Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft
File:                     DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft (raw, json)
Hash identifier:          NzscTXghn1K4yjZJNPXshqBPE8bVeOtJRR53SzTK0FU=
Subject key identifier:   BA:51:C7:D6:6F:66:61:5C:C7:AE:41:81:CF:26:5F:84:38:B4:AD:13
Authority key identifier: 0C:20:42:E5:FC:33:61:FF:73:56:93:6D:09:7E:12:44:AF:C6:26:CE
Certificate issuer:       /CN=A9143078/serialNumber=0C2042E5FC3361FF7356936D097E1244AFC626CE
Certificate serial:       043E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DCBC5fwzYf9zVpNtCX4SRK_GJs4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft
Manifest number:          042D
Signing time:             Mon 27 Apr 2026 00:20:01 +0000
Manifest this update:     Mon 27 Apr 2026 00:20:00 +0000
Manifest next update:     Mon 04 May 2026 00:20:00 +0000
Files and hashes:         1: DCBC5fwzYf9zVpNtCX4SRK_GJs4.crl (hash: XG046KWJkIMeKP00G4sfZx9UKip56JkyeFO7zjsA1bw=)
                          2: 1332B7BCEC7211EFBA9EF77FC4F9AE02.roa (hash: Zn+KKaOspwLG/OsARZzD4AsnmpmtXqkaBz98c1ApCRs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.crl
                          rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DCBC5fwzYf9zVpNtCX4SRK_GJs4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 04 May 2026 00:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1086 (0x43e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143078, serialNumber=0C2042E5FC3361FF7356936D097E1244AFC626CE
        Validity
            Not Before: Apr 27 00:20:00 2026 GMT
            Not After : May  4 00:20:00 2026 GMT
        Subject: CN=69eeabb1-91e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:09:da:93:d8:d2:4d:5c:bb:64:5c:cd:6e:75:
                    01:44:f7:8c:c6:54:ae:1d:37:c3:e0:8d:fe:e6:a0:
                    e5:a7:78:0a:00:89:53:1c:a2:a3:db:0d:29:bf:c0:
                    23:9f:04:ce:10:4d:e3:06:57:66:28:9c:95:bd:bd:
                    b3:65:f6:c4:45:16:17:2f:dd:3a:54:72:13:16:9e:
                    1d:0d:e4:2d:13:2f:52:47:ac:02:c9:46:a0:b5:fe:
                    9c:3f:82:f8:25:c3:13:ce:d4:c8:fa:b1:09:1f:0d:
                    61:ee:c3:f5:af:e0:48:3b:50:52:6a:42:cf:d5:2b:
                    aa:b3:c5:54:d3:ab:ea:ca:cc:af:33:be:d8:ff:27:
                    68:d1:66:27:aa:43:4b:87:6f:93:7d:b3:08:79:44:
                    e7:1d:1f:6f:98:e1:ff:4b:10:7f:1f:82:52:53:fc:
                    ac:15:19:a1:ec:db:6c:5b:a7:72:48:25:2b:91:39:
                    9e:1d:c0:ed:e2:8d:11:bf:d9:26:72:07:ef:cf:a4:
                    da:23:ad:f0:cd:d3:ad:59:61:6e:de:48:12:ae:86:
                    58:64:8d:8d:ed:6a:b0:a4:94:ba:bc:18:55:ff:f5:
                    3c:5e:e3:ef:3c:17:9e:db:17:1d:9c:df:35:06:14:
                    b8:a1:29:bc:d6:79:d8:05:2c:e1:5d:e6:1d:84:bf:
                    42:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:51:C7:D6:6F:66:61:5C:C7:AE:41:81:CF:26:5F:84:38:B4:AD:13
