Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.mft
File:                     DmxKtne94a1EYD_XN9olwGAcRZw.mft (raw, json)
Hash identifier:          GIWcAFmXVMU9uwJFuMMYIGFLrZMbPNpX6jto3459Txo=
Subject key identifier:   6F:64:19:A8:42:1C:9A:DE:6E:42:6C:93:32:D6:6B:04:96:22:08:C1
Authority key identifier: 0E:6C:4A:B6:77:BD:E1:AD:44:60:3F:D7:37:DA:25:C0:60:1C:45:9C
Certificate issuer:       /CN=A91939CF/serialNumber=0E6C4AB677BDE1AD44603FD737DA25C0601C459C
Certificate serial:       CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmxKtne94a1EYD_XN9olwGAcRZw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.mft
Manifest number:          C8
Signing time:             Wed 25 Mar 2026 06:05:23 +0000
Manifest this update:     Wed 25 Mar 2026 06:05:22 +0000
Manifest next update:     Wed 01 Apr 2026 06:05:22 +0000
Files and hashes:         1: DmxKtne94a1EYD_XN9olwGAcRZw.crl (hash: ZJmUyD0CU22RT+jvuDx0JddAmziEGr1gcI36qI61r14=)
                          2: C488A080FB5911EFA827FD17C4F9AE02.roa (hash: R8smImtHPkQX7G+nBf5PC7cAGT+ubkBObp2FM3F8pkE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.crl
                          rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmxKtne94a1EYD_XN9olwGAcRZw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:05:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 204 (0xcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91939CF, serialNumber=0E6C4AB677BDE1AD44603FD737DA25C0601C459C
        Validity
            Not Before: Mar 25 06:05:22 2026 GMT
            Not After : Apr  1 06:05:22 2026 GMT
        Subject: CN=69c37b23-df8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:5f:c1:f5:54:79:6c:96:3f:19:3f:18:d8:75:
                    8f:9a:bd:f3:2b:f1:df:f0:25:fd:83:58:ca:5f:83:
                    03:cf:3a:3b:a5:f1:7e:9c:9c:79:03:46:98:ea:1e:
                    91:4a:8f:24:f9:12:32:bc:c7:8a:a2:20:ba:50:35:
                    60:8b:ba:50:8c:cc:90:22:d4:2e:89:26:26:ec:d0:
                    e3:92:51:86:46:3c:fb:f3:15:84:62:13:35:fe:be:
                    3c:dc:88:5f:f3:b6:28:23:c6:09:78:48:ac:d5:3a:
                    22:42:46:9d:d6:73:97:6f:d5:7d:11:43:c7:8c:23:
                    f3:54:56:7c:8d:86:db:9e:71:65:58:c2:7c:3a:0f:
                    c0:74:f1:ae:db:a6:db:73:15:00:37:0d:a7:38:f7:
                    48:ef:61:b6:b7:ee:bb:ea:8d:e8:44:e4:8e:31:fe:
                    14:b3:ae:22:b4:8b:6f:7b:53:8f:36:5c:d5:ea:e2:
                    e0:93:b8:44:c4:41:fd:76:d5:1c:9d:af:be:b3:f8:
                    db:05:af:f8:4a:03:ad:1a:ff:21:77:ec:cd:9b:70:
                    9c:17:b0:6f:01:4e:db:bf:19:39:79:57:54:5b:8b:
                    d8:7f:be:4b:4e:0a:0c:0d:b8:65:91:2b:df:69:29:
                    92:b7:e1:7c:0e:6c:69:84:10:ba:33:ac:57:a6:7f:
                    68:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:64:19:A8:42:1C:9A:DE:6E:42:6C:93:32:D6:6B:04:96:22:08:C1
            X509v3 Authority Key Identifier:
                keyid:0E:6C:4A:B6:77:BD:E1:AD:44:60:3F:D7:37:DA:25:C0:60:1C:45:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmxKtne94a1EYD_XN9olwGAcRZw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:c3:cf:a9:8c:00:a9:59:4d:00:91:6f:b8:7b:eb:3d:76:a9:
         80:c2:39:c9:46:3b:cc:fc:c8:32:12:99:1e:17:8e:d4:06:a6:
         b4:c6:98:48:c7:01:7e:39:cd:f8:14:57:f4:3e:ae:ab:a9:48:
         25:3b:89:04:05:8f:70:0c:a7:c5:3d:25:d0:1e:fb:be:58:d1:
         f8:ff:80:82:88:93:dd:21:8f:2c:f8:30:4e:d0:c8:14:5f:00:
         5c:d1:e4:7a:9c:61:7e:77:e8:93:fc:29:5c:d4:29:39:fc:ac:
         80:c5:5b:af:47:02:7e:2e:d2:e9:8c:44:a3:cf:68:b0:73:12:
         33:f6:3b:9e:36:76:dc:0f:bd:1a:36:cd:65:76:b7:74:7c:3e:
         ec:93:62:89:93:64:db:5a:d5:c2:d2:44:4e:7d:f3:16:d8:7e:
         ce:37:b4:b1:67:b9:c0:da:c8:cc:9d:18:53:67:7d:3a:78:0f:
         04:ad:ed:19:35:e6:fd:11:c6:8e:4c:16:4f:5e:a4:05:e9:a0:
         b2:cf:39:86:88:36:01:51:a3:17:e2:2d:a5:1e:dd:c9:14:72:
         2d:0e:ca:7f:8d:79:51:f4:f3:2a:25:e2:45:11:c6:fa:fd:66:
         a0:96:1a:14:b3:01:cb:69:db:e1:55:fc:4e:f9:05:ab:8e:e0:
         8c:7e:2a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:42:33 2026 by rpki-client