Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.mft
File:                     dOHLgzYmhzR4kyyiEYioj98uneA.mft (raw, json)
Hash identifier:          QA+KGFS9TXNZa5UxSVzWJOHhirEpPysW33nnyAiaolM=
Subject key identifier:   B7:4F:B0:10:26:E5:08:F3:3B:BE:37:CD:7D:94:62:08:D7:B4:49:59
Authority key identifier: 74:E1:CB:83:36:26:87:34:78:93:2C:A2:11:88:A8:8F:DF:2E:9D:E0
Certificate issuer:       /CN=A9121E13/serialNumber=74E1CB833626873478932CA21188A88FDF2E9DE0
Certificate serial:       06F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOHLgzYmhzR4kyyiEYioj98uneA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.mft
Manifest number:          06F0
Signing time:             Sat 04 Apr 2026 14:46:43 +0000
Manifest this update:     Sat 04 Apr 2026 14:46:42 +0000
Manifest next update:     Sat 11 Apr 2026 14:46:42 +0000
Files and hashes:         1: dOHLgzYmhzR4kyyiEYioj98uneA.crl (hash: CTWNKSR/sQO3M44wW0HxiMNRuBruwdP23dPEUILp3bY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.crl
                          rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOHLgzYmhzR4kyyiEYioj98uneA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 14:46:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1777 (0x6f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121E13, serialNumber=74E1CB833626873478932CA21188A88FDF2E9DE0
        Validity
            Not Before: Apr  4 14:46:42 2026 GMT
            Not After : Apr 11 14:46:42 2026 GMT
        Subject: CN=69d12453-f230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:70:09:88:15:3d:6b:7c:67:1e:0f:fd:2f:2e:
                    09:75:26:76:77:5c:d8:da:43:3e:11:9d:d9:33:26:
                    84:2c:0c:3f:9a:e0:f5:b6:35:8d:b8:8f:5d:de:6e:
                    95:b3:ac:87:d8:f0:70:2f:63:38:1b:8d:b8:fe:3b:
                    f6:a4:7b:66:99:3f:b9:93:be:8f:51:29:ae:c1:f7:
                    54:31:28:19:b1:c1:b2:61:8c:27:19:0f:bf:15:c8:
                    41:1b:c5:e9:94:14:df:4f:de:88:68:ca:ca:fe:6e:
                    dc:7c:58:f6:50:e7:f1:9a:00:3e:06:f0:ab:d1:1e:
                    39:48:b3:1a:c7:e8:a6:76:73:07:3c:a3:a1:e2:34:
                    17:29:ab:c1:0b:92:e3:6b:e9:df:5d:5c:9a:c6:15:
                    c0:36:df:c1:61:d5:56:38:9c:b6:54:4b:d1:86:67:
                    30:c2:cf:ac:3e:41:c7:e6:25:22:9e:bb:d5:66:12:
                    2f:e1:7d:d7:58:f8:5c:d7:d6:65:4d:2d:26:69:3f:
                    dc:f5:12:84:f4:b1:90:dc:0b:4c:e1:c0:ca:57:dd:
                    d7:6e:e9:a7:5f:b3:b6:c4:38:bf:9d:67:9c:54:b1:
                    f2:cf:c6:26:6c:3b:24:0d:a0:e0:48:c3:d5:28:84:
                    d2:d9:44:85:c5:6b:bf:2c:7e:09:f9:bf:7e:1a:94:
                    ed:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:4F:B0:10:26:E5:08:F3:3B:BE:37:CD:7D:94:62:08:D7:B4:49:59
            X509v3 Authority Key Identifier:
                keyid:74:E1:CB:83:36:26:87:34:78:93:2C:A2:11:88:A8:8F:DF:2E:9D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOHLgzYmhzR4kyyiEYioj98uneA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:75:41:88:0d:06:75:de:0f:01:6d:95:aa:ee:3f:c8:7b:5b:
         38:d4:cd:ac:e6:d8:9b:5b:21:5c:2e:b3:2e:5f:b9:be:c0:42:
         7b:05:33:59:10:d7:64:df:10:83:5d:03:c6:ae:8a:87:9e:89:
         32:84:a0:fa:37:40:ad:52:b7:17:9f:65:12:86:4f:c1:a9:9d:
         36:df:70:1c:e8:f5:dc:64:00:b0:46:56:b7:96:47:cc:11:09:
         10:6e:6f:a4:7c:e7:81:69:da:2a:18:30:68:77:df:e9:6d:a7:
         97:97:20:73:db:a6:5f:52:56:10:2f:d9:6c:74:e4:01:7b:68:
         b4:79:dc:b3:ac:fe:e7:b3:6e:47:2b:79:a0:29:0b:69:9d:f3:
         da:e9:03:3c:b3:b7:a1:94:78:ab:9d:b6:e9:b5:cf:92:35:f6:
         b9:21:d9:69:cc:6c:8c:9b:a3:85:d3:ec:43:5d:04:41:d6:cc:
         52:75:6a:69:55:8b:4b:cd:1d:37:d0:8e:9c:f9:93:46:db:f1:
         70:0c:a5:1e:45:40:d9:35:e1:1e:4e:e4:1d:45:e5:8c:86:5f:
         6f:8f:ed:2b:3f:a0:cc:d1:90:69:8b:39:97:0a:25:02:db:ba:
         cb:14:31:09:bf:e8:11:69:c7:70:71:ac:a7:d2:ae:5e:fe:53:
         f0:81:ad:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:43:47 2026 by rpki-client