Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.mft
File:                     dpU2g0Agk0lSKX69t4GJNXsToUU.mft (raw, json)
Hash identifier:          2c2gCa5kNhXNDaT7JmnlJiCvsO6Czv+pb5efRGh/B6E=
Subject key identifier:   1A:3B:A4:EA:6D:A1:C5:B3:07:53:3A:CF:44:F3:5E:8C:75:27:A1:5D
Authority key identifier: 76:95:36:83:40:20:93:49:52:29:7E:BD:B7:81:89:35:7B:13:A1:45
Certificate issuer:       /CN=A9111623/serialNumber=769536834020934952297EBDB78189357B13A145
Certificate serial:       0181
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dpU2g0Agk0lSKX69t4GJNXsToUU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.mft
Manifest number:          0174
Signing time:             Sun 05 Apr 2026 04:11:25 +0000
Manifest this update:     Sun 05 Apr 2026 04:11:24 +0000
Manifest next update:     Sun 12 Apr 2026 04:11:24 +0000
Files and hashes:         1: dpU2g0Agk0lSKX69t4GJNXsToUU.crl (hash: ycGYnWoS/biw7gCi/8v/yuwNa84c03VlGenbOqh1StA=)
                          2: CAE74ADEFD4511EEA97C9D1CC4F9AE02.roa (hash: d0ixGC40JTyw3NT9NMJiaP5H7p1F2otz2pGAlPeGeNs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.crl
                          rsync://rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dpU2g0Agk0lSKX69t4GJNXsToUU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 04:11:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 385 (0x181)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111623, serialNumber=769536834020934952297EBDB78189357B13A145
        Validity
            Not Before: Apr  5 04:11:24 2026 GMT
            Not After : Apr 12 04:11:24 2026 GMT
        Subject: CN=69d1e0ed-076f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c2:16:4b:d1:28:39:af:0c:ce:8e:47:1c:72:
                    96:ed:91:bd:aa:f6:5c:32:e0:aa:f5:66:95:48:1f:
                    5d:5e:2c:7e:5e:d4:f0:f1:f7:d8:94:8e:1e:df:0b:
                    c7:c2:6f:92:99:f5:73:7e:dd:a4:c3:b2:0b:f5:7a:
                    5a:e7:d2:de:93:00:d0:4e:5f:d0:f9:90:c6:a3:64:
                    f1:22:4b:b3:5f:fd:06:c3:48:9a:a7:95:82:c0:9c:
                    06:d0:9e:98:c0:e1:69:ed:1f:05:ea:26:6d:ea:e2:
                    a4:2d:6d:98:21:fd:e2:b9:0f:e8:b4:ae:0c:8f:b6:
                    c3:67:4d:1c:ab:2d:68:34:ca:98:76:23:fe:cd:d8:
                    45:75:34:57:87:3c:0b:0e:02:11:af:bb:91:b9:bc:
                    e0:9e:ca:bc:4c:03:68:0e:7c:31:70:aa:d9:0e:b1:
                    d8:e9:a7:0e:a8:3f:a8:64:9a:b6:4d:f9:30:c0:af:
                    fa:72:12:4a:42:01:26:7a:dd:85:66:28:f2:06:d1:
                    1a:86:7d:3b:89:da:23:1a:16:7d:3f:e6:ab:26:dc:
                    a4:49:37:6c:c9:fa:f0:7b:df:ee:52:86:e6:6d:ed:
                    e8:75:5f:26:f5:5d:09:cc:22:e2:4b:ad:25:14:f9:
                    35:ca:b7:31:2e:59:9b:7c:08:cb:c2:b6:cf:35:b1:
                    48:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:3B:A4:EA:6D:A1:C5:B3:07:53:3A:CF:44:F3:5E:8C:75:27:A1:5D
            X509v3 Authority Key Identifier:
                keyid:76:95:36:83:40:20:93:49:52:29:7E:BD:B7:81:89:35:7B:13:A1:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dpU2g0Agk0lSKX69t4GJNXsToUU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:97:21:e7:fc:4e:0f:bb:27:81:51:5e:8f:f9:e2:e7:38:7b:
         81:ed:e6:08:25:fc:58:02:7e:17:02:e1:6b:01:4a:e4:74:45:
         dc:d1:81:6e:a4:5c:e0:f6:77:f1:5c:af:d1:a5:ad:6b:1c:e5:
         cc:8d:68:37:9e:0b:18:ad:b5:17:83:ef:12:06:46:60:12:e8:
         f1:85:46:e9:e9:db:9d:2b:45:ca:54:f8:6c:ba:cf:2c:92:5b:
         a6:cb:0c:4f:eb:c1:1d:2f:be:5a:ad:70:d8:25:c6:2d:68:10:
         31:68:87:65:72:ff:80:ef:ee:64:67:50:4d:a1:13:a3:d5:a1:
         6d:b3:7d:6c:b0:d4:24:f6:b8:b1:a9:46:17:22:ff:8f:a8:84:
         cd:38:7a:b3:be:e0:d2:36:e3:a4:1e:0b:6c:8f:56:42:d1:81:
         92:6e:20:1d:aa:5b:be:70:f7:3c:90:9e:ad:b8:b6:10:5e:6a:
         89:31:15:27:4c:18:54:25:de:fc:74:45:f4:5e:34:3d:23:43:
         8e:87:f2:2a:0c:06:59:fb:68:ec:89:b2:ee:aa:f1:29:ec:7f:
         0e:dc:bd:e3:dc:f7:50:54:1a:c8:f7:0f:23:30:7e:83:76:b3:
         97:89:9f:43:a5:21:f3:77:08:1f:26:1f:07:e9:ff:e3:5b:62:
         9b:79:24:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:42:54 2026 by rpki-client