Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.mft
File:                     MPDbgtWPWD6EiDeboA01rLNSYRA.mft (raw, json)
Hash identifier:          9ZNLaz9EtewuHo1mJ8cNdT5XW+WYnOxWG8NTIJctR8Y=
Subject key identifier:   FC:E7:7F:8D:FE:7E:3B:C3:77:5A:C3:AA:91:7C:73:07:8F:A0:3F:9D
Authority key identifier: 30:F0:DB:82:D5:8F:58:3E:84:88:37:9B:A0:0D:35:AC:B3:52:61:10
Certificate issuer:       /CN=A913C07A/serialNumber=30F0DB82D58F583E8488379BA00D35ACB3526110
Certificate serial:       01C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPDbgtWPWD6EiDeboA01rLNSYRA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.mft
Manifest number:          01BA
Signing time:             Thu 21 May 2026 04:02:41 +0000
Manifest this update:     Thu 21 May 2026 04:02:40 +0000
Manifest next update:     Thu 28 May 2026 04:02:40 +0000
Files and hashes:         1: MPDbgtWPWD6EiDeboA01rLNSYRA.crl (hash: ztaBhvDK2NYBVklR/NGY1fp9FhG/K/t+A8Ey3kEwdSw=)
                          2: A20C3500BE6811EEBFF35870C4F9AE02.roa (hash: ZnZ838yb1Lnlhy/ggGN6w4nIsswXCTJ1iI4zj1SyX/Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.crl
                          rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPDbgtWPWD6EiDeboA01rLNSYRA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 04:02:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 450 (0x1c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C07A, serialNumber=30F0DB82D58F583E8488379BA00D35ACB3526110
        Validity
            Not Before: May 21 04:02:40 2026 GMT
            Not After : May 28 04:02:40 2026 GMT
        Subject: CN=6a0e83e0-f3a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0e:1f:b3:f5:34:60:b2:4c:6e:3d:c3:b3:ee:
                    22:f9:39:b8:c3:df:ca:44:d5:a2:8e:bb:6f:68:59:
                    58:61:97:8c:3a:c4:8b:d9:43:63:fa:de:aa:3d:fa:
                    cc:46:33:d1:9e:20:c4:37:34:b6:f5:b1:93:ab:09:
                    6a:40:b6:92:f5:20:5d:73:ee:95:97:b1:6b:9c:c6:
                    16:62:9f:4e:12:bb:94:6b:e2:75:2a:0d:08:c4:c5:
                    de:c9:b0:ee:82:62:e1:c3:73:b2:9e:cb:2c:1b:a8:
                    5d:63:24:f3:2b:f4:be:ea:ce:91:2f:08:3c:af:77:
                    de:17:f0:61:7a:85:54:3c:b9:14:f7:95:29:91:65:
                    68:35:45:b7:6e:cf:4a:e9:99:a9:00:48:02:69:1e:
                    fc:54:6d:83:9f:9d:8d:9f:a6:40:9a:1f:22:eb:19:
                    fa:df:63:5d:e9:49:64:76:a9:5e:41:39:76:8a:d9:
                    11:f4:ab:b3:c3:48:7d:ed:98:49:3d:a0:c0:46:cc:
                    26:13:2e:18:2c:7b:7a:4d:1f:3f:9f:b4:bf:72:1c:
                    cf:a9:24:0f:ed:ed:3a:98:03:8e:4f:ca:39:f4:a4:
                    48:15:27:ad:0a:e7:89:25:14:0d:51:62:9f:57:ca:
                    13:0d:6f:fb:43:2a:ae:46:db:42:42:da:97:96:ed:
                    dc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:E7:7F:8D:FE:7E:3B:C3:77:5A:C3:AA:91:7C:73:07:8F:A0:3F:9D
            X509v3 Authority Key Identifier:
                keyid:30:F0:DB:82:D5:8F:58:3E:84:88:37:9B:A0:0D:35:AC:B3:52:61:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPDbgtWPWD6EiDeboA01rLNSYRA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:8a:82:ad:43:01:1b:0a:2e:b8:9e:32:51:2f:68:2d:da:7a:
         b8:aa:4a:25:76:7e:b7:bf:2e:54:fc:02:93:c2:74:7a:37:be:
         88:dc:d5:a6:18:18:53:3a:55:6f:22:f1:3d:cf:b4:22:82:10:
         61:a8:6e:7d:dc:68:96:a3:87:21:48:26:c6:3c:dd:47:e4:41:
         bf:f6:d7:4f:38:b9:3d:d4:51:86:a8:ab:47:9c:be:69:54:1b:
         b0:2d:89:32:85:78:60:e3:d5:22:8f:1f:84:8f:e0:c0:05:b8:
         19:8d:99:99:95:aa:1e:1b:7d:5d:99:63:b6:46:b3:37:2c:7f:
         1d:83:f4:20:69:43:73:b3:3c:02:ce:ed:8c:e4:4f:ff:b6:99:
         8e:3c:1f:15:59:41:4a:ce:64:4e:50:fa:e8:1b:25:49:0e:0d:
         70:f0:01:86:cb:17:93:d3:50:d4:bb:7c:13:0b:93:7e:c2:f2:
         08:2d:8e:23:fc:3c:5b:94:b1:00:5f:bf:c5:df:ff:01:fb:c0:
         08:bc:fb:06:f1:dd:ad:41:5c:dd:80:26:47:82:32:3e:d8:a1:
         b3:2b:62:c1:2f:a9:8d:96:28:f8:0c:6d:ad:c4:b6:4f:36:19:
         4e:de:0b:ef:c5:c8:f7:45:9f:ba:b6:f8:b5:47:e7:de:df:31:
         a8:1d:fa:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:22:11 2026 by rpki-client