Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft
File:                     dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft (raw, json)
Hash identifier:          C2D1X5z0HaMCH15q4QMTuu6K+/PaJME89veHZ+njxXo=
Subject key identifier:   BA:92:31:EE:9A:A2:30:95:C8:C5:D1:7A:52:C4:2E:A3:3C:89:17:FC
Authority key identifier: 74:8B:C7:9A:FA:9B:7F:F7:5B:13:00:AD:29:40:E7:FC:C1:42:F8:86
Certificate issuer:       /CN=A91D76E5/serialNumber=748BC79AFA9B7FF75B1300AD2940E7FCC142F886
Certificate serial:       0902
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft
Manifest number:          08F6
Signing time:             Sat 04 Apr 2026 20:08:24 +0000
Manifest this update:     Sat 04 Apr 2026 20:08:24 +0000
Manifest next update:     Sat 11 Apr 2026 20:08:24 +0000
Files and hashes:         1: dIvHmvqbf_dbEwCtKUDn_MFC-IY.crl (hash: 1kv+t8xhcfcw/IK/0FjfFbonBZGT8Ar0MFPRVsqhLyY=)
                          2: 94B101721B8B11EEACEA736AC4F9AE02.roa (hash: qKTt9ATlz/vyXKRzdg+bUvwyPMjVccPyHDh5rJ6vtFA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.crl
                          rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 20:08:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2306 (0x902)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D76E5, serialNumber=748BC79AFA9B7FF75B1300AD2940E7FCC142F886
        Validity
            Not Before: Apr  4 20:08:24 2026 GMT
            Not After : Apr 11 20:08:24 2026 GMT
        Subject: CN=69d16fb8-65e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:73:7d:77:45:f1:d3:be:17:4e:05:e8:8b:29:
                    fb:f3:a0:36:dd:29:ca:9b:b8:27:e9:cf:e2:b0:c5:
                    21:ea:71:5e:1f:8a:2a:ae:a0:a3:12:fd:a6:28:e6:
                    40:e0:63:ce:b5:a6:a7:b8:bd:1e:e7:65:e3:0d:56:
                    50:91:51:ab:f4:e3:e7:66:b8:d5:1f:b7:54:fd:a1:
                    2a:63:d4:a2:55:6e:f6:f9:16:58:e5:8c:a5:79:68:
                    65:6c:63:51:5d:d6:52:77:3b:f2:0c:c3:5a:28:a4:
                    5e:ce:c6:45:6f:d2:31:80:63:35:dd:ea:ff:96:44:
                    85:f7:07:e4:6f:dd:f2:66:f4:c2:97:39:34:79:1c:
                    f5:f8:8e:92:a3:fc:01:d6:ca:04:c3:55:53:5b:a2:
                    28:01:73:d8:5c:90:06:a6:a9:4c:a6:f8:ce:58:4d:
                    89:12:b9:c0:c3:26:94:01:50:fd:0a:cd:21:52:66:
                    d3:c6:b7:71:13:1b:e1:bf:eb:95:a2:63:d1:c5:ab:
                    ed:c2:25:74:68:75:db:51:40:36:17:88:6d:2d:c0:
                    b2:ac:05:15:4c:24:15:6c:2d:90:4d:30:3e:41:d3:
                    1b:39:2b:fc:bd:33:5d:33:8e:b6:11:7b:a1:0b:f8:
                    8b:82:47:5f:f2:57:90:1a:d6:da:e8:09:ce:13:6e:
                    fa:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:92:31:EE:9A:A2:30:95:C8:C5:D1:7A:52:C4:2E:A3:3C:89:17:FC
            X509v3 Authority Key Identifier:
                keyid:74:8B:C7:9A:FA:9B:7F:F7:5B:13:00:AD:29:40:E7:FC:C1:42:F8:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:ad:3a:a5:56:5a:32:7d:f0:9c:00:be:02:e7:42:ad:12:ff:
         58:88:64:42:85:59:4a:50:a1:1c:21:6b:64:85:fb:05:b2:d5:
         cf:fb:cb:ce:06:c3:96:61:f0:75:31:81:9a:0b:0e:b1:19:0f:
         09:c8:68:59:65:3c:9e:55:66:29:0e:d0:84:5a:3c:4c:ba:e4:
         49:cd:46:8b:e2:d5:37:87:4b:fd:58:c4:47:3c:39:c2:d7:0c:
         83:ce:77:8f:57:5f:7e:be:e8:73:ff:91:3c:16:8e:ca:e2:1b:
         19:c3:c5:00:67:07:a3:bb:21:ca:23:1e:1d:5c:0a:8a:42:02:
         3b:98:d5:b6:db:3b:46:df:76:fa:d7:77:a5:41:47:63:0d:0b:
         64:4c:2b:a1:0b:79:c7:f2:1f:87:b4:9e:73:a3:b0:ec:1d:67:
         9e:46:c5:47:39:83:8b:5f:ce:64:9a:6c:fe:19:f1:5c:a9:2a:
         46:29:e6:6b:c9:8b:c3:8e:9b:ab:fb:f9:a6:14:a6:66:c9:eb:
         07:f3:8d:46:e7:1c:ae:9d:65:f3:d5:e4:28:84:1d:79:e3:36:
         2b:2d:30:af:e2:cc:5e:6b:a1:43:50:b6:29:c6:ad:6c:e7:17:
         9e:b2:cd:54:8c:cf:5b:56:80:8f:29:b4:46:14:eb:62:67:5f:
         91:81:42:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 21:08:27 2026 by rpki-client