Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft
File:                     DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft (raw, json)
Hash identifier:          rTTpoIdFinFok7aZ9VxnVz0F/sG9N0TA0FGcS+aK/V0=
Subject key identifier:   DC:B1:1C:69:AA:A0:7B:6F:48:09:D1:C2:72:0F:65:7E:AE:75:F3:E8
Authority key identifier: 0C:AB:68:E0:69:08:3A:43:88:E8:FC:69:75:8F:04:59:62:FD:01:AF
Certificate issuer:       /CN=A9135D1F/serialNumber=0CAB68E069083A4388E8FC69758F045962FD01AF
Certificate serial:       A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft
Manifest number:          88
Signing time:             Tue 05 May 2026 07:45:42 +0000
Manifest this update:     Tue 05 May 2026 07:45:41 +0000
Manifest next update:     Tue 12 May 2026 07:45:41 +0000
Files and hashes:         1: DKto4GkIOkOI6PxpdY8EWWL9Aa8.crl (hash: 7alDIZXwhQBC220OPfB+Pd8gd49OnVfMS479Yh3SCzs=)
                          2: ABF8D808CA6D11F084F59728C4F9AE02.roa (hash: CpehDruHAKWYlilkVXEQKfS5FGCQ1Hj+67P+aQNX0UE=)
                          3: 08B79AD09C4111F0A9483031C4F9AE02.roa (hash: ubB2L+A+WYJ8AjqCrJi8J5YRaDtXq+7jruwojcEkTbc=)
                          4: 8EAC217CCA5611F089E70D44C4F9AE02.roa (hash: XXxBCtuO8EG8rucnL16es476f6BaiYAikV+U/4E8csQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.crl
                          rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 May 2026 22:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162 (0xa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135D1F, serialNumber=0CAB68E069083A4388E8FC69758F045962FD01AF
        Validity
            Not Before: May  5 07:45:41 2026 GMT
            Not After : May 12 07:45:41 2026 GMT
        Subject: CN=69f9a026-cd08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:20:ae:b4:94:e8:47:3b:0c:96:70:3e:2b:a8:
                    f2:84:61:a4:47:56:3b:ab:0c:6b:46:f6:45:f4:75:
                    f3:e3:28:dc:24:5d:a2:a3:3c:bc:c1:7f:a4:4f:a4:
                    b8:b9:f0:81:69:49:13:06:dd:9c:86:f6:86:c9:fd:
                    cb:68:62:f0:04:3c:dd:a8:10:f5:7a:e4:b1:14:6e:
                    a4:b1:a4:5e:3a:92:97:3d:32:59:1f:b0:01:f1:c3:
                    9f:1d:82:a1:a2:b2:2c:f9:7f:79:c9:6c:8e:86:d4:
                    9c:01:41:19:b7:fd:cf:3a:42:36:31:db:a5:eb:08:
                    99:03:a1:c2:1a:19:09:f1:7d:dd:88:27:0b:31:43:
                    55:e0:1a:f6:d9:a1:fb:50:e7:01:8c:54:54:b8:0c:
                    4f:14:7f:34:46:8f:51:dc:2a:5c:db:31:6f:a1:d4:
                    e0:75:55:4f:71:68:06:05:00:e3:9d:14:37:f6:4b:
                    20:86:89:3f:7e:04:f9:0b:b2:7f:f9:ed:5f:9a:90:
                    30:0c:f8:f6:72:59:ab:3d:06:d7:78:d4:09:69:7e:
                    71:04:17:58:e1:7b:d1:9e:43:b7:24:f7:12:5c:66:
                    6b:ca:ea:64:d2:bb:57:0d:7e:3e:d4:45:1c:45:e8:
                    b2:5b:17:24:a9:f3:15:69:1f:8b:af:94:df:df:12:
                    5b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B1:1C:69:AA:A0:7B:6F:48:09:D1:C2:72:0F:65:7E:AE:75:F3:E8
            X509v3 Authority Key Identifier:
                keyid:0C:AB:68:E0:69:08:3A:43:88:E8:FC:69:75:8F:04:59:62:FD:01:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:48:32:bc:f1:0f:e4:76:b3:3b:44:a1:95:f0:79:ce:17:8f:
         ed:92:a9:50:27:59:af:2e:e1:5c:cf:0e:e6:02:fd:04:d1:3c:
         2a:d0:6e:e6:d8:7b:69:80:44:b9:54:36:07:af:b2:85:dd:8c:
         e6:51:be:21:70:ac:af:91:eb:57:d1:f4:f9:c1:45:90:fa:55:
         ee:a5:31:38:7b:9f:7a:8c:91:33:d0:d9:2d:86:db:77:2e:3a:
         d9:da:c5:80:e4:f4:f2:71:3a:a4:0f:02:af:97:f2:89:90:f6:
         9a:9b:75:c5:28:9c:ee:e0:49:c8:04:4d:80:41:3d:5d:20:94:
         2a:dc:32:35:de:ff:03:c8:3c:ae:00:e0:b9:86:ec:73:42:50:
         87:4c:21:a3:7f:09:d8:d6:52:b1:66:5f:38:a0:b6:fe:39:2f:
         ca:2a:08:61:f3:3a:66:e7:bf:1a:93:d7:a4:a9:cd:bc:23:b6:
         a5:d1:e2:5f:32:b4:98:aa:48:d6:1a:6e:b0:45:50:33:0f:7b:
         3a:28:62:2c:b0:0f:b5:b5:65:46:00:bb:f7:d4:a7:e8:a1:f4:
         b3:59:2b:8d:09:60:42:46:f2:2a:8c:20:9d:3d:c3:7e:e7:c8:
         19:ad:d0:91:89:4b:e1:84:8c:5d:73:a1:6e:31:f4:cc:90:b2:
         28:d0:eb:24
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzVEMUYxMTAvBgNVBAUTKDBDQUI2OEUwNjkwODNBNDM4OEU4RkM2OTc1OEYwNDU5
NjJGRDAxQUYwHhcNMjYwNTA1MDc0NTQxWhcNMjYwNTEyMDc0NTQxWjAYMRYwFAYD
VQQDEw02OWY5YTAyNi1jZDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxSCutJToRzsMlnA+K6jyhGGkR1Y7qwxrRvZF9HXz4yjcJF2iozy8wX+kT6S4
ufCBaUkTBt2chvaGyf3LaGLwBDzdqBD1euSxFG6ksaReOpKXPTJZH7AB8cOfHYKh
orIs+X95yWyOhtScAUEZt/3POkI2Mdul6wiZA6HCGhkJ8X3diCcLMUNV4Br22aH7
UOcBjFRUuAxPFH80Ro9R3Cpc2zFvodTgdVVPcWgGBQDjnRQ39ksghok/fgT5C7J/
+e1fmpAwDPj2clmrPQbXeNQJaX5xBBdY4XvRnkO3JPcSXGZryupk0rtXDX4+1EUc
ReiyWxckqfMVaR+Lr5Tf3xJb2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNyxHGmq
oHtvSAnRwnIPZX6udfPoMB8GA1UdIwQYMBaAFAyraOBpCDpDiOj8aXWPBFli/QGv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUQxRi9BRDIwMjFBNDk3
NzQxMUYwODBCRjFFNjRDNEY5QUUwMi9ES3RvNEdrSU9rT0k2UHhwZFk4RVdXTDlB
YTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RLdG80R2tJT2tPSTZQeHBkWThFV1dMOUFhOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NUQxRi9BRDIwMjFBNDk3NzQxMUYwODBCRjFFNjRDNEY5QUUwMi9ES3RvNEdrSU9r
T0k2UHhwZFk4RVdXTDlBYTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAokgyvPEP5HazO0ShlfB5zheP7ZKpUCdZry7hXM8O5gL9BNE8KtBu5th7aYBE
uVQ2B6+yhd2M5lG+IXCsr5HrV9H0+cFFkPpV7qUxOHufeoyRM9DZLYbbdy462drF
gOT08nE6pA8Cr5fyiZD2mpt1xSic7uBJyARNgEE9XSCUKtwyNd7/A8g8rgDguYbs
c0JQh0who38J2NZSsWZfOKC2/jkvyioIYfM6Zue/GpPXpKnNvCO2pdHiXzK0mKpI
1hpusEVQMw97OihiLLAPtbVlRgC799Sn6KH0s1krjQlgQkbyKowgnT3DfufIGa3Q
kYlL4YSMXXOhbjH0zJCyKNDrJA==
-----END CERTIFICATE-----
Generated at Wed May 6 03:27:03 2026 by rpki-client