Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.mft
File:                     DmxKtne94a1EYD_XN9olwGAcRZw.mft (raw, json)
Hash identifier:          nO99ILRw+tWSe/sPA2cQUO8fi/xrlTBigwkh5inoFZI=
Subject key identifier:   B1:75:E0:3F:63:F5:81:56:E7:A1:EC:18:C4:E3:26:AB:89:7B:84:0D
Authority key identifier: 0E:6C:4A:B6:77:BD:E1:AD:44:60:3F:D7:37:DA:25:C0:60:1C:45:9C
Certificate issuer:       /CN=A91939CF/serialNumber=0E6C4AB677BDE1AD44603FD737DA25C0601C459C
Certificate serial:       E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmxKtne94a1EYD_XN9olwGAcRZw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.mft
Manifest number:          E0
Signing time:             Mon 11 May 2026 06:41:33 +0000
Manifest this update:     Mon 11 May 2026 06:41:32 +0000
Manifest next update:     Mon 18 May 2026 06:41:32 +0000
Files and hashes:         1: DmxKtne94a1EYD_XN9olwGAcRZw.crl (hash: hCdQ0DyFD2SS++ZnS25OdGeW/SS/0XnQGdZZgbNK6zs=)
                          2: C488A080FB5911EFA827FD17C4F9AE02.roa (hash: R8smImtHPkQX7G+nBf5PC7cAGT+ubkBObp2FM3F8pkE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.crl
                          rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmxKtne94a1EYD_XN9olwGAcRZw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:41:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 228 (0xe4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91939CF, serialNumber=0E6C4AB677BDE1AD44603FD737DA25C0601C459C
        Validity
            Not Before: May 11 06:41:32 2026 GMT
            Not After : May 18 06:41:32 2026 GMT
        Subject: CN=6a017a1c-a1e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d5:ed:0f:84:5c:24:85:48:07:2e:a0:75:1f:
                    9c:5c:89:2c:f4:a2:f8:9e:d8:3a:4d:51:94:33:6f:
                    08:e4:98:c4:1c:4e:7d:5e:34:e9:dc:6c:f2:f6:f6:
                    be:61:3b:95:28:d2:07:31:74:a8:79:d8:8e:c0:fb:
                    5f:44:d2:e4:61:ec:a8:8e:84:0e:34:0f:1a:d2:4e:
                    9d:29:cf:14:1b:17:3e:8d:f1:18:58:fe:41:18:04:
                    3f:2a:12:dd:23:8d:91:00:64:7c:44:36:90:89:27:
                    6d:22:c0:07:22:30:67:57:8d:5f:5a:da:0d:86:fa:
                    a6:85:1a:22:cd:c8:1e:06:e7:50:a7:d9:c8:d2:de:
                    98:c6:2c:20:ee:fa:a0:1c:04:9d:10:a4:f4:6e:26:
                    f6:83:99:27:a2:73:41:16:fa:fa:c0:91:31:2b:c7:
                    4e:5e:d9:80:00:8f:53:e0:bc:1b:a2:ec:cc:96:37:
                    8e:fa:8f:29:1f:5a:ff:1d:08:dd:71:e1:e2:9f:aa:
                    d1:6d:dc:c3:21:a1:b2:ea:39:92:bc:99:be:be:4e:
                    8a:40:26:fe:c1:ee:f6:03:03:2d:3b:fb:d3:f2:65:
                    6f:27:ca:fb:f1:2c:af:82:ac:d1:4b:b5:11:0f:07:
                    ac:f8:95:b0:98:37:23:17:b8:0b:58:02:ca:11:ba:
                    ed:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:75:E0:3F:63:F5:81:56:E7:A1:EC:18:C4:E3:26:AB:89:7B:84:0D
            X509v3 Authority Key Identifier:
                keyid:0E:6C:4A:B6:77:BD:E1:AD:44:60:3F:D7:37:DA:25:C0:60:1C:45:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmxKtne94a1EYD_XN9olwGAcRZw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:e6:40:22:ca:db:7f:69:1d:95:b9:48:24:26:d9:20:d1:d5:
         d7:18:2f:dc:65:f5:1d:e5:3b:d7:45:1c:d8:46:d6:90:80:32:
         ff:8e:8c:10:06:3b:a3:ec:6a:49:ba:19:dc:de:71:52:37:15:
         97:94:f9:68:60:97:67:ab:8f:6e:4b:e4:b1:be:b6:22:1b:77:
         0a:49:e3:89:8b:d3:58:1a:2a:a6:84:48:1b:3c:e2:9d:a5:c6:
         42:fb:46:a1:5a:38:40:0a:53:d6:9b:67:5b:36:09:5f:b8:9e:
         f9:f9:a7:57:90:2e:94:23:84:7e:da:94:3b:e3:5e:5a:c0:8c:
         a2:9a:41:23:3d:2f:cb:fb:f7:da:60:36:92:3d:9a:13:a4:35:
         cf:4f:45:bf:63:f3:4d:01:49:72:fd:ac:5d:a8:3c:0d:02:dd:
         e9:bd:0f:a5:61:48:fc:3b:7c:26:b4:b0:bf:97:a9:cc:8c:77:
         c7:07:b9:a5:ec:cc:19:a6:3c:8e:21:ad:a3:12:93:f4:33:ab:
         f8:fa:16:f3:93:ed:8f:cd:06:87:d2:64:cd:7c:a3:60:35:3e:
         72:e2:eb:55:05:05:39:ff:fa:a4:d8:f9:ae:dd:c1:af:64:4f:
         77:6d:6d:07:73:58:95:55:a1:8e:72:68:70:d7:b3:c6:48:c0:
         cd:80:29:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:22:23 2026 by rpki-client