Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B25C/6FF20A4A24D711F1881BD2D0AB833773/dPMMxhn9EiAXhJY93VgdB3Lzjhk.mft
File:                     dPMMxhn9EiAXhJY93VgdB3Lzjhk.mft (raw, json)
Hash identifier:          2Ncbd44UUkN63M6D/9iDtU2xxVKmu1wudbE10IEOTyY=
Subject key identifier:   7A:3D:35:EA:67:FC:8D:E2:3F:93:4D:7A:B2:BF:B7:DF:DA:32:F3:58
Authority key identifier: 74:F3:0C:C6:19:FD:12:20:17:84:96:3D:DD:58:1D:07:72:F3:8E:19
Certificate issuer:       /CN=A913B25C/serialNumber=74F30CC619FD12201784963DDD581D0772F38E19
Certificate serial:       0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dPMMxhn9EiAXhJY93VgdB3Lzjhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B25C/6FF20A4A24D711F1881BD2D0AB833773/dPMMxhn9EiAXhJY93VgdB3Lzjhk.mft
Manifest number:          0A
Signing time:             Sun 05 Apr 2026 08:28:51 +0000
Manifest this update:     Sun 05 Apr 2026 08:28:51 +0000
Manifest next update:     Sun 12 Apr 2026 08:28:51 +0000
Files and hashes:         1: dPMMxhn9EiAXhJY93VgdB3Lzjhk.crl (hash: 5lN9iwoguEA98Y8C6kgYHpwGO1/f6WWn5wbCd3YOniw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B25C/6FF20A4A24D711F1881BD2D0AB833773/dPMMxhn9EiAXhJY93VgdB3Lzjhk.crl
                          rsync://rpki.apnic.net/member_repository/A913B25C/6FF20A4A24D711F1881BD2D0AB833773/dPMMxhn9EiAXhJY93VgdB3Lzjhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dPMMxhn9EiAXhJY93VgdB3Lzjhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 08:28:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B25C, serialNumber=74F30CC619FD12201784963DDD581D0772F38E19
        Validity
            Not Before: Apr  5 08:28:51 2026 GMT
            Not After : Apr 12 08:28:51 2026 GMT
        Subject: CN=69d21d43-1ece
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e0:fc:fb:40:ab:e1:11:67:fb:b2:d6:65:9a:
                    35:3a:8f:bf:42:3a:cf:d8:08:08:8a:c8:fb:4a:56:
                    b9:36:83:5d:4c:a3:50:9c:28:38:f2:9b:44:a9:12:
                    ae:7b:a5:e2:29:67:26:7d:c9:a3:bc:4e:34:87:a7:
                    2a:e3:de:4a:02:cd:5b:38:3d:4d:d7:2f:f5:fc:0e:
                    ad:b5:a9:a1:06:99:c1:92:8a:eb:a1:ba:41:b9:a8:
                    88:18:d2:bf:cd:5a:61:b1:8a:68:13:dc:a0:b6:0b:
                    26:72:fa:dc:8d:f5:f1:92:ed:e9:28:10:ed:9d:f7:
                    af:e7:f0:c5:8c:a5:74:07:78:8e:56:e0:dd:d5:0d:
                    fc:97:4b:9b:a2:8c:51:c3:db:fd:95:8d:4e:57:62:
                    05:00:a2:ce:0b:92:0c:28:0d:b2:07:11:df:3e:66:
                    3d:68:73:24:c2:cf:d1:24:21:88:5b:23:58:f4:d9:
                    60:39:97:8f:b4:2e:1e:ab:cd:1b:29:c1:3e:8a:28:
                    23:ff:e6:94:97:b5:e0:3a:d8:16:ff:4e:31:36:18:
                    30:75:44:76:ad:78:bc:bf:bd:96:98:51:30:e0:4e:
                    2a:53:44:49:25:67:ef:68:5b:ad:b4:1d:6a:df:9d:
                    9d:dd:9a:ca:4b:26:6d:d3:dd:98:3f:42:05:6f:00:
                    1f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:3D:35:EA:67:FC:8D:E2:3F:93:4D:7A:B2:BF:B7:DF:DA:32:F3:58
            X509v3 Authority Key Identifier:
                keyid:74:F3:0C:C6:19:FD:12:20:17:84:96:3D:DD:58:1D:07:72:F3:8E:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B25C/6FF20A4A24D711F1881BD2D0AB833773/dPMMxhn9EiAXhJY93VgdB3Lzjhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dPMMxhn9EiAXhJY93VgdB3Lzjhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B25C/6FF20A4A24D711F1881BD2D0AB833773/dPMMxhn9EiAXhJY93VgdB3Lzjhk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:38:0a:aa:2a:11:74:ac:c9:33:a8:bf:6b:09:a2:9b:2a:73:
         90:6e:5f:db:3e:62:96:c8:00:ee:ed:dc:ad:b0:fd:18:00:71:
         ba:c5:ec:39:87:50:c3:0f:90:b1:59:b7:ae:81:01:76:03:71:
         4c:88:ef:f1:b3:29:6c:e1:d7:3c:12:2b:6e:a2:59:23:88:19:
         1b:f1:c5:23:3a:49:d2:13:8a:59:b7:30:61:f0:82:21:39:4a:
         b5:62:5c:91:17:b9:4b:1e:a4:7b:23:92:58:a0:86:99:f1:c6:
         af:45:80:66:f1:0b:ab:07:15:40:8e:f4:d8:ea:5f:04:ee:f0:
         15:9a:0b:fb:6c:78:74:4c:f9:47:7e:28:bc:78:94:06:a1:53:
         65:97:3e:d2:14:63:6c:02:8f:34:d6:2f:14:fa:9f:07:c4:5f:
         f0:49:87:45:ff:23:69:a9:f8:6f:3e:0d:fd:03:1e:84:35:a5:
         42:83:92:91:9d:fc:81:12:9c:7e:c8:b0:9c:20:a1:28:48:93:
         cf:09:31:cf:b0:0f:8f:e8:c9:66:e6:ee:72:03:8f:32:fe:7d:
         be:bb:18:fd:da:29:92:62:e3:32:b7:e2:b1:42:1a:a1:f5:9f:
         13:66:fc:99:8f:c6:88:a7:73:75:37:32:21:dd:c8:a6:a8:33:
         db:1f:6f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:38:17 2026 by rpki-client