Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.mft
File:                     dEjHMKEFTX8eKdwRlRWF3RHeF4c.mft (raw, json)
Hash identifier:          9JBA0Lig35xiXXG1GCghw3C7jWbP2uw/BcpwJYWJZAE=
Subject key identifier:   D4:A8:4F:5C:43:73:31:B8:C8:7C:83:5A:87:08:B1:E1:CE:2B:BF:49
Authority key identifier: 74:48:C7:30:A1:05:4D:7F:1E:29:DC:11:95:15:85:DD:11:DE:17:87
Certificate issuer:       /CN=A915A0F9/serialNumber=7448C730A1054D7F1E29DC11951585DD11DE1787
Certificate serial:       065D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEjHMKEFTX8eKdwRlRWF3RHeF4c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.mft
Manifest number:          0645
Signing time:             Thu 12 Mar 2026 22:22:18 +0000
Manifest this update:     Thu 12 Mar 2026 22:22:18 +0000
Manifest next update:     Thu 19 Mar 2026 22:22:18 +0000
Files and hashes:         1: dEjHMKEFTX8eKdwRlRWF3RHeF4c.crl (hash: GXAmB68mnGIwLVP1SV7qwl8Ewzom3w+eGHEWaAMtafM=)
                          2: C2B9483E5BDC11F0AA574A7AC4F9AE02.roa (hash: rn2+8W21dCl6lnIgpMbqK+DXRVpz1iSyuq7a+y1/Ps0=)
                          3: 77A20CBE5BDC11F0BE617A76C4F9AE02.roa (hash: YSObMkEBXS6AGJ0rnW9kv0JoHduUwC+6vftJJjp6P4c=)
                          4: B00A7E6A5BDC11F098C0ED78C4F9AE02.roa (hash: f58Ln8YgOMKXm+UFFvevk+7pdNWbPHPbGAfBZzTmoKo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.crl
                          rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEjHMKEFTX8eKdwRlRWF3RHeF4c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 22:22:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1629 (0x65d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0F9, serialNumber=7448C730A1054D7F1E29DC11951585DD11DE1787
        Validity
            Not Before: Mar 12 22:22:18 2026 GMT
            Not After : Mar 19 22:22:18 2026 GMT
        Subject: CN=69b33c9a-d0b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c1:13:75:30:2f:fa:eb:c3:86:7a:50:09:78:
                    f7:fc:40:e3:b5:bb:f4:5d:a3:f5:54:d8:25:f3:77:
                    89:48:2a:55:8f:77:21:53:ba:14:1c:4e:48:06:4f:
                    11:fa:af:90:e6:4c:1e:6c:b1:da:a0:d7:5f:5e:6c:
                    f4:47:85:dc:18:12:4d:ae:43:3b:4f:3f:ed:bf:3c:
                    6c:f4:ac:73:50:bc:38:7d:a2:20:c5:5e:b6:20:21:
                    fd:08:b8:bc:05:a3:4a:42:49:21:7e:ab:b4:ec:32:
                    ef:14:ef:78:c7:09:43:88:b4:01:21:02:f9:5c:ac:
                    a3:e2:4a:05:15:a2:6e:3b:92:24:29:a6:4a:02:94:
                    d8:0e:a5:93:61:8b:56:0e:51:0f:b5:bb:8f:fb:96:
                    4e:3e:dd:25:a9:44:f9:53:39:a8:26:fe:83:41:8b:
                    98:ca:2d:18:12:68:d8:e9:e3:77:5d:a2:fd:96:5b:
                    fe:a4:24:2e:ba:be:fc:55:b4:03:0f:c4:df:90:54:
                    58:b8:cd:7d:e5:9a:6a:17:ef:24:25:02:13:83:38:
                    1e:61:f2:f0:0d:5e:63:9b:b5:dd:0b:d4:87:a6:9a:
                    f6:13:fc:e4:df:39:f3:78:06:57:1a:c2:d9:05:15:
                    48:cd:43:98:46:2b:c1:ef:0c:cd:38:17:ee:45:b0:
                    1a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:A8:4F:5C:43:73:31:B8:C8:7C:83:5A:87:08:B1:E1:CE:2B:BF:49
            X509v3 Authority Key Identifier:
                keyid:74:48:C7:30:A1:05:4D:7F:1E:29:DC:11:95:15:85:DD:11:DE:17:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEjHMKEFTX8eKdwRlRWF3RHeF4c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:54:af:0f:18:ed:70:7a:60:ea:49:f4:a8:4a:a7:ec:1d:b0:
         6c:0b:df:e4:5c:73:bd:07:b5:28:53:b4:9f:ac:29:e6:fb:9b:
         2b:85:7a:d2:f0:35:15:69:88:c4:6b:9d:ef:cc:1d:83:e9:53:
         8f:5e:b0:d8:53:8a:02:6e:42:ae:5b:18:ee:b5:89:61:2d:51:
         ad:e9:57:7a:b7:2e:fd:3a:65:d2:81:37:2f:c4:6c:ee:83:99:
         3f:4d:ab:8c:7f:3f:09:d8:4e:f7:f5:30:e3:a3:2d:2f:b4:1f:
         8e:e8:3d:89:52:a0:6f:47:11:30:47:23:3f:06:68:c7:4f:04:
         7b:eb:34:e2:22:85:66:3a:02:d5:b1:b8:31:35:27:ed:05:62:
         b8:93:3b:c3:0c:e7:73:f2:19:06:4c:bd:25:02:6e:de:e1:dc:
         71:85:a2:04:72:0b:e7:eb:d7:c6:0f:8a:e9:ad:d3:05:dd:30:
         4a:c8:ab:49:16:a0:28:9c:87:b6:88:ca:8f:46:9f:f5:1f:31:
         f9:fd:2d:b3:72:ef:d1:11:aa:6c:79:43:ae:55:5e:a0:bc:14:
         25:10:5c:c9:dc:4e:c3:ef:49:41:0f:9b:d5:02:d7:29:00:b6:
         8b:cd:a9:0a:98:cf:52:26:1e:58:c8:76:45:da:45:7a:e1:da:
         1f:e2:fb:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 20:48:03 2026 by rpki-client