Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft
File:                     ddMZaVabXA3w2lOz2TE2YzRyEII.mft (raw, json)
Hash identifier:          UJViimha3eT40cekHJlqjmRFfThuzHnYwejkftQYes0=
Subject key identifier:   7C:D9:9B:D9:D4:A3:6D:00:36:48:8B:EF:9B:E9:5D:C7:FD:4D:E8:10
Authority key identifier: 75:D3:19:69:56:9B:5C:0D:F0:DA:53:B3:D9:31:36:63:34:72:10:82
Certificate issuer:       /CN=A915E5DF/serialNumber=75D31969569B5C0DF0DA53B3D931366334721082
Certificate serial:       01A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft
Manifest number:          0199
Signing time:             Thu 21 May 2026 04:20:40 +0000
Manifest this update:     Thu 21 May 2026 04:20:40 +0000
Manifest next update:     Thu 28 May 2026 04:20:40 +0000
Files and hashes:         1: ddMZaVabXA3w2lOz2TE2YzRyEII.crl (hash: sOuRgjuH4DvC+lLZsGRGcPYmogsDOG7ylrYYgh/KIvs=)
                          2: 4483A1DE5EBD11EFAEB0D27FC4F9AE02.roa (hash: solgPQ655LM5Wziva07rC9OvNu/BbDCAz/mq1TMGAKM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.crl
                          rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 04:20:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 417 (0x1a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E5DF, serialNumber=75D31969569B5C0DF0DA53B3D931366334721082
        Validity
            Not Before: May 21 04:20:40 2026 GMT
            Not After : May 28 04:20:40 2026 GMT
        Subject: CN=6a0e8818-80ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9a:61:88:f7:ce:8e:6f:54:0f:02:15:64:13:
                    69:66:19:8f:e7:fd:4f:3a:34:06:08:4f:97:06:5d:
                    8b:4a:06:ba:1d:8d:2b:4e:56:14:3d:67:98:18:c2:
                    5d:4c:8f:5d:1e:31:b2:e4:f5:25:0f:3d:21:74:09:
                    78:ac:fc:f0:f4:6c:29:18:5a:a8:94:0e:69:86:35:
                    18:f4:12:e5:b1:2a:c8:f3:78:d8:83:7e:b9:8e:0c:
                    3c:df:b5:60:5e:88:7e:18:3e:f0:09:4d:42:df:28:
                    b5:96:e1:f4:2d:ac:13:63:b0:b9:d4:92:12:8a:2a:
                    8f:a8:aa:5e:24:bf:45:98:f4:a8:5e:9f:14:fb:42:
                    af:96:1b:df:f0:3a:3e:ba:10:67:b7:1b:06:48:24:
                    0d:cb:6d:36:34:56:6b:12:c4:2e:61:db:a0:25:e2:
                    9b:9c:9f:9a:ab:9b:07:c6:5e:f9:e4:e0:e6:68:0d:
                    12:59:6f:a4:42:6f:6d:79:34:6a:9e:9f:c7:6a:96:
                    6b:61:f7:76:6a:9f:44:b2:5b:63:ed:0b:99:36:aa:
                    12:14:29:13:a8:7b:12:f4:80:e0:81:b2:62:7e:b7:
                    57:bf:a0:81:b4:04:aa:39:ff:69:b1:e1:96:40:9e:
                    50:c7:bf:71:87:2d:4b:27:38:fe:ac:15:81:b2:22:
                    8f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D9:9B:D9:D4:A3:6D:00:36:48:8B:EF:9B:E9:5D:C7:FD:4D:E8:10
            X509v3 Authority Key Identifier:
                keyid:75:D3:19:69:56:9B:5C:0D:F0:DA:53:B3:D9:31:36:63:34:72:10:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:00:65:d1:c1:d7:96:7b:53:51:01:ad:fb:ad:f4:36:30:4f:
         ff:d6:db:fd:be:41:fb:c1:84:fc:dd:1a:b1:f2:41:89:f8:3e:
         50:01:cc:88:8a:d5:b2:dc:52:7e:0a:e5:26:7e:2d:71:a3:e0:
         9c:dc:86:e5:7f:d2:6d:db:4e:e1:f2:9d:99:3c:3b:d1:36:2c:
         5c:e0:36:75:98:4e:f9:74:65:da:fd:d5:39:8f:43:14:35:72:
         7a:e3:49:c0:8a:c8:d2:e7:a0:b3:65:8f:94:13:20:42:b5:06:
         1f:8f:7c:9c:04:64:26:dc:72:14:a9:19:3e:ef:85:24:a9:fd:
         cb:8b:d6:dc:2d:8c:77:92:9e:48:fa:84:b2:c1:85:27:6d:ab:
         22:2b:25:da:64:d6:ae:21:9e:0c:80:f8:c6:e0:a3:72:38:fb:
         5b:52:0e:f4:b9:d2:cf:5f:f0:b4:c6:7e:3d:6a:df:f7:aa:9e:
         f3:ae:2f:b8:06:08:4a:8c:20:ec:6e:42:38:b2:74:24:90:4b:
         e4:7c:56:cc:83:3f:a5:a2:59:9d:9d:37:bf:22:a8:14:17:7c:
         fa:9a:bb:9d:2b:d9:01:be:fb:93:98:60:df:c3:8b:04:35:88:
         b0:32:6a:f3:91:42:f6:c8:ed:2e:53:d0:c1:e4:b8:a6:30:8d:
         0b:7f:f3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:14:48 2026 by rpki-client