Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.mft
File:                     dJiIGBZVJCNyxOChDgY3mbhw3hs.mft (raw, json)
Hash identifier:          iajpU3Iw0g4kh3o4ALMnNYwBBAzw8NK/Ae/L++d1cMs=
Subject key identifier:   22:4B:EB:57:FA:E2:0E:7B:26:B3:AE:A2:D7:C5:C4:11:77:D1:5C:CD
Authority key identifier: 74:98:88:18:16:55:24:23:72:C4:E0:A1:0E:06:37:99:B8:70:DE:1B
Certificate issuer:       /CN=A91273F9/serialNumber=749888181655242372C4E0A10E063799B870DE1B
Certificate serial:       03E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJiIGBZVJCNyxOChDgY3mbhw3hs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.mft
Manifest number:          03DD
Signing time:             Tue 05 May 2026 00:38:23 +0000
Manifest this update:     Tue 05 May 2026 00:38:23 +0000
Manifest next update:     Tue 12 May 2026 00:38:23 +0000
Files and hashes:         1: dJiIGBZVJCNyxOChDgY3mbhw3hs.crl (hash: pGwa8rCTpUA1aZ5auF4n+GpuTYrl/h2wXdH8dXfwEQM=)
                          2: 0A7E4D02D56B11EF8DC4E152C4F9AE02.roa (hash: KQpsXyMxcmg1AgaWZZ/7NN+OSEaGodCj8mQ0uDG/BGE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.crl
                          rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJiIGBZVJCNyxOChDgY3mbhw3hs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 May 2026 22:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 997 (0x3e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91273F9, serialNumber=749888181655242372C4E0A10E063799B870DE1B
        Validity
            Not Before: May  5 00:38:23 2026 GMT
            Not After : May 12 00:38:23 2026 GMT
        Subject: CN=69f93bff-c168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4f:3c:09:1a:5b:be:4c:97:b3:a1:4a:07:1a:
                    5a:86:e9:a0:cd:11:d0:e7:d7:60:22:de:bf:21:dc:
                    6c:16:fa:c4:f5:f3:b8:7f:0c:c5:36:17:b6:17:3e:
                    e9:a7:5d:a0:42:02:a9:c9:90:4a:d6:50:07:2e:3a:
                    a5:1b:2e:a6:ff:df:f1:95:c2:61:25:2c:a1:d2:0a:
                    4c:d2:b8:8c:d0:10:c9:e7:1e:19:e0:0e:53:98:3e:
                    30:b6:9e:64:ca:b4:b4:01:98:c3:fb:5c:c3:7b:d2:
                    25:3c:5d:9b:5a:84:35:a5:30:9e:13:5b:18:d8:16:
                    1e:e3:ab:de:d2:40:e8:e1:cb:42:ca:66:84:9e:98:
                    c0:26:0f:b8:0e:97:eb:fb:ab:b4:ce:47:6f:a5:cf:
                    ec:8e:fa:94:f0:5d:a6:7b:4c:60:5f:3a:6c:60:b7:
                    c2:a3:a7:ea:0e:3d:d7:0b:9a:b6:52:4f:31:34:ea:
                    47:bf:b3:a3:99:ad:fa:a1:2d:b9:30:7c:d6:99:6e:
                    c5:88:ca:2b:96:34:6e:7d:b3:98:96:52:3b:f0:4f:
                    95:ed:98:4b:74:3f:e1:1f:3c:d7:25:29:d8:28:fc:
                    08:31:35:82:af:13:15:ec:36:08:54:2c:fb:0a:4b:
                    40:1b:e2:4d:9f:40:73:76:8f:c9:64:68:f5:60:05:
                    d7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:4B:EB:57:FA:E2:0E:7B:26:B3:AE:A2:D7:C5:C4:11:77:D1:5C:CD
            X509v3 Authority Key Identifier:
                keyid:74:98:88:18:16:55:24:23:72:C4:E0:A1:0E:06:37:99:B8:70:DE:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJiIGBZVJCNyxOChDgY3mbhw3hs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:9c:16:03:e5:3f:12:c3:a2:4e:99:8e:7f:c0:40:67:55:d1:
         67:5f:cc:25:cd:44:4b:71:fb:6f:14:f4:27:74:09:15:c9:7d:
         81:8f:82:28:4f:05:b2:0e:3b:d6:45:eb:67:57:58:72:2b:14:
         7f:8c:7e:6c:4f:51:86:04:33:13:47:bb:bc:aa:bc:45:53:47:
         2a:03:26:37:71:b7:d0:85:82:c2:29:b0:a2:81:34:0c:65:bf:
         06:b7:b8:db:5a:21:17:c7:bf:17:49:4e:f0:97:1c:44:7d:5d:
         1c:7a:3e:e1:7f:5a:a2:2a:59:0e:62:95:fa:04:92:41:ba:ad:
         5c:d9:ff:55:1d:f8:e2:41:82:7f:57:1a:02:3d:35:a1:6e:08:
         66:74:a9:ee:10:ac:a5:43:35:56:c9:54:4a:65:1e:08:50:fd:
         da:88:9d:3e:8a:f6:85:16:b3:13:70:cc:a0:02:a5:29:1c:22:
         bf:ff:98:ad:aa:b2:31:9e:e5:cf:1b:fc:ac:9b:b7:69:3e:de:
         7f:31:1d:fe:b5:c1:12:7c:86:24:9b:b5:12:2d:7e:92:98:4b:
         cb:66:8c:d1:0a:c4:86:4a:c4:f5:e8:aa:db:7c:72:26:9a:7a:
         82:00:85:4a:c7:d8:a2:97:14:a8:5d:28:b2:44:77:96:a2:c4:
         71:78:f1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 00:20:48 2026 by rpki-client