Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft
File:                     dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft (raw, json)
Hash identifier:          TSd6svvpP1YQHNCVtnJD0TjW+ou8b0TRKqz+I0dGxLc=
Subject key identifier:   AE:99:61:8A:AC:98:8F:7A:7C:80:DF:0F:50:B6:63:28:F7:AE:51:26
Authority key identifier: 76:78:62:5D:91:54:FC:DF:1B:00:0A:43:D1:F8:92:FB:1D:58:83:69
Certificate issuer:       /CN=A9180DF5/serialNumber=7678625D9154FCDF1B000A43D1F892FB1D588369
Certificate serial:       06AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft
Manifest number:          06A8
Signing time:             Sat 04 Apr 2026 22:11:13 +0000
Manifest this update:     Sat 04 Apr 2026 22:11:12 +0000
Manifest next update:     Sat 11 Apr 2026 22:11:12 +0000
Files and hashes:         1: dnhiXZFU_N8bAApD0fiS-x1Yg2k.crl (hash: MWy9a9aoNeJhsRH2JSuwtZlxtgTZuB/qhm63NNM1EOg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.crl
                          rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 22:11:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1707 (0x6ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180DF5, serialNumber=7678625D9154FCDF1B000A43D1F892FB1D588369
        Validity
            Not Before: Apr  4 22:11:12 2026 GMT
            Not After : Apr 11 22:11:12 2026 GMT
        Subject: CN=69d18c81-3d60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:79:34:7a:db:5a:be:47:b8:93:bc:d4:5d:b4:
                    d6:07:be:66:f1:13:9b:f0:48:2a:bc:ab:d6:d4:a7:
                    7e:1e:55:7c:72:39:03:32:51:e1:d0:dd:c1:40:b8:
                    6f:16:5f:98:8d:e8:90:b1:c5:79:dc:b0:0d:2d:fe:
                    98:67:b9:51:a6:25:a9:a9:fb:46:99:ee:63:25:b6:
                    d3:e5:b6:95:bc:e0:7f:02:04:20:da:f1:bd:da:e0:
                    68:af:d4:18:2f:cb:67:1e:e9:92:79:ee:6e:55:e6:
                    35:ca:9f:f6:0a:ef:ca:5d:e9:9c:06:43:f7:9c:c3:
                    42:da:62:58:f4:4a:68:1c:83:8b:56:56:86:f4:81:
                    f1:88:42:c0:2c:ad:c8:c1:dd:d4:e4:8a:52:2b:1c:
                    fa:36:43:8d:25:aa:06:06:1b:f8:a9:5c:ba:b9:0b:
                    7e:04:88:ad:28:58:5c:2d:2e:bc:a4:d3:8e:24:c8:
                    b3:15:d4:b4:e2:dc:86:f8:44:d7:22:04:c2:29:8c:
                    25:a4:b1:81:bb:d8:7a:80:57:f6:3a:82:98:21:6d:
                    8a:65:b0:a0:9d:d0:92:eb:31:36:fd:c9:78:67:5a:
                    1e:63:0f:5f:28:d7:09:7f:7b:c3:80:35:f1:1a:1b:
                    b2:d2:18:88:df:8a:de:67:6d:c5:98:db:6c:08:76:
                    30:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:99:61:8A:AC:98:8F:7A:7C:80:DF:0F:50:B6:63:28:F7:AE:51:26
            X509v3 Authority Key Identifier:
                keyid:76:78:62:5D:91:54:FC:DF:1B:00:0A:43:D1:F8:92:FB:1D:58:83:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:6b:99:78:64:68:2b:06:8f:a6:2e:38:7f:d6:49:ff:3f:d3:
         05:81:d9:31:e2:5e:c9:90:65:6d:7b:59:c2:65:23:6e:c4:0c:
         64:4c:fe:c7:37:60:47:41:7d:21:e5:e0:53:90:2d:e9:1b:73:
         92:52:71:32:23:a9:42:a2:9a:77:f1:78:8b:e4:c2:b7:71:19:
         a8:69:67:26:1c:d5:c8:7e:79:d2:e2:6c:61:c5:e7:e0:66:c0:
         04:7d:18:34:cd:28:e0:1b:fc:ba:0c:0b:9e:c3:55:85:f1:e7:
         43:7f:18:41:c4:ea:17:7b:0b:c8:90:8a:35:d0:e3:fb:5e:9d:
         9d:5f:da:51:f8:0d:64:bf:e8:f1:3d:b3:d5:ec:27:c4:52:12:
         fb:f1:61:f1:42:b0:95:52:64:e6:1e:ca:a1:5d:37:f6:e6:7c:
         76:d5:0c:04:a1:43:01:a1:19:ac:71:6b:e3:2e:f2:f2:e4:c1:
         a2:8b:ad:65:80:24:3a:64:af:fc:bb:49:e3:05:a3:47:07:fb:
         c5:25:1e:c1:f0:aa:84:34:e8:72:6a:94:b2:78:ed:d2:af:42:
         a8:aa:93:d8:1b:2a:ad:cd:c6:f2:45:5e:bb:52:75:0e:f3:aa:
         ba:e2:2c:de:ec:35:fd:94:8f:9a:4e:c4:5d:d5:32:b6:32:cc:
         30:e4:ab:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:31:06 2026 by rpki-client