Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft
File:                     DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft (raw, json)
Hash identifier:          zmDTtcuqKKboAD03E/v8isbXo3XYL4TYRLld8+DTU9Q=
Subject key identifier:   70:E3:78:82:99:3B:52:AE:F0:A8:6D:19:4F:0D:03:33:AB:29:9C:92
Authority key identifier: 0D:E5:96:CB:2C:60:CB:75:7D:B8:F4:0E:B8:6F:24:76:52:C1:3A:30
Certificate issuer:       /CN=A9135033/serialNumber=0DE596CB2C60CB757DB8F40EB86F247652C13A30
Certificate serial:       0DE3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeWWyyxgy3V9uPQOuG8kdlLBOjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft
Manifest number:          0DD0
Signing time:             Tue 26 May 2026 17:54:32 +0000
Manifest this update:     Tue 26 May 2026 17:54:31 +0000
Manifest next update:     Tue 02 Jun 2026 17:54:31 +0000
Files and hashes:         1: DeWWyyxgy3V9uPQOuG8kdlLBOjA.crl (hash: HUkfHxWCohmOUJPOQRiN3fFw026PZ8mgzvpW+Bjnw6c=)
                          2: 2328656A840211EEB9348E11C4F9AE02.roa (hash: AJ7U14HstgqbbA37ZAEyjfsIrPGL23cFMb8Jhil555M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.crl
                          rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeWWyyxgy3V9uPQOuG8kdlLBOjA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 02 Jun 2026 17:54:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3555 (0xde3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135033, serialNumber=0DE596CB2C60CB757DB8F40EB86F247652C13A30
        Validity
            Not Before: May 26 17:54:31 2026 GMT
            Not After : Jun  2 17:54:31 2026 GMT
        Subject: CN=6a15de57-f587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:49:15:bb:0a:62:42:a3:a6:6f:34:20:e8:63:
                    9a:ad:e1:78:da:e8:e0:a4:92:3f:67:b8:4e:53:e3:
                    7e:63:12:cc:ec:d5:3c:61:a8:84:bb:76:fb:46:e6:
                    f4:24:83:81:02:ca:f9:f8:d8:82:e5:eb:9a:0e:4d:
                    1c:43:2d:f8:ff:0e:f4:f2:72:11:ad:72:49:79:52:
                    87:15:fb:4a:34:ba:22:c9:50:2e:41:1c:ff:00:75:
                    d5:80:2c:12:f4:29:bf:71:b5:09:ae:24:5a:fa:54:
                    25:c1:4d:55:b9:59:b1:46:3e:34:d2:78:75:be:c1:
                    11:59:03:b9:75:5f:2b:83:f0:b0:d7:c9:c1:0e:55:
                    18:d9:3c:75:59:2b:3b:38:c5:84:36:6b:b7:37:2c:
                    f2:89:bb:f4:57:04:09:a4:63:86:b6:d8:1e:95:61:
                    89:3e:92:9a:9e:38:f8:3b:84:ab:27:23:7f:12:cc:
                    4f:37:86:2f:8e:fd:59:41:16:5d:5b:ad:9d:c0:fa:
                    ac:e5:7e:2c:a6:a1:02:1a:4f:3b:e8:db:11:4b:b9:
                    b7:6e:72:7e:0a:f9:35:0b:c5:4c:fd:b5:be:53:c7:
                    e4:fe:e8:c9:b7:62:c8:39:1f:81:cb:0a:00:71:6a:
                    77:56:e1:50:66:30:35:48:7b:4a:1c:2a:69:30:1d:
                    e5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E3:78:82:99:3B:52:AE:F0:A8:6D:19:4F:0D:03:33:AB:29:9C:92
            X509v3 Authority Key Identifier:
                keyid:0D:E5:96:CB:2C:60:CB:75:7D:B8:F4:0E:B8:6F:24:76:52:C1:3A:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeWWyyxgy3V9uPQOuG8kdlLBOjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:bb:95:de:7f:c9:30:45:7c:41:cd:a3:00:5e:e2:1e:c3:ee:
         22:97:af:3b:0d:f0:62:8f:ce:1c:fb:1d:ca:44:26:da:01:0a:
         ae:58:fa:5c:9c:64:28:2e:02:f2:a2:7f:da:6c:f2:99:11:b6:
         36:3e:69:b3:ed:0b:b9:15:b8:3e:7b:86:0f:f7:ff:d6:73:8e:
         41:88:a4:b5:f1:5d:43:3d:b0:30:dc:26:b9:e1:db:5a:d6:42:
         dc:8b:e6:c8:cc:df:46:12:66:77:6f:cd:19:14:57:6b:27:d2:
         60:7c:c1:cc:14:a1:49:82:6e:1e:5a:5c:81:d8:24:23:18:33:
         22:6a:4f:b6:f9:75:bf:f0:73:d7:a8:b8:84:e0:39:60:da:cd:
         1a:a9:60:4a:1c:6e:68:7a:5a:a9:4d:12:a5:3f:41:8f:4e:e2:
         f6:21:ca:94:91:e1:1a:83:f0:11:13:3f:6f:18:a5:eb:75:26:
         b9:8d:45:c0:77:e3:8a:c7:b4:74:31:ef:7b:d2:f4:45:6b:ab:
         d2:7a:3d:68:01:6b:3e:e3:77:43:e6:ce:8a:96:dc:3d:b9:e2:
         1f:3f:0b:36:f9:ec:84:e7:ad:fc:e6:5b:73:c3:cb:bb:79:11:
         c7:42:2e:64:13:10:52:1e:8d:b3:f9:7c:7c:8e:85:4f:4f:1f:
         aa:73:4f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 08:46:26 2026 by rpki-client