Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
File:                     dmhXuj98cotoBSWsQfp84qHwCS0.mft (raw, json)
Hash identifier:          /Tik7Ig/X8HRNiVwuspHADgLwOWgBdMkRYP/nSZFCN4=
Subject key identifier:   72:53:04:66:D9:76:FE:29:54:ED:86:3A:43:9B:03:A2:DC:BC:FD:AE
Authority key identifier: 76:68:57:BA:3F:7C:72:8B:68:05:25:AC:41:FA:7C:E2:A1:F0:09:2D
Certificate issuer:       /CN=A9148AC0/serialNumber=766857BA3F7C728B680525AC41FA7CE2A1F0092D
Certificate serial:       0224
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
Manifest number:          0211
Signing time:             Thu 21 May 2026 03:01:06 +0000
Manifest this update:     Thu 21 May 2026 03:01:06 +0000
Manifest next update:     Thu 28 May 2026 03:01:06 +0000
Files and hashes:         1: dmhXuj98cotoBSWsQfp84qHwCS0.crl (hash: JA9Ubz8vnmkgrXkWsEVwb2PcDChtH2gtgF8Dq9wz5fM=)
                          2: 5C9259B631DA11EEBE28A546C4F9AE02.roa (hash: mxJVviu3Hptch60PLa/XEKp8ctUzhsRUSvChZ9yr8zw=)
                          3: 5D313B1C31DA11EEBE28A546C4F9AE02.roa (hash: 0AY62NK98rk5TGBieSIptVBTxWIVtw7dVGDsaIJvGI8=)
                          4: 47854B9031DB11EEA02CF647C4F9AE02.roa (hash: GGFJyDNXeKU9lT+bTxvAzkG1O7Dgf7yckhosYzf3b1Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.crl
                          rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 03:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 548 (0x224)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148AC0, serialNumber=766857BA3F7C728B680525AC41FA7CE2A1F0092D
        Validity
            Not Before: May 21 03:01:06 2026 GMT
            Not After : May 28 03:01:06 2026 GMT
        Subject: CN=6a0e7572-da55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4b:b0:10:45:8e:5c:6f:d5:62:00:39:88:fc:
                    f8:1c:56:ee:62:ba:9e:cb:93:da:43:b4:33:8c:85:
                    26:07:54:5a:a3:e8:f7:49:b1:2e:66:25:3b:e5:dc:
                    8e:94:89:b7:b6:09:6d:cc:b0:de:a0:c5:ca:12:39:
                    fc:e7:b5:d5:0a:21:b1:37:90:db:86:47:1d:e5:b3:
                    ae:94:1d:48:7a:4d:15:15:c9:6c:3b:e2:31:98:c7:
                    95:81:51:e5:7d:44:f8:84:fe:71:3b:eb:b1:f9:0b:
                    5e:9c:e5:a5:6e:c8:34:23:70:44:14:ee:7f:f3:3b:
                    57:ad:c2:9f:39:8b:ab:f1:b5:7f:21:be:f4:46:14:
                    1c:e7:4c:6a:09:e3:ad:dd:b5:95:1b:f0:5e:83:12:
                    8f:fb:8b:73:e6:c6:16:35:9d:0c:b8:8b:15:ce:7a:
                    93:f4:1d:9d:fa:0a:75:45:66:ff:d6:e6:d8:39:a8:
                    d8:67:65:d2:3f:79:b7:38:fc:b3:2a:22:1b:44:a8:
                    d2:a4:16:fd:5e:f2:79:5e:4b:6f:f1:3e:d9:a5:a0:
                    48:79:96:e9:b0:98:55:a1:07:18:ef:ad:a7:4c:e1:
                    4d:28:2e:98:4c:b1:8f:57:42:49:1c:b2:86:53:b1:
                    8d:dc:fa:f2:d9:2d:e1:10:75:91:cb:f5:2f:d4:95:
                    79:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:53:04:66:D9:76:FE:29:54:ED:86:3A:43:9B:03:A2:DC:BC:FD:AE
            X509v3 Authority Key Identifier:
                keyid:76:68:57:BA:3F:7C:72:8B:68:05:25:AC:41:FA:7C:E2:A1:F0:09:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:67:e2:91:30:66:34:4f:1a:33:b9:7a:72:e9:b0:22:86:35:
         8d:1a:f2:fa:31:d9:71:34:a9:4a:a3:9d:22:28:74:6e:4c:95:
         79:e2:ec:d3:f9:30:0f:6a:c8:b8:ab:be:50:8c:0e:f9:ff:17:
         20:ab:fb:c5:33:3c:83:c7:07:42:4a:bf:30:83:96:d8:52:10:
         7c:20:aa:97:03:7c:32:a6:01:2f:8c:22:0d:41:5c:04:13:4a:
         cc:2d:40:4b:52:74:cd:79:e2:29:9f:c6:49:41:29:ca:dc:7f:
         53:07:7a:e9:ec:22:04:f5:e3:05:b6:b8:12:0b:8a:43:60:c7:
         c3:ce:18:f2:b5:88:d3:95:11:fc:98:f4:f4:9f:ee:1b:f0:2f:
         3f:f5:e6:06:a9:4d:75:ea:56:6b:81:d9:f4:ed:96:d7:2c:7c:
         49:c6:4c:83:81:a4:6a:70:2d:7a:59:be:41:04:06:66:cf:ff:
         7b:b6:b6:20:c6:1f:e0:c1:3f:a5:56:8b:7d:1f:e3:a6:77:fa:
         f6:9f:10:44:30:2d:63:81:06:a5:5a:35:ec:b6:4d:0c:a6:e6:
         0c:f0:94:e1:f2:dd:be:56:d6:d6:ed:85:a5:3d:f6:1b:83:84:
         f6:d1:bb:64:86:a8:c7:7f:87:a7:eb:4d:35:06:dd:cc:a7:cd:
         ba:4b:f3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:53:15 2026 by rpki-client