Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.mft
File:                     DmpDAZVo-XcRTm1GWwpvVWn1OD4.mft (raw, json)
Hash identifier:          5fceJf0jOl+7Y1dz4C4uXbxpBkS6mTfrQJoik4GE66w=
Subject key identifier:   B9:B9:40:73:3C:0E:26:1F:DA:C7:A7:DF:BE:C4:0C:D3:B4:9E:30:2B
Authority key identifier: 0E:6A:43:01:95:68:F9:77:11:4E:6D:46:5B:0A:6F:55:69:F5:38:3E
Certificate issuer:       /CN=A912FE31/serialNumber=0E6A43019568F977114E6D465B0A6F5569F5383E
Certificate serial:       0A96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmpDAZVo-XcRTm1GWwpvVWn1OD4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.mft
Manifest number:          0A8B
Signing time:             Thu 12 Mar 2026 19:16:59 +0000
Manifest this update:     Thu 12 Mar 2026 19:16:59 +0000
Manifest next update:     Thu 19 Mar 2026 19:16:59 +0000
Files and hashes:         1: DmpDAZVo-XcRTm1GWwpvVWn1OD4.crl (hash: ppc2aqdqqquXOtmD6O2dYr2oe5mc1qVwd3KGthW4Rns=)
                          2: A42489D8799211EAA230E17FC4F9AE02.roa (hash: ISmZrMAJhwcmsro9bEaqHnNsjBknpoO3JY21muedtdI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.crl
                          rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmpDAZVo-XcRTm1GWwpvVWn1OD4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 19:16:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2710 (0xa96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FE31, serialNumber=0E6A43019568F977114E6D465B0A6F5569F5383E
        Validity
            Not Before: Mar 12 19:16:59 2026 GMT
            Not After : Mar 19 19:16:59 2026 GMT
        Subject: CN=69b3112b-608c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3b:d6:1c:5a:88:b9:6c:16:cb:26:e8:b5:a5:
                    1a:b6:cd:1e:1d:86:c5:75:0e:be:f0:01:83:5d:45:
                    10:e7:ec:65:ff:a9:a1:1b:eb:36:76:2f:30:97:06:
                    50:a4:ba:2c:75:5c:a6:ae:b6:1d:f9:10:ac:b1:5a:
                    5b:38:a4:0c:e0:f2:aa:92:f1:86:13:83:03:8f:11:
                    37:a7:0a:84:5c:00:0c:8f:ba:fc:4b:b2:19:6e:5d:
                    3f:3d:d8:d9:e1:74:fe:be:0f:3b:7c:a3:62:52:a0:
                    78:bb:24:a4:9e:32:70:c6:05:a2:f8:4c:9c:50:8b:
                    3c:68:cb:58:39:a1:e7:4e:04:01:99:17:33:9a:0d:
                    00:21:a1:e1:7a:3c:22:09:f4:8b:e7:7d:dc:a8:dd:
                    1a:7e:61:ed:e7:21:ce:94:be:8a:90:e1:aa:66:91:
                    55:48:3d:d3:58:5b:3f:18:9e:81:61:5e:0b:dc:fb:
                    1b:d7:f0:87:c6:45:da:45:da:d5:c8:72:97:b3:bf:
                    ed:05:38:f7:2d:06:56:65:5c:52:71:29:c2:85:6a:
                    0f:4a:83:23:42:1d:b8:c6:51:54:02:46:c3:5c:ae:
                    7e:99:c0:1b:96:3e:86:74:19:cd:c5:ec:3b:ec:11:
                    14:6f:5b:6d:b7:71:98:ff:af:f4:ff:20:b6:d6:99:
                    56:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B9:40:73:3C:0E:26:1F:DA:C7:A7:DF:BE:C4:0C:D3:B4:9E:30:2B
            X509v3 Authority Key Identifier:
                keyid:0E:6A:43:01:95:68:F9:77:11:4E:6D:46:5B:0A:6F:55:69:F5:38:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmpDAZVo-XcRTm1GWwpvVWn1OD4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:2d:fc:94:18:21:1f:70:1f:60:ef:6e:3c:51:7a:00:b4:79:
         98:0d:99:6e:97:bf:a7:38:2c:89:fa:1a:64:70:97:53:dd:07:
         fe:9c:a2:ad:64:ec:33:32:4b:aa:7a:ff:d7:a2:df:8b:13:f6:
         0a:ec:1b:2d:48:f0:fc:f8:6e:7f:1e:ed:12:ff:de:7d:f1:22:
         63:66:67:31:81:fe:61:1b:e4:86:8e:24:1c:0f:9b:29:2f:e8:
         1e:52:17:e3:be:33:7e:ba:94:c9:46:63:ee:95:f8:e7:b5:c7:
         2d:a0:0e:1e:ca:d3:66:8b:98:b3:b6:78:e0:fb:79:4c:74:ea:
         b5:bc:0e:2a:52:bf:4e:57:72:76:1c:1a:59:36:b6:37:30:22:
         de:a5:6a:83:62:6e:38:b8:5f:46:a4:ab:65:14:4a:22:31:ad:
         ef:21:8f:da:51:3d:2f:f4:ce:d5:c9:e1:3b:dd:84:3f:26:9f:
         c7:3a:f4:ca:f3:84:9b:c4:99:47:83:2f:1e:55:54:b3:ff:6a:
         99:ff:8c:65:0a:6d:c8:82:44:f5:60:5c:7d:5a:ab:81:7a:7f:
         74:ec:a5:a7:b8:cf:9d:06:02:8f:bc:3d:49:b7:31:b7:00:55:
         d3:dd:a8:18:82:15:cc:15:65:8c:4f:ed:e0:3b:b8:86:8b:e8:
         7a:1f:d4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 23:48:51 2026 by rpki-client