Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft
File:                     dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft (raw, json)
Hash identifier:          4MVIHrTAPGLM3c/2JgQDymwI1GQqEfjJX+l+qV0YAGw=
Subject key identifier:   E9:CD:36:80:99:AF:C6:89:54:2D:11:84:78:DB:59:C7:3F:9C:04:88
Authority key identifier: 76:4D:1C:E6:72:7D:31:BD:8F:39:66:2E:20:04:C4:68:9D:A6:B7:E5
Certificate issuer:       /CN=A911D971/serialNumber=764D1CE6727D31BD8F39662E2004C4689DA6B7E5
Certificate serial:       02BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft
Manifest number:          02A0
Signing time:             Sun 05 Apr 2026 01:22:51 +0000
Manifest this update:     Sun 05 Apr 2026 01:22:50 +0000
Manifest next update:     Sun 12 Apr 2026 01:22:50 +0000
Files and hashes:         1: dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl (hash: 75modVeDMNgJj0bjFqq2XT7Whl+psowGcaV5xb8rsLE=)
                          2: C5BEEE3EFDD111F08B1371286C6F56BC.roa (hash: NpaCQzSS0D4oy4yH/huBRH97YUi+QS/H8/gv17FBETo=)
                          3: 197CE9C2C0C111EE84A55128C4F9AE02.roa (hash: jZIgzMxV7HHYSorF6uqDrUanTlB4VELgicqdZyoWx9g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl
                          rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 01:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 700 (0x2bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D971, serialNumber=764D1CE6727D31BD8F39662E2004C4689DA6B7E5
        Validity
            Not Before: Apr  5 01:22:50 2026 GMT
            Not After : Apr 12 01:22:50 2026 GMT
        Subject: CN=69d1b96a-5030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8b:7a:c5:32:f3:ed:ea:89:69:1c:7f:13:dc:
                    1b:20:95:21:9f:47:ba:04:e4:46:0b:c0:7f:a6:72:
                    b2:08:6c:ad:53:f9:8b:c0:91:c2:88:48:11:2e:8b:
                    a9:db:35:e5:97:fa:52:59:ed:95:26:b8:ac:15:fb:
                    1c:1b:d8:a8:c2:15:36:e7:f8:20:4a:b0:f6:2f:ce:
                    cb:68:29:82:7e:45:74:28:e7:05:ec:ea:d6:24:aa:
                    df:6b:2d:30:85:1c:22:c5:55:04:90:2a:7c:f9:a6:
                    5b:b2:d5:a5:9a:58:7e:d0:92:be:47:f4:f7:98:da:
                    4e:c4:9d:cf:0f:87:56:82:ee:d9:d8:68:27:d0:5e:
                    58:12:a3:0b:f5:bb:17:8e:7f:67:81:e8:4e:20:75:
                    f3:ed:5e:68:53:d6:32:7c:71:5a:68:53:42:b1:f9:
                    40:78:15:e8:ef:1d:bc:5f:e4:53:15:48:2d:8d:d7:
                    5b:12:d5:6f:90:4e:e5:4a:78:30:29:27:1e:cd:18:
                    a0:f3:2b:26:91:71:e5:37:5c:11:ca:8b:87:31:65:
                    1d:ad:6b:df:9a:2e:cd:f3:6f:f5:2c:0a:14:7f:c9:
                    df:0d:ca:f6:4f:17:dc:d2:01:c1:16:0e:6b:96:3d:
                    0a:01:9b:28:b9:31:71:fb:25:bf:90:ef:81:b1:01:
                    28:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:CD:36:80:99:AF:C6:89:54:2D:11:84:78:DB:59:C7:3F:9C:04:88
            X509v3 Authority Key Identifier:
                keyid:76:4D:1C:E6:72:7D:31:BD:8F:39:66:2E:20:04:C4:68:9D:A6:B7:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:d7:c4:19:98:db:61:28:3f:6f:be:d7:4b:c9:c9:2c:a7:5e:
         ab:6b:01:24:e6:ff:97:7b:40:e3:c8:7d:68:f7:ff:2b:85:c3:
         5f:c5:7a:d8:59:53:b6:ce:72:73:ef:37:97:f5:31:fb:86:76:
         be:3c:36:25:b2:b2:82:ec:c4:79:6a:84:fe:01:66:d8:b0:a2:
         3d:02:55:58:ec:b0:1a:80:6b:5b:e0:9b:9c:c2:71:43:7c:30:
         dc:11:3b:a7:41:cd:bf:d5:ed:6c:90:35:43:ef:94:00:31:5a:
         8f:06:4a:5e:c3:47:4e:94:2c:1d:c9:d4:b2:17:40:22:d8:03:
         ea:96:cc:1a:fc:94:f5:a0:49:aa:74:37:78:bd:b0:7d:18:77:
         2c:90:36:fb:89:a9:db:f4:da:76:6e:c0:40:65:20:0d:ff:d5:
         27:da:f9:30:0a:3f:89:34:28:12:42:3f:d0:04:f6:c8:5b:0a:
         4a:bc:f9:73:5b:ef:80:ac:b4:8d:10:05:28:50:68:db:47:40:
         f0:8e:40:dc:ae:3d:da:06:d1:4d:8f:5a:08:fe:1c:7e:df:7f:
         7c:cb:c3:fd:ca:c0:ca:87:f7:6d:23:ae:2a:b5:a1:9c:8d:85:
         12:10:2c:23:c1:71:cd:b9:85:ae:b9:53:d9:95:a9:90:c3:aa:
         2e:53:fe:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:20:29 2026 by rpki-client