe:17:45:9f:
                    78:da:1c:de:ee:cd:11:82:f0:ea:2d:d5:2e:1a:10:
                    71:1e:1c:67:d2:cf:3d:0c:3d:b1:6d:53:b7:d4:d7:
                    94:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:29:18:9A:9C:4B:93:32:71:D7:D0:B3:01:09:BB:49:E6:50:4B:6E
            X509v3 Authority Key Identifier:
                keyid:0D:8C:1F:11:0B:DB:33:D0:53:B6:56:BB:A0:07:3B:93:0C:64:F3:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYwfEQvbM9BTtla7oAc7kwxk8xQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:ad:58:32:28:17:27:fe:05:d7:a4:26:9b:51:87:43:3e:e2:
         e4:6e:e6:9e:88:6f:63:92:45:06:74:ad:fb:3f:71:37:3d:98:
         6f:d0:99:06:ec:15:4c:78:14:03:36:79:92:cb:de:64:65:d9:
         33:71:98:26:0a:80:6f:11:66:2a:60:d4:b0:5d:62:b3:c4:a5:
         97:5c:5e:83:51:1e:08:dc:9c:f3:22:bd:48:74:35:9b:a1:41:
         a9:3e:f4:da:32:e2:fc:40:fc:7a:fa:c0:95:f6:a9:51:de:df:
         2c:36:aa:84:af:c9:a7:96:be:71:43:80:3a:d0:1a:5d:04:9e:
         fe:ef:72:77:51:d6:94:c4:9b:db:fa:5f:75:40:6a:2f:1e:aa:
         82:3f:70:f3:c6:1a:50:c7:99:e8:71:fe:e3:d7:70:ba:f7:58:
         af:03:63:1f:f9:2d:70:ac:d6:c7:64:30:cf:e2:64:5a:39:eb:
         76:72:8a:5d:c5:75:1d:f5:83:29:39:9b:bc:15:01:4b:a8:25:
         31:98:20:d7:1c:49:77:8d:54:da:33:4d:5c:a0:7a:34:22:31:
         a6:b4:b6:7f:70:62:59:63:00:b2:6b:71:8d:d3:90:f3:53:76:
         95:5c:f3:71:f6:d8:5a:32:39:98:e3:c5:33:a5:c4:21:10:6b:
         9d:6b:aa:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:41:05 2026 by rpki-client