Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft
File:                     dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft (raw, json)
Hash identifier:          dnilAQtq+BCvigOUNeooMbtyv5a394mEuCUEkxg+LSo=
Subject key identifier:   85:7B:97:5A:26:9C:92:ED:00:CE:13:51:D5:8A:C3:2F:06:22:4F:60
Authority key identifier: 74:DC:EA:A8:50:6A:2B:32:7F:87:A4:2D:07:41:AC:36:EE:DE:EB:49
Certificate issuer:       /CN=A91249C2/serialNumber=74DCEAA8506A2B327F87A42D0741AC36EEDEEB49
Certificate serial:       A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNzqqFBqKzJ_h6QtB0GsNu7e60k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft
Manifest number:          9E
Signing time:             Sun 05 Apr 2026 06:46:00 +0000
Manifest this update:     Sun 05 Apr 2026 06:46:00 +0000
Manifest next update:     Sun 12 Apr 2026 06:46:00 +0000
Files and hashes:         1: dNzqqFBqKzJ_h6QtB0GsNu7e60k.crl (hash: TehnUitlyicJtHhTGONp6unkgAxheJfIiq6TxmKgu78=)
                          2: ED3D0F9E48C911F0B59FB71DC4F9AE02.roa (hash: 3GDgDAyytAqGw1QJu48r4HFjWRXZvVa4Wmp9uyTwi6I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.crl
                          rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNzqqFBqKzJ_h6QtB0GsNu7e60k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 06:45:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167 (0xa7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91249C2, serialNumber=74DCEAA8506A2B327F87A42D0741AC36EEDEEB49
        Validity
            Not Before: Apr  5 06:46:00 2026 GMT
            Not After : Apr 12 06:46:00 2026 GMT
        Subject: CN=69d20528-920d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:55:c6:4d:f6:09:b6:86:50:21:9b:c9:74:ca:
                    e8:66:29:6e:76:49:36:42:40:dc:fe:c8:cf:07:2f:
                    5f:5f:8a:cc:73:cf:7b:c4:85:de:e8:50:96:c7:6d:
                    e2:bd:40:99:eb:ae:b8:ad:82:46:d6:3a:43:08:e2:
                    29:d0:5e:19:9d:ed:4d:d1:af:f7:ea:b1:a4:2e:90:
                    6f:38:2f:bd:37:67:68:0b:44:69:ee:02:27:a9:d3:
                    e7:65:82:29:37:84:23:d0:0e:dd:02:8c:35:8c:4f:
                    90:62:be:b7:83:1a:b5:3d:6b:5c:b8:6a:a3:fe:6c:
                    e6:e9:8f:56:c2:ec:a2:d6:c3:00:f0:d5:e5:f4:c2:
                    76:a0:82:5b:5a:50:10:a3:22:0a:d8:12:74:42:80:
                    bd:8a:4e:64:db:70:e1:69:bc:d7:0c:b7:b4:62:21:
                    bc:a4:61:61:6a:92:06:1c:f4:34:c2:4a:05:4b:24:
                    37:b0:2a:8c:05:43:58:1d:bb:e4:d1:9a:c1:e7:71:
                    b3:93:76:73:61:ea:04:78:32:6c:1d:40:8a:24:dd:
                    99:3e:83:77:a5:ff:34:5b:6a:16:ed:13:c4:bb:c9:
                    f6:30:57:85:56:ef:4f:5f:35:0b:57:8d:75:af:4d:
                    0d:b0:6c:a8:a2:97:5f:a1:75:2f:48:75:16:d6:2a:
                    47:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:7B:97:5A:26:9C:92:ED:00:CE:13:51:D5:8A:C3:2F:06:22:4F:60
            X509v3 Authority Key Identifier:
                keyid:74:DC:EA:A8:50:6A:2B:32:7F:87:A4:2D:07:41:AC:36:EE:DE:EB:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNzqqFBqKzJ_h6QtB0GsNu7e60k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:b6:9a:f2:e9:7b:f9:95:0f:f5:b3:e6:95:1b:ba:a3:93:cd:
         3e:67:27:47:72:77:5d:1e:af:71:54:10:9b:f1:5a:46:8b:ff:
         64:17:4e:50:b1:6e:81:75:3e:8e:12:92:e2:ff:18:8c:6b:53:
         6a:73:d1:53:31:c0:db:75:be:16:29:de:e8:4c:bd:82:fe:03:
         94:23:5f:ca:03:72:4b:66:94:63:28:32:fb:88:9a:f6:04:35:
         1c:03:86:42:e7:99:a1:4b:f1:ee:ce:6c:e3:46:b9:19:d4:31:
         d0:da:51:a3:41:6e:5f:1d:1b:bd:41:8e:c5:fb:43:b9:b6:58:
         d9:98:b9:f1:9d:4c:f1:ff:45:88:5b:1b:57:99:68:c2:72:b6:
         54:ae:b0:c2:df:4b:aa:bf:c0:6c:ae:3a:cf:df:46:62:a6:09:
         95:95:c8:06:d1:b8:5a:79:94:39:c5:04:41:06:c3:c7:d1:e3:
         88:45:c1:84:c1:89:73:4c:56:1d:63:12:4a:2b:ba:76:ff:1d:
         ad:fb:30:da:03:4b:40:3b:f8:d9:75:21:0c:3d:2a:3e:ae:9b:
         9a:3e:24:bd:0e:4b:36:dc:12:e7:cd:2e:c8:37:92:79:b3:fc:
         ee:34:bd:bc:e6:42:5a:81:81:24:af:be:b7:86:0b:c3:ef:1d:
         7e:5b:4b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:28 2026 by rpki-client