Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft
File:                     DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft (raw, json)
Hash identifier:          nV/jvKCMbpd7jbh8xuUzv2oY/QA8c1tdaXFgIpfIpQ0=
Subject key identifier:   22:8E:FB:10:AE:EF:95:AF:A6:49:E4:47:A0:9B:88:0B:65:9F:6F:85
Authority key identifier: 0C:CA:B9:44:7A:17:AC:3C:8A:78:7B:E9:47:EC:5D:6F:4A:89:5C:E9
Certificate issuer:       /CN=A91A6EA0/serialNumber=0CCAB9447A17AC3C8A787BE947EC5D6F4A895CE9
Certificate serial:       026D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft
Manifest number:          0265
Signing time:             Sun 05 Apr 2026 01:42:55 +0000
Manifest this update:     Sun 05 Apr 2026 01:42:55 +0000
Manifest next update:     Sun 12 Apr 2026 01:42:55 +0000
Files and hashes:         1: DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl (hash: ggKlMqEyFQ0TXtOxQ4t90EjRdlRPeSf0mb8jznA/cKg=)
                          2: 35CFAB068C4111ED8E01DF60C4F9AE02.roa (hash: 0qYn7E3SIHbzT9yJTx6pS9lXwvNIUC0KNk60lEWDjkU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl
                          rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 01:42:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 621 (0x26d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6EA0, serialNumber=0CCAB9447A17AC3C8A787BE947EC5D6F4A895CE9
        Validity
            Not Before: Apr  5 01:42:55 2026 GMT
            Not After : Apr 12 01:42:55 2026 GMT
        Subject: CN=69d1be1f-6737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:30:72:07:02:1e:e9:4a:df:f3:5e:2c:ba:a3:
                    bc:61:8c:68:db:0b:d6:d9:46:b5:de:cb:2c:53:44:
                    13:4e:57:b0:45:0f:9b:64:ce:53:c0:5d:38:25:27:
                    b3:55:7b:f1:4c:ad:a8:8d:38:f8:8f:b9:43:40:0c:
                    a6:f2:ec:ce:d1:74:fd:fe:83:63:a0:5a:38:cc:03:
                    a6:68:ea:e1:5a:eb:a3:50:53:1b:1a:55:c2:80:3d:
                    0b:52:17:69:0a:b1:a3:b1:d3:ff:23:d3:15:45:31:
                    95:6b:5f:7d:b2:da:60:a5:27:4a:2a:66:91:bb:98:
                    a8:f1:07:6f:fd:8e:a8:7b:f7:c1:4a:be:c3:29:42:
                    6c:14:d2:91:7b:e1:51:25:b5:51:e2:58:60:15:e9:
                    ba:20:27:83:a2:96:8d:6a:d5:69:07:cb:6b:ab:94:
                    b7:0d:03:e5:25:d6:1a:6d:e0:a2:f7:36:d1:65:a0:
                    a4:7b:18:6c:25:fb:8e:4b:b8:f1:3b:41:fb:f0:cb:
                    9f:27:97:b7:ab:01:08:88:3f:38:46:c2:54:1c:d1:
                    65:0c:e6:07:6f:97:a2:f5:63:87:c7:b7:4e:00:76:
                    62:5b:90:8b:b8:8f:f3:45:ba:c2:3d:29:40:3c:a4:
                    1f:51:12:7b:ba:27:3e:61:3d:37:48:08:18:14:37:
                    95:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:8E:FB:10:AE:EF:95:AF:A6:49:E4:47:A0:9B:88:0B:65:9F:6F:85
            X509v3 Authority Key Identifier:
                keyid:0C:CA:B9:44:7A:17:AC:3C:8A:78:7B:E9:47:EC:5D:6F:4A:89:5C:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:74:b8:9c:3b:97:9c:ea:b6:54:74:aa:a2:b4:17:11:e0:79:
         1b:0f:86:82:b1:cc:6c:21:19:f3:a6:4b:17:e3:6f:85:6c:43:
         7f:a4:0e:79:d6:de:65:07:4b:c1:cd:47:a2:0b:35:69:47:32:
         ef:f3:d9:fd:42:20:51:9f:47:09:41:ee:c8:06:df:31:aa:70:
         df:3d:94:4a:b2:d4:e3:83:ca:6d:b3:60:d9:84:d1:76:c6:fa:
         77:80:4c:a1:50:0c:c2:d9:1d:d2:5c:c1:72:c9:aa:40:66:ea:
         2f:42:f8:ae:ef:a3:68:8d:be:7a:30:2b:9e:bd:64:60:ed:45:
         a6:95:23:c8:bd:96:0f:cf:9d:f8:58:2b:75:bf:30:0b:26:a9:
         ed:83:82:8d:d4:c0:83:59:5c:be:9a:08:16:74:08:9d:52:5e:
         70:dc:28:fe:97:b3:cd:fe:3d:e9:d0:25:78:8d:08:a7:fa:46:
         d9:16:9a:81:4a:51:34:e8:16:02:9a:1c:5a:99:1d:7e:f5:4e:
         e2:ef:37:e9:c6:f2:18:59:19:b9:73:66:a2:bd:d6:5f:e9:7d:
         2e:8e:fe:1d:d9:d4:09:7b:8e:09:6a:fc:7c:3d:d6:c1:b9:5f:
         e0:6c:c4:80:de:b6:d2:4b:8a:13:ae:3a:c6:a1:ea:20:2f:17:
         86:7b:b3:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:03 2026 by rpki-client