Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912981B/C58CF84CCA8A11EEB056E61FC4F9AE02/DmJr6z1CBZMzO_tMhYMHqJnqfco.mft
File:                     DmJr6z1CBZMzO_tMhYMHqJnqfco.mft (raw, json)
Hash identifier:          xIJFTB4KhtENixSqoDosuqc2gHUh1OJIcUpesy4MgTA=
Subject key identifier:   FF:5D:9D:CD:F1:CB:0E:D0:9E:9A:55:B9:EF:6D:CA:0F:B2:4E:38:37
Authority key identifier: 0E:62:6B:EB:3D:42:05:93:33:3B:FB:4C:85:83:07:A8:99:EA:7D:CA
Certificate issuer:       /CN=A912981B/serialNumber=0E626BEB3D420593333BFB4C858307A899EA7DCA
Certificate serial:       0191
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmJr6z1CBZMzO_tMhYMHqJnqfco.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912981B/C58CF84CCA8A11EEB056E61FC4F9AE02/DmJr6z1CBZMzO_tMhYMHqJnqfco.mft
Manifest number:          0191
Signing time:             Sun 05 Apr 2026 03:49:58 +0000
Manifest this update:     Sun 05 Apr 2026 03:49:58 +0000
Manifest next update:     Sun 12 Apr 2026 03:49:58 +0000
Files and hashes:         1: DmJr6z1CBZMzO_tMhYMHqJnqfco.crl (hash: 6hT5aGxKgkVuztkGiFlLOV3gKDVfG9LKubTyNo1fkcU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912981B/C58CF84CCA8A11EEB056E61FC4F9AE02/DmJr6z1CBZMzO_tMhYMHqJnqfco.crl
                          rsync://rpki.apnic.net/member_repository/A912981B/C58CF84CCA8A11EEB056E61FC4F9AE02/DmJr6z1CBZMzO_tMhYMHqJnqfco.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmJr6z1CBZMzO_tMhYMHqJnqfco.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 03:49:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 401 (0x191)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912981B, serialNumber=0E626BEB3D420593333BFB4C858307A899EA7DCA
        Validity
            Not Before: Apr  5 03:49:58 2026 GMT
            Not After : Apr 12 03:49:58 2026 GMT
        Subject: CN=69d1dbe6-8b35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:72:1a:3a:6e:99:b7:12:aa:c1:02:e5:f0:bb:
                    78:13:26:5c:33:57:5f:c3:07:3c:1a:81:1d:2e:cb:
                    7a:37:91:98:c8:7d:12:f8:ba:9d:60:33:ac:a7:8e:
                    58:b6:c8:86:dd:c7:78:bb:e0:9f:a1:27:1e:b5:cd:
                    7d:59:37:61:cb:d0:e1:72:71:63:c2:02:75:01:a5:
                    55:99:33:4c:d0:77:e8:17:c8:cb:19:75:84:87:ba:
                    b1:4d:8d:f0:51:f1:84:d1:3c:40:44:33:df:22:6c:
                    da:ca:38:6c:28:81:74:79:21:2e:4a:79:13:af:9c:
                    ed:00:47:fc:40:d5:19:70:d6:74:c8:bb:06:cf:d8:
                    97:20:fe:e8:08:fd:be:e2:27:ee:ce:d9:31:3e:a2:
                    85:db:0f:70:55:d7:0a:c6:59:cb:40:1c:b6:ea:d6:
                    45:d1:64:4a:71:5c:ce:a4:a8:47:5b:c0:c7:81:9b:
                    97:8d:1f:69:e4:2e:79:bb:13:db:1a:28:81:71:22:
                    d3:b8:80:18:d6:6c:c5:94:50:2c:b9:cc:bd:dc:23:
                    d5:c1:ca:6a:91:23:12:49:82:0d:05:fd:b8:69:8b:
                    64:68:00:51:8c:62:af:54:54:2b:34:d0:dd:80:ed:
                    6c:2b:26:48:54:c3:b9:83:46:8b:bb:a4:64:fd:67:
                    9c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:5D:9D:CD:F1:CB:0E:D0:9E:9A:55:B9:EF:6D:CA:0F:B2:4E:38:37
            X509v3 Authority Key Identifier:
                keyid:0E:62:6B:EB:3D:42:05:93:33:3B:FB:4C:85:83:07:A8:99:EA:7D:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912981B/C58CF84CCA8A11EEB056E61FC4F9AE02/DmJr6z1CBZMzO_tMhYMHqJnqfco.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmJr6z1CBZMzO_tMhYMHqJnqfco.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912981B/C58CF84CCA8A11EEB056E61FC4F9AE02/DmJr6z1CBZMzO_tMhYMHqJnqfco.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:7e:7b:0a:4b:d6:4e:56:9b:eb:ee:f4:e8:87:65:ad:b1:0e:
         ee:d0:42:7b:1a:d4:35:ba:d7:30:43:9f:bc:94:ab:a0:00:0f:
         57:b3:6e:da:99:ab:e8:18:39:d9:0f:87:e7:88:b8:79:cc:15:
         96:7c:ae:88:89:a2:c0:a2:a2:b9:42:28:ce:0b:df:e3:9a:fd:
         f7:ad:5c:4b:bf:ca:5b:ae:56:5f:95:b4:33:b2:5a:47:69:ef:
         de:24:f4:61:c9:49:2c:48:f6:95:a9:13:de:55:8e:7a:6a:2c:
         d3:f7:c0:5a:7f:bb:8b:ac:6e:de:d2:b1:35:97:0a:6c:42:4e:
         53:fc:2a:ff:09:35:17:de:6e:a0:16:a3:97:90:bb:d9:7b:45:
         cc:7e:7b:83:53:5f:f1:1e:50:07:5b:90:02:ff:d4:8c:42:8a:
         3d:7f:b3:5d:65:b3:5a:e3:04:6b:96:2f:50:17:55:a7:69:7d:
         b6:4f:1c:27:0d:30:f3:70:1a:6f:ad:19:ff:06:9b:fb:93:9a:
         99:0d:e7:10:eb:3c:be:03:7b:df:16:fd:3e:d4:00:2e:76:51:
         75:5e:1b:0f:60:0f:38:44:cc:6f:e0:38:20:08:16:48:56:b1:
         b0:2f:87:3a:1a:c3:e2:26:61:cb:c4:0d:88:53:5b:6b:61:35:
         1f:f0:6a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:04:11 2026 by rpki-client