Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft
File:                     DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft (raw, json)
Hash identifier:          Vwl9w9AiwLuyvJi4pweie6YsizKzTbVBRCQeRmaN9OM=
Subject key identifier:   CC:47:69:E6:98:6C:C7:3B:99:A4:BB:04:0B:82:1A:49:F4:F3:F0:3F
Authority key identifier: 0D:8C:1F:11:0B:DB:33:D0:53:B6:56:BB:A0:07:3B:93:0C:64:F3:14
Certificate issuer:       /CN=A917D114/serialNumber=0D8C1F110BDB33D053B656BBA0073B930C64F314
Certificate serial:       76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYwfEQvbM9BTtla7oAc7kwxk8xQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft
Manifest number:          72
Signing time:             Sun 05 Apr 2026 07:12:04 +0000
Manifest this update:     Sun 05 Apr 2026 07:12:03 +0000
Manifest next update:     Sun 12 Apr 2026 07:12:03 +0000
Files and hashes:         1: DYwfEQvbM9BTtla7oAc7kwxk8xQ.crl (hash: MZ6rTFdk6PynnPrFtMl6xnahpLJxPOhNv+iOu3HexB4=)
                          2: 77248CD0889111F0810C3E1FC4F9AE02.roa (hash: C+v8DxSw3+udVzZSqwvQqRGQ9Pr2cv6HbsmEoxT6o4g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.crl
                          rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYwfEQvbM9BTtla7oAc7kwxk8xQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 07:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D114, serialNumber=0D8C1F110BDB33D053B656BBA0073B930C64F314
        Validity
            Not Before: Apr  5 07:12:03 2026 GMT
            Not After : Apr 12 07:12:03 2026 GMT
        Subject: CN=69d20b44-eb83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:e9:c6:fe:f5:80:67:56:43:86:b5:46:c4:c9:
                    f0:fd:14:07:f9:84:6e:6f:93:61:72:07:ff:26:16:
                    41:f5:18:c8:a6:4a:db:9f:c3:79:2d:52:ca:50:ca:
                    3b:6f:b5:d3:5c:01:ca:02:75:66:df:2c:d4:a4:db:
                    80:3b:fd:23:19:81:8e:60:42:0f:03:eb:55:fa:b8:
                    31:b9:fe:f4:dd:52:e6:11:5d:8c:13:fc:1d:c8:3d:
                    cc:65:5c:d4:23:30:10:2b:d5:5b:a8:cb:ac:d0:e5:
                    80:a9:2c:1e:a4:d6:19:5c:1d:6b:37:df:56:38:94:
                    87:6e:0f:48:d7:5c:62:13:82:33:6b:1c:b7:9d:cb:
                    f2:94:ef:90:3c:66:54:3a:20:60:e9:94:e4:c8:0f:
                    6c:95:5c:74:b9:49:81:d0:b1:ee:56:5b:83:78:3d:
                    65:a2:9c:0c:3a:dc:64:1a:cc:52:da:68:4d:92:3c:
                    a9:01:3d:89:a7:1d:8c:30:4a:04:a4:99:0e:62:4b:
                    f9:4f:ab:69:a4:94:69:bb:47:c1:71:9d:d8:e1:9a:
                    da:20:02:47:36:00:11:e5:8f:3c:80:8a:9b:99:af:
                    ee:b2:d9:64:a0:b9:de:e3:b7:f8:06:75:2c:7b:1b:
                    e1:17:a7:4b:35:09:dd:9f:d4:14:ce:04:d2:ad:79:
                    18:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:47:69:E6:98:6C:C7:3B:99:A4:BB:04:0B:82:1A:49:F4:F3:F0:3F
