Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft
File:                     dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft (raw, json)
Hash identifier:          Jr0vRf5a6I5CkY7nfpjaVuyMPxlOeG4wjMUMHgm1kXQ=
Subject key identifier:   B7:73:1D:4C:56:76:AC:43:8F:21:8E:42:F0:B4:5D:06:DD:42:19:21
Authority key identifier: 76:78:62:5D:91:54:FC:DF:1B:00:0A:43:D1:F8:92:FB:1D:58:83:69
Certificate issuer:       /CN=A9180DF5/serialNumber=7678625D9154FCDF1B000A43D1F892FB1D588369
Certificate serial:       06A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft
Manifest number:          06A2
Signing time:             Tue 24 Mar 2026 22:07:18 +0000
Manifest this update:     Tue 24 Mar 2026 22:07:18 +0000
Manifest next update:     Tue 31 Mar 2026 22:07:18 +0000
Files and hashes:         1: dnhiXZFU_N8bAApD0fiS-x1Yg2k.crl (hash: 5LJsL88k1u8Oks2seO4uuxkk5S0QiKKzCOUUH8OTO/o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.crl
                          rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:07:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1701 (0x6a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180DF5, serialNumber=7678625D9154FCDF1B000A43D1F892FB1D588369
        Validity
            Not Before: Mar 24 22:07:18 2026 GMT
            Not After : Mar 31 22:07:18 2026 GMT
        Subject: CN=69c30b16-26cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7e:55:e5:3b:e3:75:23:99:7e:1e:bb:1f:5f:
                    72:75:a6:7f:a6:69:e6:5d:13:13:9b:36:9b:33:ed:
                    56:96:ca:06:3d:7e:fa:13:da:5c:fb:62:54:4e:e0:
                    6d:97:aa:cb:75:16:cd:bf:c0:6a:1c:09:ab:47:fc:
                    6b:28:af:89:2a:a8:02:be:4a:85:52:65:1d:11:f9:
                    76:04:b9:c1:13:fa:79:71:f0:26:57:e9:f6:67:50:
                    1d:17:2f:77:45:bb:87:9b:78:93:09:df:73:77:98:
                    5b:6d:ea:8e:6a:75:a5:ef:64:05:43:04:c4:14:09:
                    3d:c7:ab:8d:08:36:d0:2d:3d:a4:f1:87:a5:50:da:
                    df:17:5b:d3:c3:c2:ea:2f:37:bc:d7:04:66:2e:39:
                    6e:23:32:ed:68:7e:2c:82:a2:a0:bb:dd:dc:f2:ad:
                    b1:df:ab:86:c2:41:d5:39:cd:55:30:25:ef:98:21:
                    65:17:e0:9e:54:fd:e2:81:d8:09:ed:11:11:8e:b9:
                    06:f3:55:bb:b2:7c:7f:85:18:3b:c8:96:b0:24:cf:
                    01:ee:17:5a:ae:26:71:01:aa:16:78:13:c9:95:94:
                    46:a6:38:d5:ee:22:59:bf:3e:4e:15:8c:6b:85:51:
                    75:20:c0:27:41:5a:71:4c:15:01:bb:28:84:f4:7a:
                    d8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:73:1D:4C:56:76:AC:43:8F:21:8E:42:F0:B4:5D:06:DD:42:19:21
