Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft
File:                     dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft (raw, json)
Hash identifier:          hkdyRqv/vCtD0fqRzYk/p4+tRGbV7O3wiLd3waV4fq4=
Subject key identifier:   7B:B5:CB:DD:E0:E9:80:55:E2:61:C7:3A:FC:71:78:78:D2:C3:9F:44
Authority key identifier: 76:66:10:08:DA:C8:92:84:C5:37:F2:DC:E0:A9:20:BA:94:E0:78:CF
Certificate issuer:       /CN=A91828F3/serialNumber=76661008DAC89284C537F2DCE0A920BA94E078CF
Certificate serial:       0259
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmYQCNrIkoTFN_Lc4KkgupTgeM8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft
Manifest number:          0253
Signing time:             Sun 05 Apr 2026 01:51:26 +0000
Manifest this update:     Sun 05 Apr 2026 01:51:26 +0000
Manifest next update:     Sun 12 Apr 2026 01:51:26 +0000
Files and hashes:         1: dmYQCNrIkoTFN_Lc4KkgupTgeM8.crl (hash: qoUpy8G+a/toU33Ogcy42OAWEd5E9z36cEDtUF6ABKs=)
                          2: 05E078B2A5D211EDBC42DA12C4F9AE02.roa (hash: 21k7xo1DVvGDuKsBBbSZADbL50JKJ6QopBZblEvUm/c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.crl
                          rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmYQCNrIkoTFN_Lc4KkgupTgeM8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 01:51:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 601 (0x259)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91828F3, serialNumber=76661008DAC89284C537F2DCE0A920BA94E078CF
        Validity
            Not Before: Apr  5 01:51:26 2026 GMT
            Not After : Apr 12 01:51:26 2026 GMT
        Subject: CN=69d1c01e-7d40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d8:eb:6a:a5:ff:dd:65:48:31:f5:1e:95:a2:
                    4f:8c:22:40:f7:e1:4b:f5:6a:4c:3a:20:28:cb:39:
                    62:31:7c:d5:59:35:b5:c9:04:bd:40:61:36:15:d1:
                    fa:e4:4c:aa:e0:69:45:98:fb:43:b5:88:41:0e:6b:
                    f0:b1:9b:2a:15:d4:f2:67:30:f0:e2:46:b9:9f:bf:
                    2d:e1:40:5d:8f:8c:57:ad:aa:c4:45:0a:d7:53:75:
                    7b:5b:69:9b:06:48:7e:b1:5c:d6:c9:44:97:3f:86:
                    cc:0a:a8:54:30:f8:a6:b9:08:3a:93:c1:4c:56:28:
                    99:e5:88:87:98:e9:0c:0d:fe:88:0d:a1:88:d5:d5:
                    d4:1a:8b:8f:71:08:df:5f:8c:60:3c:bd:41:8c:f0:
                    52:4f:45:41:0d:53:97:b1:a4:3f:ce:02:b6:37:7c:
                    57:7a:b9:2c:ed:73:76:63:c1:98:d9:c1:02:ed:0d:
                    40:75:1f:72:b5:5e:68:ea:6f:df:fa:23:9b:d0:9d:
                    35:c2:bf:ac:1c:87:d8:a1:e8:ea:5a:7e:78:b1:07:
                    ad:6c:c2:7a:4e:f0:ed:07:38:94:81:fc:5f:70:6c:
                    ee:40:43:ec:79:9b:38:1b:64:b2:c6:05:2a:e8:a8:
                    d9:4d:62:d7:1e:39:ea:9e:9f:e8:de:78:e4:d8:65:
                    4c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B5:CB:DD:E0:E9:80:55:E2:61:C7:3A:FC:71:78:78:D2:C3:9F:44
            X509v3 Authority Key Identifier:
                keyid:76:66:10:08:DA:C8:92:84:C5:37:F2:DC:E0:A9:20:BA:94:E0:78:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmYQCNrIkoTFN_Lc4KkgupTgeM8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:cb:79:ad:cb:b1:5c:48:56:df:9f:47:6d:7d:0e:ab:d2:3d:
         5c:7d:17:35:19:5e:83:46:6a:b5:bd:d3:c2:52:74:8c:19:e5:
         7e:00:b3:f9:e4:68:8c:9c:ae:c4:87:87:ae:8a:1d:1e:f1:d0:
         e4:64:87:85:52:7f:71:86:00:4c:11:7f:1e:ca:4d:6d:ac:2e:
         08:04:1d:05:05:9d:e8:91:99:31:01:e1:b3:5c:a4:28:b7:eb:
         73:04:ee:5e:c7:4e:ed:ef:3b:3c:32:63:08:ec:04:95:1a:c3:
         0d:94:fb:15:ea:30:c9:2a:c4:6a:f6:c9:2f:ab:4a:61:c2:51:
         ae:5a:f3:8a:20:ed:6f:5c:ce:01:71:33:29:73:6a:e4:ea:42:
         22:ac:e9:c2:6c:cf:36:5d:dd:e1:77:7a:26:af:63:75:f7:5c:
         bd:8c:b4:60:d6:53:bc:71:96:37:6b:58:9b:a9:2e:aa:f9:74:
         89:0c:c8:bd:fa:19:57:58:78:ff:2a:04:e6:e9:a9:43:0b:ea:
         24:de:eb:65:e6:44:a0:0e:d5:16:b9:38:8b:0d:89:be:27:19:
         d8:f6:31:36:de:82:cd:28:23:d9:50:20:ee:74:47:2d:eb:0d:
         d4:4d:00:56:a6:e2:78:01:0b:f8:dc:08:ab:ff:09:f4:54:39:
         b1:52:68:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:11:04 2026 by rpki-client