Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft
File:                     DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft (raw, json)
Hash identifier:          VMu3zFQDPExSXL0bYJ7aBX499lFRS0s1O0Cw9JxYEAU=
Subject key identifier:   7A:4D:EB:AA:26:5C:E0:F0:73:5E:AF:E5:CA:2F:1B:BE:E0:78:E2:12
Authority key identifier: 0F:0B:CE:E1:5A:DB:6D:57:D0:2C:D0:4B:45:22:3A:B8:06:6A:54:5D
Certificate issuer:       /CN=A91E8161/serialNumber=0F0BCEE15ADB6D57D02CD04B45223AB8066A545D
Certificate serial:       1766
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DwvO4VrbbVfQLNBLRSI6uAZqVF0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft
Manifest number:          1753
Signing time:             Tue 24 Mar 2026 16:30:48 +0000
Manifest this update:     Tue 24 Mar 2026 16:30:48 +0000
Manifest next update:     Tue 31 Mar 2026 16:30:48 +0000
Files and hashes:         1: DwvO4VrbbVfQLNBLRSI6uAZqVF0.crl (hash: 6QJZEwNS4E2J8zGWyeHUmZCXiS4VWVdV/rsqEKp4lnE=)
                          2: C109FFF4FC0511E7BAFB3E48C4F9AE02.roa (hash: ixlZRVOoeUZJ75nnpCsBl4fkLgRW7J4+9KrLoGwUAJc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.crl
                          rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DwvO4VrbbVfQLNBLRSI6uAZqVF0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 16:30:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5990 (0x1766)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8161, serialNumber=0F0BCEE15ADB6D57D02CD04B45223AB8066A545D
        Validity
            Not Before: Mar 24 16:30:48 2026 GMT
            Not After : Mar 31 16:30:48 2026 GMT
        Subject: CN=69c2bc38-246e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:17:32:c9:df:6a:3d:17:7e:3d:05:eb:96:37:
                    7c:31:ce:81:fe:94:a7:6c:f1:31:99:c1:2e:31:3c:
                    f0:bf:00:0c:0c:f2:3a:d4:f4:f9:0f:fa:d2:49:4f:
                    3f:bd:35:44:cc:b9:be:d8:fe:75:3c:37:3e:c3:5e:
                    17:79:29:8e:b0:2f:d4:19:c0:65:ee:6c:5b:9b:f7:
                    55:ba:cc:38:19:ac:2a:02:e9:21:a5:8b:63:f0:6b:
                    69:be:24:72:21:29:51:e2:4b:88:05:83:c6:c2:0a:
                    86:e6:d0:5b:9b:d4:68:96:38:a9:d0:73:dc:b6:7d:
                    8a:93:6c:ab:a3:92:28:94:15:89:d2:79:33:2b:f1:
                    1e:9c:95:8d:4b:3b:89:14:6a:ea:36:52:6b:08:31:
                    ec:c4:0d:81:dd:ff:6e:f7:de:ca:4e:17:8e:a7:6b:
                    57:03:1a:74:66:e6:43:c9:90:fe:c7:29:23:26:99:
                    3a:89:86:c0:eb:e0:28:40:b1:d2:ef:3e:3b:29:6a:
                    c4:0f:1e:5e:58:ec:4c:01:c5:4c:b5:09:e0:62:02:
                    1a:74:c4:e9:ca:e2:cf:3c:5b:57:b2:00:71:f9:d6:
                    8e:3f:5b:12:10:97:17:d0:23:d7:85:76:04:0f:ec:
                    c6:9b:e7:ef:ca:5c:c3:6a:5d:58:4c:ff:45:9e:ec:
                    00:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:4D:EB:AA:26:5C:E0:F0:73:5E:AF:E5:CA:2F:1B:BE:E0:78:E2:12
            X509v3 Authority Key Identifier:
                keyid:0F:0B:CE:E1:5A:DB:6D:57:D0:2C:D0:4B:45:22:3A:B8:06:6A:54:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DwvO4VrbbVfQLNBLRSI6uAZqVF0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:78:5a:d3:6f:b1:88:5c:09:1a:2d:4a:2c:03:18:c8:bd:21:
         20:86:18:9d:2f:80:70:5d:99:e7:57:75:e2:a1:f8:77:21:38:
         15:3d:24:45:d4:1d:f8:bf:78:e9:a5:30:35:2c:6a:38:64:19:
         92:c0:b3:2e:ee:07:7f:25:1c:38:98:42:1b:23:36:0b:e4:90:
         08:e0:26:41:ad:57:fd:c1:1a:37:e7:5c:48:3c:0a:69:e4:8a:
         5a:e3:88:cf:a5:40:8f:4e:74:ee:21:c0:8c:84:d9:5a:c6:ba:
         5c:b0:36:0e:24:4e:50:24:1b:8a:eb:dd:59:40:16:36:98:b2:
         73:b2:b0:e6:1e:45:5c:e2:56:6f:95:a2:f5:a3:9f:f5:f8:8c:
         b2:a1:c8:0e:56:20:0a:f0:49:bd:1a:f8:2f:e5:33:9c:f0:e2:
         75:19:1c:4c:c6:58:1f:18:d4:b7:0a:ef:5e:71:f9:32:9d:b0:
         6e:ab:b4:b5:65:ac:d7:78:64:75:5c:40:e9:df:76:6a:83:b6:
         d4:d5:5c:ab:65:78:0f:0e:b5:07:36:8a:4c:3b:7d:30:b8:e8:
         2c:05:23:58:dd:53:f5:ee:75:20:80:3d:dc:bb:5a:29:c7:8d:
         8c:2f:cf:29:cd:59:a3:b5:a6:9b:f3:2f:cc:aa:73:b4:74:14:
         36:0b:b2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:55:32 2026 by rpki-client