            X509v3 Authority Key Identifier:
                keyid:76:78:62:5D:91:54:FC:DF:1B:00:0A:43:D1:F8:92:FB:1D:58:83:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:d3:5a:0a:54:8c:ba:99:90:4e:28:df:bd:d2:0a:b1:3f:19:
         ac:88:a1:7a:da:f5:57:4d:90:fb:10:33:ba:d8:6a:24:68:5f:
         36:25:97:7b:03:af:17:df:ee:60:b8:c1:ab:1b:71:b7:13:0c:
         92:19:77:8b:ed:5c:ae:5f:01:a5:24:4f:94:3d:30:99:ab:e5:
         5d:a6:08:3c:4b:e3:07:90:f1:21:09:a0:d5:35:17:4a:00:6d:
         17:e7:cb:18:f4:a5:ed:bf:08:b3:30:23:b4:27:74:1b:7d:a7:
         23:d7:f2:bb:07:d3:f2:8b:e9:7f:66:0f:da:36:35:6a:56:b6:
         31:4d:fa:46:95:a6:96:37:ae:60:8d:d3:fa:00:ea:c2:41:93:
         3f:e3:69:d1:ae:bb:26:05:41:fc:61:59:25:32:b7:e8:38:d1:
         54:f6:0b:29:b0:aa:b7:27:c0:89:84:35:71:7c:67:8a:e4:f7:
         3f:08:ad:8a:c9:3f:4b:37:c9:46:e2:57:64:ab:20:8a:be:24:
         57:4d:2f:ed:84:77:f9:f3:b6:c8:a7:7f:58:f7:53:92:34:f3:
         c1:81:98:7e:ab:e1:6d:0a:ab:47:11:dd:c0:91:0d:a1:37:c0:
         e1:a1:66:25:97:40:e3:e9:cf:ff:39:17:8b:38:35:e5:35:2d:
         17:2a:50:94
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODBERjUxMTAvBgNVBAUTKDc2Nzg2MjVEOTE1NEZDREYxQjAwMEE0M0QxRjg5MkZC
MUQ1ODgzNjkwHhcNMjYwMzI0MjIwNzE4WhcNMjYwMzMxMjIwNzE4WjAYMRYwFAYD
VQQDEw02OWMzMGIxNi0yNmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw35V5TvjdSOZfh67H19ydaZ/pmnmXRMTmzabM+1WlsoGPX76E9pc+2JUTuBt
l6rLdRbNv8BqHAmrR/xrKK+JKqgCvkqFUmUdEfl2BLnBE/p5cfAmV+n2Z1AdFy93
RbuHm3iTCd9zd5hbbeqOanWl72QFQwTEFAk9x6uNCDbQLT2k8YelUNrfF1vTw8Lq
Lze81wRmLjluIzLtaH4sgqKgu93c8q2x36uGwkHVOc1VMCXvmCFlF+CeVP3igdgJ
7RERjrkG81W7snx/hRg7yJawJM8B7hdariZxAaoWeBPJlZRGpjjV7iJZvz5OFYxr
hVF1IMAnQVpxTBUBuyiE9HrYiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLdzHUxW
dqxDjyGOQvC0XQbdQhkhMB8GA1UdIwQYMBaAFHZ4Yl2RVPzfGwAKQ9H4kvsdWINp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MERGNS9GNEZEMjI3QUE2
MzIxMUVCQjNFMTc5NjlDNEY5QUUwMi9kbmhpWFpGVV9OOGJBQXBEMGZpUy14MVln
MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RuaGlYWkZVX044YkFBcEQwZmlTLXgxWWcyay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MERGNS9GNEZEMjI3QUE2MzIxMUVCQjNFMTc5NjlDNEY5QUUwMi9kbmhpWFpGVV9O
OGJBQXBEMGZpUy14MVlnMmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAA9NaClSMupmQTijfvdIKsT8ZrIihetr1V02Q+xAzuthqJGhfNiWXewOvF9/u
YLjBqxtxtxMMkhl3i+1crl8BpSRPlD0wmavlXaYIPEvjB5DxIQmg1TUXSgBtF+fL
GPSl7b8IszAjtCd0G32nI9fyuwfT8ovpf2YP2jY1ala2MU36RpWmljeuYI3T+gDq
wkGTP+Np0a67JgVB/GFZJTK36DjRVPYLKbCqtyfAiYQ1cXxniuT3Pwitisk/SzfJ
RuJXZKsgir4kV00v7YR3+fO2yKd/WPdTkjTzwYGYfqvhbQqrRxHdwJENoTfA4aFm
JZdA4+nP/zkXizg15TUtFypQlA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:32:21 2026 by rpki-client