Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft
File:                     dNMDVT5gXDFRHphkxWZZnU24o5M.mft (raw, json)
Hash identifier:          ODXvUmlA/lz4Mpl1X46f9y7924+E9f2Wsd7krVaCtnQ=
Subject key identifier:   18:29:9A:49:C5:A0:90:02:D4:23:CF:30:0F:CE:67:64:F4:60:87:88
Authority key identifier: 74:D3:03:55:3E:60:5C:31:51:1E:98:64:C5:66:59:9D:4D:B8:A3:93
Certificate issuer:       /CN=A912C1EC/serialNumber=74D303553E605C31511E9864C566599D4DB8A393
Certificate serial:       05AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNMDVT5gXDFRHphkxWZZnU24o5M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft
Manifest number:          05A2
Signing time:             Thu 28 May 2026 23:02:43 +0000
Manifest this update:     Thu 28 May 2026 23:02:42 +0000
Manifest next update:     Thu 04 Jun 2026 23:02:42 +0000
Files and hashes:         1: dNMDVT5gXDFRHphkxWZZnU24o5M.crl (hash: b+1tW5v2MtPudd3aEJDy0XomSXhEseR+prFKwDRGhlw=)
                          2: 92C0558C1A3B11EC91C03279C4F9AE02.roa (hash: O7zzjDBWEUSYqll/hl0eb8ojldYcS/JklLQk1YXiDkE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.crl
                          rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNMDVT5gXDFRHphkxWZZnU24o5M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Jun 2026 23:02:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1452 (0x5ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C1EC, serialNumber=74D303553E605C31511E9864C566599D4DB8A393
        Validity
            Not Before: May 28 23:02:42 2026 GMT
            Not After : Jun  4 23:02:42 2026 GMT
        Subject: CN=6a18c992-7703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1c:81:b3:23:6f:d9:bf:51:90:b7:89:bd:89:
                    cc:bc:39:38:22:c2:d3:b6:19:5a:8f:bb:63:ec:fc:
                    6b:ac:08:c6:c6:58:23:1e:0d:cb:49:5a:09:8a:ec:
                    02:d7:cf:4c:e9:a0:09:7a:00:d3:93:90:b8:ee:0b:
                    9f:3b:54:27:69:99:e4:f7:ca:57:91:96:22:e4:21:
                    25:0a:84:bd:bb:37:95:fd:51:b9:30:f2:9e:0a:f7:
                    08:2c:8a:2f:de:b1:9b:0f:8a:c8:28:2f:bd:e6:05:
                    8a:04:3b:e2:17:08:75:25:59:3c:5a:5c:bf:16:40:
                    a7:da:c0:d7:5e:c9:d6:c2:22:98:43:d9:7e:c8:b2:
                    89:7e:71:75:d3:79:02:20:c3:8f:81:60:ce:03:d5:
                    c5:0e:d8:ba:dc:54:5e:38:da:df:88:27:9b:f9:85:
                    4e:6b:28:bf:d9:5c:10:df:67:15:54:ec:9e:eb:20:
                    d5:b4:c3:06:d2:e4:bc:ac:30:fc:aa:7a:6c:c6:cb:
                    28:72:7b:10:a2:c6:01:74:06:2b:0c:c5:b6:07:3b:
                    b5:88:3b:42:b6:09:fc:39:ff:1c:b7:d8:af:f7:b9:
                    20:e1:65:4f:65:14:10:9e:9a:5c:ac:7c:ea:69:13:
                    d4:f6:72:4d:ea:dd:85:f6:e9:78:50:69:c4:10:98:
                    9f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:29:9A:49:C5:A0:90:02:D4:23:CF:30:0F:CE:67:64:F4:60:87:88
            X509v3 Authority Key Identifier:
                keyid:74:D3:03:55:3E:60:5C:31:51:1E:98:64:C5:66:59:9D:4D:B8:A3:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNMDVT5gXDFRHphkxWZZnU24o5M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:8c:88:11:65:57:0a:4b:97:5c:75:1e:76:ac:0d:47:e0:45:
         24:f8:dc:75:b9:cb:12:23:53:c7:d4:88:97:9f:e9:43:e3:9e:
         94:36:d5:91:66:6b:9e:86:78:4b:ad:42:37:11:7f:0c:50:cb:
         d8:07:05:71:5e:80:85:89:a9:96:b2:55:4c:70:7c:5f:3e:8b:
         93:68:85:34:2e:61:87:0a:a0:b3:16:62:3c:bd:99:17:5b:a2:
         29:bd:14:9f:36:40:f8:fb:64:5c:3f:a2:dd:22:f9:cd:76:0c:
         55:7b:29:24:17:88:16:07:fe:ab:a5:b4:2a:c6:63:dd:9b:d4:
         72:0d:26:10:85:38:c4:0f:f0:68:a6:d1:55:86:ee:70:fe:93:
         f4:cb:88:ad:7c:dd:c0:90:0c:ef:43:93:33:a4:a1:d5:1c:e1:
         65:41:2c:c3:1c:1b:de:d4:f9:a0:dd:0c:6e:b8:6b:fe:20:54:
         10:e8:8f:0a:9a:c9:77:77:f7:21:0d:9d:14:e6:6a:c8:7b:ed:
         56:02:0d:1e:54:91:06:41:b8:69:a1:3b:21:de:a6:4c:4b:a9:
         0c:4a:dc:cc:83:a9:98:d6:5c:a4:46:0a:fe:cc:c0:75:e6:a8:
         2b:33:3d:8a:95:a7:b6:af:49:09:06:b3:4a:ca:58:01:bf:8f:
         ca:b4:70:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 17:08:25 2026 by rpki-client