Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.mft
File:                     DDegHLYzYjRPtzlnYP2U2cm5fHo.mft (raw, json)
Hash identifier:          BSKacZmcNvRqFOrdlO+wi7Bt2R+PnmilIEgeEqyFCic=
Subject key identifier:   14:28:23:39:13:3B:77:49:C2:2D:B7:2C:9F:DD:A4:AD:9B:CD:D3:12
Authority key identifier: 0C:37:A0:1C:B6:33:62:34:4F:B7:39:67:60:FD:94:D9:C9:B9:7C:7A
Certificate issuer:       /CN=A912B64D/serialNumber=0C37A01CB63362344FB7396760FD94D9C9B97C7A
Certificate serial:       01EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDegHLYzYjRPtzlnYP2U2cm5fHo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.mft
Manifest number:          01E9
Signing time:             Sun 05 Apr 2026 02:51:27 +0000
Manifest this update:     Sun 05 Apr 2026 02:51:27 +0000
Manifest next update:     Sun 12 Apr 2026 02:51:27 +0000
Files and hashes:         1: DDegHLYzYjRPtzlnYP2U2cm5fHo.crl (hash: eEIjcRaTCxOomfrIQoTGnMJ4oTzJmLKg6mWZwVhX+ls=)
                          2: 865B3F7C467C11EEBDE3D43CC4F9AE02.roa (hash: 6/5fQKVgdzi8J2+DuKLmp0N2nLhrO/0HTpuAZFS2K3s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.crl
                          rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDegHLYzYjRPtzlnYP2U2cm5fHo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 02:51:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 494 (0x1ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B64D, serialNumber=0C37A01CB63362344FB7396760FD94D9C9B97C7A
        Validity
            Not Before: Apr  5 02:51:27 2026 GMT
            Not After : Apr 12 02:51:27 2026 GMT
        Subject: CN=69d1ce2f-8aab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d2:77:a1:76:a2:a8:47:44:16:41:44:b5:b2:
                    e3:2a:1c:21:4d:8e:06:3c:a2:c2:90:42:95:bd:5a:
                    79:a3:52:1d:8a:5e:4f:79:ec:1a:bb:e1:b3:37:7c:
                    92:89:f1:0e:00:20:77:3d:d0:ed:ac:32:f1:c2:8d:
                    f4:27:b2:a8:a2:45:4c:5a:6e:98:6f:d2:38:0d:ee:
                    94:37:bd:ff:9b:c3:1c:48:ed:bd:d4:ba:f7:23:ea:
                    86:05:96:b5:93:c2:62:93:a3:d5:54:f9:01:62:68:
                    7f:aa:e9:7e:95:2d:05:58:90:8f:54:cf:a4:0f:86:
                    dd:f2:8a:9c:cd:a9:3a:8f:55:79:e4:93:5a:09:cb:
                    9d:28:8b:ef:28:e2:14:e4:18:21:97:5e:d6:1c:cd:
                    af:a3:2a:96:16:a7:be:fc:89:7f:a4:89:e3:b8:09:
                    d8:43:9e:96:ca:a6:c4:20:fb:2d:cb:19:7c:75:23:
                    77:a2:83:7a:81:11:1c:c7:b3:67:c6:dd:17:28:03:
                    99:6e:ea:f2:9f:ea:aa:c9:9e:ca:6f:03:59:b5:f3:
                    56:2e:c8:55:0d:f8:fa:fe:8a:3c:0e:17:41:9b:fd:
                    17:f6:90:55:43:be:31:b9:f8:3d:ee:44:2d:83:a2:
                    34:c1:7f:e1:0f:74:04:81:e3:2c:45:9e:e5:76:c8:
                    85:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:28:23:39:13:3B:77:49:C2:2D:B7:2C:9F:DD:A4:AD:9B:CD:D3:12
            X509v3 Authority Key Identifier:
                keyid:0C:37:A0:1C:B6:33:62:34:4F:B7:39:67:60:FD:94:D9:C9:B9:7C:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDegHLYzYjRPtzlnYP2U2cm5fHo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:c7:0a:7c:25:99:4c:45:77:d4:31:1d:6d:b1:cd:8f:11:78:
         33:91:d7:73:39:92:78:17:60:96:2b:1f:82:ef:cc:e6:e1:aa:
         ff:f9:a3:1b:84:fd:94:5c:41:ca:44:33:fc:3b:75:1a:ba:a2:
         0c:f7:95:16:23:f0:b3:dc:80:17:90:4f:54:d3:b9:9c:29:da:
         23:70:2e:27:61:96:c3:63:b0:2f:b4:39:53:75:31:27:cc:82:
         ff:f6:2e:71:31:27:8b:eb:b7:0b:ab:ce:82:a3:93:eb:97:90:
         45:da:71:54:5c:4e:a4:5c:b5:b7:40:57:a1:65:21:fa:dc:cc:
         97:86:7b:13:44:bc:3e:b7:37:fd:8a:a6:c9:2d:98:79:6c:10:
         19:80:6b:8a:21:13:58:0d:8d:37:df:76:d7:fa:b4:04:dd:f3:
         cc:21:18:60:c7:b5:30:d2:02:6f:74:5c:f9:66:f3:39:1c:bc:
         61:73:f2:3f:3b:21:16:45:1a:82:13:0f:0d:f9:30:27:7d:94:
         cb:97:b4:35:49:bc:85:64:2a:1e:04:0c:d8:29:5f:e0:ed:b5:
         fc:b9:c5:48:23:82:4b:ac:c4:63:db:cf:13:eb:29:02:43:94:
         0a:14:0b:15:4b:0a:c7:57:7e:53:77:2e:67:ed:ef:1d:d6:0d:
         db:1e:a5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:54:00 2026 by rpki-client