Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.mft
File:                     dOSCYGNYsugSWKrw2-THyWPYfhw.mft (raw, json)
Hash identifier:          Zl58jzAACHgMwXwWNJx2Lo77HXgo+euZsVxnSqZYTrg=
Subject key identifier:   A5:32:7F:40:EE:74:85:6D:8B:B9:97:6B:D6:E9:B4:26:09:F7:69:45
Authority key identifier: 74:E4:82:60:63:58:B2:E8:12:58:AA:F0:DB:E4:C7:C9:63:D8:7E:1C
Certificate issuer:       /CN=A91D3633/serialNumber=74E482606358B2E81258AAF0DBE4C7C963D87E1C
Certificate serial:       1E56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOSCYGNYsugSWKrw2-THyWPYfhw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.mft
Manifest number:          1E3C
Signing time:             Tue 24 Mar 2026 16:00:30 +0000
Manifest this update:     Tue 24 Mar 2026 16:00:29 +0000
Manifest next update:     Tue 31 Mar 2026 16:00:29 +0000
Files and hashes:         1: dOSCYGNYsugSWKrw2-THyWPYfhw.crl (hash: 9I+9TSw4WjYAGuSaKqV3aGXVSLoYWWEAKwIu6kNgf44=)
                          2: 79AE82F8171711EBB12F2574C4F9AE02.roa (hash: sz1Xdztmk+bHgcOnqZNY8JnMe9LDfgb/XJH6nkfyvdA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.crl
                          rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOSCYGNYsugSWKrw2-THyWPYfhw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 16:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7766 (0x1e56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D3633, serialNumber=74E482606358B2E81258AAF0DBE4C7C963D87E1C
        Validity
            Not Before: Mar 24 16:00:29 2026 GMT
            Not After : Mar 31 16:00:29 2026 GMT
        Subject: CN=69c2b51e-e292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:60:66:66:26:a1:e8:89:9f:d3:db:9c:9c:b0:
                    18:c1:39:da:cd:9d:8c:d4:6d:f8:cc:42:ee:6a:86:
                    24:e2:51:14:d3:cf:7a:98:1a:b6:84:d1:23:e8:eb:
                    69:68:e5:e6:10:77:76:f6:33:14:89:75:fe:6b:7e:
                    d4:53:70:58:0c:72:51:3e:5e:ec:4e:ea:44:ee:7c:
                    b8:fd:37:ab:ba:60:d4:65:1a:bf:0b:37:1e:65:1e:
                    e1:40:34:c8:7d:60:b8:15:56:70:1c:11:cf:e7:a2:
                    f6:94:a0:04:86:99:8b:f8:14:dc:93:a8:56:35:96:
                    c0:f0:43:fe:65:29:b6:fa:33:1e:51:9a:36:b6:0c:
                    dd:15:16:db:87:3d:b5:12:47:d7:53:b7:24:12:3b:
                    a1:f9:95:4b:26:1f:90:ba:43:82:59:76:4a:da:3e:
                    de:f9:0a:47:30:b1:1b:b8:02:b4:d1:fc:fb:0f:c2:
                    a3:41:a4:20:0c:d2:dd:b7:dc:c8:c3:e9:42:ce:3d:
                    e4:a9:0f:c7:3b:4f:fb:6a:c4:4e:f6:8e:e4:ad:fe:
                    94:e2:1e:b8:6b:3a:c9:52:b2:dc:28:61:41:c1:e8:
                    a7:89:90:68:92:b4:45:e7:14:aa:bc:48:14:d9:b4:
                    f5:7a:5a:69:80:84:7b:da:1a:3c:e7:dd:90:14:80:
                    76:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:32:7F:40:EE:74:85:6D:8B:B9:97:6B:D6:E9:B4:26:09:F7:69:45
            X509v3 Authority Key Identifier:
                keyid:74:E4:82:60:63:58:B2:E8:12:58:AA:F0:DB:E4:C7:C9:63:D8:7E:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOSCYGNYsugSWKrw2-THyWPYfhw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:f4:e3:31:b1:26:3b:6e:cb:06:9b:45:b4:7a:ae:96:ad:62:
         d6:e1:d6:f7:1f:3c:df:55:41:be:65:1b:e1:f3:a9:64:5b:bb:
         27:1a:e7:09:88:1b:1a:98:71:c7:7a:68:c3:42:64:bf:70:db:
         fb:ea:19:23:e2:c5:01:9d:03:9d:81:99:c1:e4:b1:d5:25:e8:
         38:a7:b9:59:70:67:e7:d8:b2:9d:76:44:b8:c4:be:05:43:c0:
         c3:5b:56:9c:b4:be:2e:ec:e2:1d:f6:e4:e8:7d:40:38:58:e8:
         4a:6c:63:3b:0b:5f:ba:88:e2:54:a5:5b:59:95:c8:bc:4a:f6:
         df:5e:7f:0d:4d:69:27:61:98:74:1e:5d:18:de:66:f6:1c:1b:
         b3:2b:bf:b2:b9:dd:59:9c:ac:67:3b:21:37:62:e6:1e:74:74:
         2a:93:cf:75:fe:5d:c5:71:c1:e1:a1:12:26:ae:8b:9b:0c:ec:
         7e:a0:e7:31:b3:89:a0:bc:76:e9:12:59:17:e6:b1:3e:69:19:
         ae:4b:73:58:da:d9:8d:75:86:ee:31:2d:32:85:b3:8d:64:a7:
         59:fc:b8:1f:70:b8:54:80:3c:84:1a:27:ac:e4:88:e1:0c:10:
         ec:ac:a3:67:00:24:65:3e:38:f6:78:2c:8a:dd:01:0b:74:18:
         b1:04:6d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:38:31 2026 by rpki-client