            X509v3 Authority Key Identifier:
                keyid:0C:20:42:E5:FC:33:61:FF:73:56:93:6D:09:7E:12:44:AF:C6:26:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DCBC5fwzYf9zVpNtCX4SRK_GJs4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:f9:bf:53:78:ee:47:33:bb:94:9b:51:eb:26:c4:36:3e:fd:
         b8:2c:af:26:2c:85:a5:b4:90:15:f0:99:cc:45:ac:95:06:16:
         e5:d9:83:ff:00:7d:29:9c:ae:42:12:73:99:a2:73:fc:d3:11:
         06:6b:3d:68:6c:57:b9:ed:0c:c1:fc:59:13:63:82:07:11:fc:
         0b:ed:00:b9:cb:a4:9b:80:18:1d:9c:f1:e2:4a:42:2a:54:2d:
         c0:92:d0:05:51:6a:ef:1b:4c:77:97:77:fe:cb:87:35:a3:03:
         43:33:83:6a:52:a4:b9:50:4c:07:ef:8d:26:51:36:ee:69:81:
         00:2e:92:e8:5a:6d:15:fe:c2:ee:5d:99:a1:c4:24:7f:4a:06:
         93:71:86:d3:a7:3d:86:74:c6:bc:d7:3d:7e:e5:34:1c:34:c8:
         e0:25:5f:06:5a:c4:f7:c7:5b:d0:cc:2d:e7:76:4c:8f:33:09:
         5d:60:56:3e:97:a5:a5:3e:3e:65:f3:71:c6:63:dc:da:28:d5:
         db:dd:d7:a4:05:fe:53:5a:43:ab:70:37:e1:2f:13:ba:3a:aa:
         7b:3d:22:45:ef:6a:62:18:75:10:cb:4f:9a:a7:9c:07:73:7c:
         4f:3a:6b:3d:1a:ac:83:af:80:78:c5:9b:f4:e7:dc:1b:8a:f8:
         a2:0d:22:ee
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBD4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDMwNzgxMTAvBgNVBAUTKDBDMjA0MkU1RkMzMzYxRkY3MzU2OTM2RDA5N0UxMjQ0
QUZDNjI2Q0UwHhcNMjYwNDI3MDAyMDAwWhcNMjYwNTA0MDAyMDAwWjAYMRYwFAYD
VQQDEw02OWVlYWJiMS05MWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxAnak9jSTVy7ZFzNbnUBRPeMxlSuHTfD4I3+5qDlp3gKAIlTHKKj2w0pv8Aj
nwTOEE3jBldmKJyVvb2zZfbERRYXL906VHITFp4dDeQtEy9SR6wCyUagtf6cP4L4
JcMTztTI+rEJHw1h7sP1r+BIO1BSakLP1Suqs8VU06vqysyvM77Y/ydo0WYnqkNL
h2+TfbMIeUTnHR9vmOH/SxB/H4JSU/ysFRmh7NtsW6dySCUrkTmeHcDt4o0Rv9km
cgfvz6TaI63wzdOtWWFu3kgSroZYZI2N7WqwpJS6vBhV//U8XuPvPBee2xcdnN81
BhS4oSm81nnYBSzhXeYdhL9CIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLpRx9Zv
ZmFcx65Bgc8mX4Q4tK0TMB8GA1UdIwQYMBaAFAwgQuX8M2H/c1aTbQl+EkSvxibO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzA3OC9EQTI5QjRBRUFE
MTExMUVDOTg5RTNBMERDNEY5QUUwMi9EQ0JDNWZ3ellmOXpWcE50Q1g0U1JLX0dK
czQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RDQkM1Znd6WWY5elZwTnRDWDRTUktfR0pzNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MzA3OC9EQTI5QjRBRUFEMTExMUVDOTg5RTNBMERDNEY5QUUwMi9EQ0JDNWZ3ellm
OXpWcE50Q1g0U1JLX0dKczQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZ/m/U3juRzO7lJtR6ybENj79uCyvJiyFpbSQFfCZzEWslQYW5dmD/wB9KZyu
QhJzmaJz/NMRBms9aGxXue0MwfxZE2OCBxH8C+0Aucukm4AYHZzx4kpCKlQtwJLQ
BVFq7xtMd5d3/suHNaMDQzODalKkuVBMB++NJlE27mmBAC6S6FptFf7C7l2ZocQk
f0oGk3GG06c9hnTGvNc9fuU0HDTI4CVfBlrE98db0Mwt53ZMjzMJXWBWPpelpT4+
ZfNxxmPc2ijV293XpAX+U1pDq3A34S8Tujqqez0iRe9qYhh1EMtPmqecB3N8Tzpr
PRqsg6+AeMWb9OfcG4r4og0i7g==
-----END CERTIFICATE-----
Generated at Mon Apr 27 19:06:26 2026 by rpki-client