Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft
File:                     D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft (raw, json)
Hash identifier:          Iyu9j+/knn1u1K++BkjtK/rC+yNennOO0+PrKpXgmg8=
Subject key identifier:   A8:58:3D:2D:FD:58:76:D4:B4:7C:80:48:72:7C:81:9D:4E:6C:91:BF
Authority key identifier: 0F:D7:0E:78:A1:0E:09:18:EF:1C:9D:D8:2A:E2:E9:FD:C3:5A:A4:9F
Certificate issuer:       /CN=A9186883/serialNumber=0FD70E78A10E0918EF1C9DD82AE2E9FDC35AA49F
Certificate serial:       01ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft
Manifest number:          01ED
Signing time:             Wed 13 May 2026 03:23:15 +0000
Manifest this update:     Wed 13 May 2026 03:23:15 +0000
Manifest next update:     Wed 20 May 2026 03:23:15 +0000
Files and hashes:         1: D9cOeKEOCRjvHJ3YKuLp_cNapJ8.crl (hash: PDyssh57jFfiFOWaANSyVRhCgBG99b+K8crOoiwD/4U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.crl
                          rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 03:23:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 493 (0x1ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186883, serialNumber=0FD70E78A10E0918EF1C9DD82AE2E9FDC35AA49F
        Validity
            Not Before: May 13 03:23:15 2026 GMT
            Not After : May 20 03:23:15 2026 GMT
        Subject: CN=6a03eea3-d242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7d:de:91:75:f7:89:01:37:ee:24:fa:c7:da:
                    44:03:4b:da:61:ab:6f:70:9c:45:f4:43:26:5e:cc:
                    dc:47:cf:02:b0:8c:42:0f:b9:d7:c9:0d:28:8a:83:
                    24:4b:30:d0:0d:ba:43:cd:b6:b1:82:64:98:2e:da:
                    4f:f8:99:61:e0:ef:4b:e2:9b:5c:ca:92:c1:6d:0d:
                    e6:b4:22:90:50:84:fd:59:e8:b1:f7:95:04:6e:ae:
                    88:f3:bd:6c:7b:3f:a8:78:ac:95:0b:fb:13:ab:fa:
                    ec:ba:aa:10:1b:28:61:94:5b:24:b7:45:b8:40:10:
                    41:03:6c:ce:b3:28:df:2e:ee:27:f0:0e:0d:64:e9:
                    c8:2c:12:4c:89:9c:34:c8:e5:10:b8:0f:34:a8:04:
                    ff:fe:4e:24:9a:1f:80:d6:01:39:61:57:52:c7:c7:
                    4a:35:2b:f7:fe:79:db:01:fc:47:ff:83:bf:48:5b:
                    7e:94:51:2c:0e:1a:19:68:9b:82:15:78:42:65:de:
                    ae:50:ec:02:8b:5f:1b:8d:97:e3:f5:c3:b7:a0:a9:
                    5c:a8:60:53:44:f2:2d:7c:24:b0:b7:cf:5b:45:c9:
                    3c:34:0f:7f:a5:df:a7:77:90:9c:83:2c:1e:4c:ac:
                    2f:9b:9e:9f:0e:57:fd:e2:50:94:02:7a:87:72:b5:
                    b3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:58:3D:2D:FD:58:76:D4:B4:7C:80:48:72:7C:81:9D:4E:6C:91:BF
            X509v3 Authority Key Identifier:
                keyid:0F:D7:0E:78:A1:0E:09:18:EF:1C:9D:D8:2A:E2:E9:FD:C3:5A:A4:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:df:56:5b:0c:2a:5f:47:90:c2:3e:33:ce:91:04:f9:ef:70:
         a8:2f:24:e2:bc:d0:45:28:f3:45:d9:db:a4:5b:83:dd:72:1b:
         ab:b6:01:60:94:89:bd:b5:e6:7d:19:41:f3:4d:18:7e:30:b7:
         97:1c:c8:e9:fd:ce:e8:9c:26:3d:a3:cc:64:fd:bf:6c:06:3c:
         2c:8e:bb:91:c3:5b:b5:46:64:5a:f3:70:65:a4:df:18:69:f1:
         7c:74:82:da:df:b9:2b:3d:ed:61:ff:be:8d:8e:e2:49:48:6f:
         61:33:e6:ef:39:08:78:3c:79:a6:ac:29:7f:61:8a:e4:fb:5f:
         01:8f:33:59:88:f1:69:3d:3a:1c:6f:48:39:80:01:15:3a:9b:
         5c:4a:10:b8:f7:f3:a4:8f:13:d3:36:45:af:86:51:56:55:60:
         32:d8:d6:2a:7d:c8:cd:e8:60:6e:b7:ff:8f:3e:ad:7a:e2:d0:
         87:03:46:f8:23:ad:59:8a:f3:f1:e5:19:8d:ea:33:a6:4e:87:
         be:7d:3f:90:e9:55:dc:70:22:06:e7:af:d1:82:5d:c2:b3:dd:
         37:6e:e6:6b:88:4f:36:5a:e8:9c:05:32:81:0e:f2:6b:64:12:
         d6:c1:93:d7:a1:4e:ab:04:44:5e:ea:6c:72:b7:35:5e:b8:f6:
         dd:ea:89:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:38:11 2026 by rpki-client