Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.mft
File:                     D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.mft (raw, json)
Hash identifier:          JIoBTymJaL5q2vBAoLQ6W/a8Ls0prZD1xm+6VusEwlc=
Subject key identifier:   F9:86:D1:49:18:C2:73:3F:BF:25:F4:FD:FC:A9:7D:35:3E:0F:FF:28
Authority key identifier: 0F:95:2A:27:EF:3E:F2:7C:EA:08:C5:7D:20:2A:38:06:9E:CB:58:40
Certificate issuer:       /CN=A9132AEB/serialNumber=0F952A27EF3EF27CEA08C57D202A38069ECB5840
Certificate serial:       354E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.mft
Manifest number:          353B
Signing time:             Sat 04 Apr 2026 15:03:28 +0000
Manifest this update:     Sat 04 Apr 2026 15:03:28 +0000
Manifest next update:     Sat 11 Apr 2026 15:03:28 +0000
Files and hashes:         1: D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.crl (hash: nVXvfeJhspLVWCfBxjzfVBcxBY2OA2MxDaoOeg9F0xI=)
                          2: 514DBDFC98C711EAA0CFE582C4F9AE02.roa (hash: OakXz6uabwbVjZ3x8angGynzmkwZsBIUc2kp6w+BN9o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.crl
                          rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 15:03:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13646 (0x354e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132AEB, serialNumber=0F952A27EF3EF27CEA08C57D202A38069ECB5840
        Validity
            Not Before: Apr  4 15:03:28 2026 GMT
            Not After : Apr 11 15:03:28 2026 GMT
        Subject: CN=69d12840-7177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5e:85:80:42:ca:1d:30:83:c6:70:6c:86:19:
                    37:29:3f:12:68:82:9f:e8:53:23:d4:74:11:bf:5a:
                    1b:7c:d1:59:29:e7:01:13:57:0b:e3:41:34:27:56:
                    59:f7:ec:5e:68:c3:86:a7:70:ad:fd:18:64:0b:38:
                    73:2a:3c:ce:ab:b7:a9:43:94:0d:ad:24:fb:b3:1d:
                    1e:f0:4c:f9:07:93:ce:f1:7c:8e:3d:29:25:1a:22:
                    1f:49:a6:f7:5e:bb:a6:9d:70:a5:51:57:a6:bb:99:
                    ef:f4:2a:74:60:1c:27:95:9c:06:23:88:d3:fa:1f:
                    2c:bf:a8:bb:8e:8b:ff:7e:32:64:88:eb:6b:8d:93:
                    b4:a1:ab:e0:35:37:18:0c:c8:62:19:d5:83:f8:3e:
                    52:e1:bf:d5:74:ac:3c:ea:43:aa:71:33:4e:dc:e3:
                    2b:08:9b:dc:c2:f6:3d:d5:54:1b:c8:25:a4:66:f7:
                    e4:05:5f:e3:d0:fa:61:3d:f7:2e:6e:76:01:34:ec:
                    1b:bc:9e:31:96:28:75:e6:b9:a8:aa:7f:a2:e0:66:
                    ad:52:a5:5e:a6:c6:44:c0:b3:55:75:bf:f4:e7:08:
                    69:bc:dd:1f:ba:44:7a:c4:35:2c:47:99:62:d5:22:
                    9a:02:25:cd:41:50:00:33:19:c8:df:e9:e7:93:9d:
                    78:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:86:D1:49:18:C2:73:3F:BF:25:F4:FD:FC:A9:7D:35:3E:0F:FF:28
            X509v3 Authority Key Identifier:
                keyid:0F:95:2A:27:EF:3E:F2:7C:EA:08:C5:7D:20:2A:38:06:9E:CB:58:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:06:32:71:45:36:0a:d5:c6:08:65:2d:05:55:87:f0:49:6a:
         de:79:c7:c7:ff:32:ee:c7:e9:76:4e:e3:fb:e3:b5:81:af:b6:
         2d:88:b7:a0:e5:fe:22:21:85:bb:86:85:67:23:90:f6:bf:40:
         e9:ce:67:37:54:ac:03:bf:da:92:93:5a:bd:21:93:c1:f3:db:
         d9:30:35:dd:ad:f1:b2:d1:70:22:86:f0:62:c1:d6:71:23:c8:
         8c:6f:a7:9d:48:1e:15:db:6c:87:37:1b:38:0b:22:7e:d3:84:
         51:9a:bf:3b:d9:63:4c:90:9d:4f:63:5b:e2:06:38:8f:5a:5e:
         30:d8:03:5d:97:20:2e:c6:15:68:42:1f:6e:2d:96:92:26:0e:
         a2:30:b6:4a:5b:fa:59:d1:a0:97:9f:01:a6:e3:19:ad:e2:4f:
         11:b6:d7:c0:0a:a8:f3:28:01:2b:d9:d9:37:d4:5f:3f:97:3a:
         cc:a0:52:76:94:95:ff:ad:74:48:a1:54:a0:7b:51:0b:50:31:
         29:19:02:3d:09:a1:73:74:dc:13:62:8a:94:c0:dd:cf:17:ae:
         a5:13:ac:a3:35:5f:28:78:a3:37:01:75:6d:5b:ef:19:ce:24:
         8b:5f:c2:df:2c:4f:cc:96:a1:a0:ac:47:1a:a5:39:71:81:12:
         c4:bf:bb:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:03:07 2026 by rpki-client