Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft
File:                     1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft (raw, json)
Hash identifier:          nxARyyiu5nuXRXaooHQ6dhsKqkILObKuEoQhNxY/+KQ=
Subject key identifier:   3F:F6:A3:20:65:45:40:DB:44:FD:20:1D:B2:15:C7:BC:0D:CD:98:9F
Authority key identifier: D4:39:EE:D6:0D:31:97:09:87:24:74:B9:07:06:63:04:73:B6:DE:5E
Certificate issuer:       /CN=A911A70E/serialNumber=D439EED60D319709872474B90706630473B6DE5E
Certificate serial:       026F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Dnu1g0xlwmHJHS5BwZjBHO23l4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft
Manifest number:          0262
Signing time:             Sun 05 Apr 2026 01:50:24 +0000
Manifest this update:     Sun 05 Apr 2026 01:50:23 +0000
Manifest next update:     Sun 12 Apr 2026 01:50:23 +0000
Files and hashes:         1: 1Dnu1g0xlwmHJHS5BwZjBHO23l4.crl (hash: WWE/NmJkA7npKyiHpKMPk0j/o/hg2Icr/gGjagS6e90=)
                          2: 5169DA6EA05D11ED9406DE26C4F9AE02.roa (hash: s7Oir+kBK6V7D0xuqpSVbybxeozVx8Hx3+pya2RC/X0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.crl
                          rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Dnu1g0xlwmHJHS5BwZjBHO23l4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 01:50:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 623 (0x26f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A70E, serialNumber=D439EED60D319709872474B90706630473B6DE5E
        Validity
            Not Before: Apr  5 01:50:23 2026 GMT
            Not After : Apr 12 01:50:23 2026 GMT
        Subject: CN=69d1bfe0-2792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:69:38:89:80:8b:e9:ce:f7:a2:0a:f4:50:cf:
                    6d:40:da:24:3b:bc:6b:6c:c7:11:99:3f:45:9c:6a:
                    21:30:6a:25:4e:c2:aa:be:59:41:50:b1:10:00:f1:
                    3e:de:e8:90:e0:77:dd:12:c0:a4:05:b5:bb:2e:8c:
                    16:cd:3a:fd:f9:25:ac:22:7e:a0:52:d1:1f:cb:7b:
                    7c:7c:b6:4f:57:fa:df:e7:86:3e:01:a2:f6:54:4f:
                    23:70:24:b5:78:e6:48:b0:e1:1d:23:85:2f:01:bd:
                    f1:42:a8:a3:4b:b9:83:47:f3:5d:01:a0:ad:bc:d2:
                    bf:98:b7:ff:02:ea:ff:f4:44:d5:39:61:02:eb:a0:
                    27:33:69:35:01:2a:ba:10:9f:e3:3b:a9:83:fc:a6:
                    dd:c9:08:11:fc:99:a5:2c:05:67:6c:68:c4:e6:eb:
                    82:38:3f:82:71:fd:9c:88:1c:f6:90:b1:3a:26:74:
                    b4:77:8e:8d:49:00:4b:a4:47:7c:85:f5:14:01:fc:
                    57:65:59:d3:61:26:15:bb:c5:dd:5a:ce:a0:d5:c2:
                    e9:99:75:b4:00:14:26:a8:92:e3:d1:e0:0d:28:73:
                    a0:c8:a0:7d:b4:b3:60:3b:22:05:15:e1:1d:19:4a:
                    3a:c1:06:73:96:ff:9a:d0:72:9c:ef:91:37:ad:f5:
                    3d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:F6:A3:20:65:45:40:DB:44:FD:20:1D:B2:15:C7:BC:0D:CD:98:9F
            X509v3 Authority Key Identifier:
                keyid:D4:39:EE:D6:0D:31:97:09:87:24:74:B9:07:06:63:04:73:B6:DE:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Dnu1g0xlwmHJHS5BwZjBHO23l4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:36:4b:e2:07:5f:1a:2c:bf:ae:da:81:e4:38:22:8a:3f:8c:
         87:a8:d9:a5:28:35:9b:23:9e:64:4a:e9:da:24:df:1e:2a:50:
         36:32:5d:5f:d0:a4:bc:9b:6d:e3:8e:a6:80:c1:39:44:b9:ef:
         35:4d:a3:16:eb:77:bd:a9:18:2f:39:1e:57:d6:2a:ce:0d:92:
         8f:73:0a:e3:f5:89:7e:de:31:c0:0e:14:a5:0c:29:5d:fe:23:
         69:31:28:07:90:a1:88:f6:8f:8d:fb:08:f9:f9:43:dc:87:fa:
         58:36:56:51:37:6e:10:c3:36:a7:1f:56:bc:34:4e:5d:ef:75:
         74:1c:f1:02:38:b7:64:5d:a4:e1:bb:1d:47:62:ec:b0:dc:b4:
         d4:a5:3c:8d:b3:c3:6f:da:19:ed:a5:a9:de:7e:09:f8:4f:9d:
         1f:4d:cf:f8:fc:3a:10:2a:c3:91:a1:b1:0b:1d:77:8d:d4:32:
         8d:5e:22:d7:50:7e:62:d8:68:09:b0:ff:4e:1b:c2:ec:30:d7:
         4a:0c:9c:f5:45:38:14:9f:f8:15:06:17:fa:44:52:ec:19:b9:
         fd:3c:77:2d:43:8f:8e:39:fe:eb:98:04:48:b6:15:a1:05:4f:
         c9:0e:cf:6d:69:cd:8e:b5:c2:ab:48:4c:99:37:90:03:74:ef:
         1d:7e:bb:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:45 2026 by rpki-client