Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.mft
File:                     dbcfVG9Hsh7j6pqGURRsHsXslaY.mft (raw, json)
Hash identifier:          6kze2ihPu+L/EBdO2tG0qgCiWIMVdEXfWNrRuosl8+g=
Subject key identifier:   A2:B5:83:4D:F8:95:D8:05:36:DF:C1:95:1C:31:23:DC:C3:36:CD:D2
Authority key identifier: 75:B7:1F:54:6F:47:B2:1E:E3:EA:9A:86:51:14:6C:1E:C5:EC:95:A6
Certificate issuer:       /CN=A919AD11/serialNumber=75B71F546F47B21EE3EA9A8651146C1EC5EC95A6
Certificate serial:       0142
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbcfVG9Hsh7j6pqGURRsHsXslaY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.mft
Manifest number:          0142
Signing time:             Wed 25 Mar 2026 04:29:53 +0000
Manifest this update:     Wed 25 Mar 2026 04:29:53 +0000
Manifest next update:     Wed 01 Apr 2026 04:29:53 +0000
Files and hashes:         1: dbcfVG9Hsh7j6pqGURRsHsXslaY.crl (hash: lgYx/hjdyqsfpDv2KNRls+BpcNJQqjwB02wvat0W1aE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.crl
                          rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbcfVG9Hsh7j6pqGURRsHsXslaY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:29:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 322 (0x142)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919AD11, serialNumber=75B71F546F47B21EE3EA9A8651146C1EC5EC95A6
        Validity
            Not Before: Mar 25 04:29:53 2026 GMT
            Not After : Apr  1 04:29:53 2026 GMT
        Subject: CN=69c364c1-f23e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c2:9b:bf:fa:88:c9:a6:63:fc:4f:58:7b:81:
                    04:ed:d8:7d:8a:39:c3:61:6e:96:64:cc:b0:c5:10:
                    84:0d:d5:10:5c:32:9d:dd:52:26:b9:e4:0d:86:6b:
                    5b:ad:90:17:73:64:83:a9:c9:f3:47:82:68:c5:27:
                    aa:b2:aa:8f:aa:9d:d4:a2:25:56:8a:aa:ac:d4:c1:
                    cf:a1:88:8c:12:cb:82:f2:31:50:82:ab:fb:aa:92:
                    9d:76:53:68:0f:21:55:13:17:1f:62:2e:b4:44:cb:
                    e8:53:88:c3:21:e2:59:ed:de:4f:f7:4d:23:85:f5:
                    14:ea:61:b7:38:ba:66:01:50:0b:b9:b5:45:25:7e:
                    a9:ea:b4:e1:fb:de:6f:c9:43:ea:ed:ab:89:3b:85:
                    13:36:e3:f1:96:f1:a0:e5:c1:55:13:f2:01:1b:41:
                    f8:9d:e6:85:50:3a:7b:a7:93:49:dc:5d:30:f6:fc:
                    bc:40:bb:a6:d2:d8:e2:06:1f:9f:b4:c5:b0:94:00:
                    1a:ca:ee:0d:97:12:bc:ab:74:b5:ba:a5:d6:ba:b7:
                    f9:bd:1f:21:cb:e9:b4:7b:1e:dc:06:16:bb:bc:c1:
                    0d:ee:97:62:72:4c:d1:6f:88:ee:8a:b1:3b:9b:10:
                    3c:e4:e4:92:73:18:8d:1a:23:19:60:42:28:43:15:
                    c6:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:B5:83:4D:F8:95:D8:05:36:DF:C1:95:1C:31:23:DC:C3:36:CD:D2
            X509v3 Authority Key Identifier:
                keyid:75:B7:1F:54:6F:47:B2:1E:E3:EA:9A:86:51:14:6C:1E:C5:EC:95:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbcfVG9Hsh7j6pqGURRsHsXslaY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:d1:25:22:3e:d1:78:9b:b5:76:9a:c6:07:8a:9b:ea:ca:09:
         b1:2b:c6:25:f1:ba:d4:59:51:11:c1:4d:94:f3:83:8c:e0:41:
         4c:92:c4:ff:9a:dd:5b:53:16:ab:a5:27:62:17:1e:03:a5:14:
         03:91:64:52:b8:85:dc:0e:79:06:22:5d:86:31:5c:29:f6:3f:
         ba:b6:f5:46:62:10:a4:e7:5e:1c:5a:e1:5b:7a:67:23:d1:9a:
         e2:4e:c7:cb:20:77:92:06:fc:93:7f:a6:44:17:ef:3a:eb:55:
         4a:fa:3b:45:ec:23:18:cb:9c:77:bb:9b:e7:fd:12:d0:05:ae:
         3c:ea:6e:8c:ce:b6:10:60:d0:dd:23:7d:91:d8:71:07:dc:cd:
         0d:1a:93:f9:79:0a:2b:5b:f5:53:eb:8e:aa:86:73:0c:4b:54:
         cf:36:9b:0b:4a:a9:8b:11:d1:e2:11:4f:cf:41:c9:da:d9:c4:
         e9:0c:8e:0f:e8:07:f1:9a:22:44:36:37:3b:03:e9:6a:75:1f:
         f8:5f:eb:bc:6e:15:4c:84:04:2f:a7:86:8f:12:8a:ef:fb:cf:
         27:99:e2:e6:f2:6a:06:b9:5a:52:97:c0:78:35:f0:20:b6:ce:
         39:4c:9e:2a:cb:33:eb:28:b2:b8:81:cc:11:68:9e:b9:db:91:
         e7:b9:58:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:14:01 2026 by rpki-client