Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft
File:                     D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft (raw, json)
Hash identifier:          rQStzD7RAFxiBA92wSc5qCzFfRJXtqhDZTY3TfHaj/E=
Subject key identifier:   D1:EB:68:00:5D:1E:69:BD:C6:D5:57:14:76:15:5C:FC:F2:A0:04:E5
Authority key identifier: 0F:99:B1:FE:CF:A5:70:04:F6:43:D8:2B:F5:11:CD:D4:74:78:6D:A0
Certificate issuer:       /CN=A9185413/serialNumber=0F99B1FECFA57004F643D82BF511CDD474786DA0
Certificate serial:       01B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5mx_s-lcAT2Q9gr9RHN1HR4baA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft
Manifest number:          01AC
Signing time:             Sun 05 Apr 2026 03:34:09 +0000
Manifest this update:     Sun 05 Apr 2026 03:34:08 +0000
Manifest next update:     Sun 12 Apr 2026 03:34:08 +0000
Files and hashes:         1: D5mx_s-lcAT2Q9gr9RHN1HR4baA.crl (hash: WK7bmDH09O5l0krEjwjVa9/ujZvwIIysI9hpRvIQCBE=)
                          2: C1D49C12AEDF11EE96155C68C4F9AE02.roa (hash: lkWBayLACrcApYQdnN1KbRgTJ81JMGh+ZFCvad/cRz8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.crl
                          rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5mx_s-lcAT2Q9gr9RHN1HR4baA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 03:34:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 433 (0x1b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185413, serialNumber=0F99B1FECFA57004F643D82BF511CDD474786DA0
        Validity
            Not Before: Apr  5 03:34:08 2026 GMT
            Not After : Apr 12 03:34:08 2026 GMT
        Subject: CN=69d1d830-4c26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:13:bc:64:f8:9d:93:31:92:7a:b2:56:e4:a8:
                    c7:b8:d2:06:db:8b:6e:23:79:23:35:40:1d:d7:ef:
                    b5:55:6d:1b:ff:d4:6a:98:bd:51:f0:f0:a5:1b:e1:
                    5d:03:c1:d0:ff:c8:fb:dd:18:01:26:99:c5:a9:2d:
                    17:6b:d0:c3:81:df:c8:95:b7:2f:dc:0b:f2:2f:cf:
                    ac:2e:e1:92:2e:a3:53:95:4d:e1:66:48:41:f1:1d:
                    ab:95:c2:f7:12:26:3f:f2:d8:8f:b0:9b:68:6f:90:
                    89:67:6e:3e:bc:ca:51:88:44:e9:7e:03:98:21:5d:
                    b6:d9:7f:fd:3a:3a:53:db:d6:55:de:17:e3:80:93:
                    0b:48:e1:f3:c8:1c:b6:60:72:22:fa:27:7d:d3:2e:
                    5e:55:bc:4f:e2:64:83:78:58:6d:71:e0:eb:9a:a6:
                    b4:50:ee:08:66:d6:ee:c5:95:1b:a6:07:ff:b3:39:
                    a9:5f:27:b2:a7:ba:17:9c:53:93:bb:0c:b9:2e:05:
                    1d:9f:f9:df:7b:a5:1a:37:8f:34:6e:bf:bd:59:e1:
                    f0:82:c3:1b:e0:d8:3f:74:7f:fb:55:53:13:b5:9c:
                    c6:a1:c6:2a:c6:79:6d:26:76:ff:39:b1:53:ea:99:
                    4c:95:9d:10:34:28:05:62:c1:16:b1:13:6a:7b:cf:
                    d7:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:EB:68:00:5D:1E:69:BD:C6:D5:57:14:76:15:5C:FC:F2:A0:04:E5
            X509v3 Authority Key Identifier:
                keyid:0F:99:B1:FE:CF:A5:70:04:F6:43:D8:2B:F5:11:CD:D4:74:78:6D:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5mx_s-lcAT2Q9gr9RHN1HR4baA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:1a:43:51:9e:0e:7e:2a:81:77:df:0b:59:cf:bd:d1:d3:d0:
         2c:e4:21:b3:c2:80:c1:cc:a2:c5:ca:22:f0:1e:d1:f0:e1:c7:
         8b:ac:6b:76:ba:03:03:b0:b6:04:11:c8:4c:58:b2:99:9b:07:
         db:99:8b:27:30:aa:c1:44:11:ec:62:74:11:44:12:43:8c:9e:
         56:cf:c5:f3:34:65:63:ba:00:b8:52:8e:27:ab:41:57:51:15:
         da:bd:3a:ee:33:f9:c5:52:53:9e:ca:33:18:5e:dd:b1:2c:52:
         3d:eb:bd:38:f9:12:f7:ec:6a:ed:a7:f6:42:5a:23:13:14:de:
         8e:b3:c4:07:a9:75:ce:b0:91:c9:1e:43:9b:71:ee:ca:0d:98:
         72:5b:44:25:c9:f5:0e:57:e5:2f:4d:2b:86:45:99:27:ec:12:
         6f:27:77:e5:1a:e7:dc:14:55:f4:0a:8d:c4:c8:d6:35:21:02:
         20:d4:2c:d9:72:09:1a:c8:2b:a6:50:0b:97:12:39:e2:2f:0e:
         49:b8:d0:10:ef:65:17:50:97:92:fc:19:0c:04:7d:cc:6f:a3:
         42:10:09:e3:70:27:94:a0:5f:65:32:76:97:0b:1d:a4:11:aa:
         dc:2f:ff:5f:90:26:05:b6:9f:fb:3f:1f:13:9a:d4:b1:2c:82:
         98:27:ff:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:48:33 2026 by rpki-client