            X509v3 Authority Key Identifier:
                keyid:0D:8C:1F:11:0B:DB:33:D0:53:B6:56:BB:A0:07:3B:93:0C:64:F3:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYwfEQvbM9BTtla7oAc7kwxk8xQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:b1:65:68:61:6f:a2:21:13:bb:1c:34:17:88:af:b4:98:7d:
         0c:d2:02:e8:9b:49:f3:88:4d:50:33:86:8d:81:de:e2:02:c0:
         0e:60:e1:f0:d2:80:bf:60:3b:56:6a:27:fc:eb:cb:18:03:45:
         4a:61:29:a9:54:4f:75:e8:09:56:48:ac:a6:55:8b:43:02:93:
         0b:ca:87:7e:b4:f1:31:d3:1e:b3:33:c6:a1:bb:05:af:c2:44:
         f7:6e:95:81:88:49:36:69:b1:a8:63:aa:81:db:c7:14:38:79:
         48:43:c5:e2:21:e4:22:40:f4:34:e0:8b:c1:3a:83:21:77:0a:
         78:a6:54:2f:a7:77:83:c5:07:7d:a6:7b:15:78:aa:37:9b:a6:
         ab:35:c4:ba:2c:1a:77:77:23:59:ea:93:7f:da:ed:1a:fc:41:
         6d:ef:b6:19:6e:2c:94:64:8c:43:32:5f:1e:f5:ba:41:c5:1d:
         6e:b5:90:c5:40:d5:e6:a8:8e:8d:f2:c9:24:c8:79:b5:d8:71:
         03:6e:a8:50:f1:c6:da:10:5c:6c:b0:e3:e3:3b:51:a9:e7:8a:
         1f:69:30:ad:8c:cf:10:7f:e3:5c:2f:5c:0e:2d:a7:08:f7:c8:
         f1:72:94:0c:3b:55:18:1b:62:d4:40:11:09:26:d3:36:0c:49:
         42:40:83:64
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
RDExNDExMC8GA1UEBRMoMEQ4QzFGMTEwQkRCMzNEMDUzQjY1NkJCQTAwNzNCOTMw
QzY0RjMxNDAeFw0yNjA0MDUwNzEyMDNaFw0yNjA0MTIwNzEyMDNaMBgxFjAUBgNV
BAMTDTY5ZDIwYjQ0LWViODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDz6cb+9YBnVkOGtUbEyfD9FAf5hG5vk2FyB/8mFkH1GMimStufw3ktUspQyjtv
tdNcAcoCdWbfLNSk24A7/SMZgY5gQg8D61X6uDG5/vTdUuYRXYwT/B3IPcxlXNQj
MBAr1Vuoy6zQ5YCpLB6k1hlcHWs331Y4lIduD0jXXGITgjNrHLedy/KU75A8ZlQ6
IGDplOTID2yVXHS5SYHQse5WW4N4PWWinAw63GQazFLaaE2SPKkBPYmnHYwwSgSk
mQ5iS/lPq2mklGm7R8FxndjhmtogAkc2ABHljzyAipuZr+6y2WSgud7jt/gGdSx7
G+EXp0s1Cd2f1BTOBNKteRh3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUzEdp5phs
xzuZpLsEC4IaSfTz8D8wHwYDVR0jBBgwFoAUDYwfEQvbM9BTtla7oAc7kwxk8xQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdEMTE0Lzc5RDQzMEJDODg5
MDExRjA4OTNBNEQxQ0M0RjlBRTAyL0RZd2ZFUXZiTTlCVHRsYTdvQWM3a3d4azh4
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvRFl3ZkVRdmJNOUJUdGxhN29BYzdrd3hrOHhRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdE
MTE0Lzc5RDQzMEJDODg5MDExRjA4OTNBNEQxQ0M0RjlBRTAyL0RZd2ZFUXZiTTlC
VHRsYTdvQWM3a3d4azh4US5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBDsWVoYW+iIRO7HDQXiK+0mH0M0gLom0nziE1QM4aNgd7iAsAOYOHw0oC/YDtW
aif868sYA0VKYSmpVE916AlWSKymVYtDApMLyod+tPEx0x6zM8ahuwWvwkT3bpWB
iEk2abGoY6qB28cUOHlIQ8XiIeQiQPQ04IvBOoMhdwp4plQvp3eDxQd9pnsVeKo3
m6arNcS6LBp3dyNZ6pN/2u0a/EFt77YZbiyUZIxDMl8e9bpBxR1utZDFQNXmqI6N
8skkyHm12HEDbqhQ8cbaEFxssOPjO1Gp54ofaTCtjM8Qf+NcL1wOLacI98jxcpQM
O1UYG2LUQBEJJtM2DElCQINk
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:54:10 2026 by rpki-client