Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft
File:                     dGJBrad929_qD-FE7-ITkeP8T9k.mft (raw, json)
Hash identifier:          ekTYNsZUZIi3NVO0KbQOr0TZCOKAz4zoSJFg6KOhIzs=
Subject key identifier:   77:74:40:31:5D:95:19:70:7D:DE:74:CC:17:76:46:FB:93:F2:27:07
Authority key identifier: 74:62:41:AD:A7:7D:DB:DF:EA:0F:E1:44:EF:E2:13:91:E3:FC:4F:D9
Certificate issuer:       /CN=A91ACBB7/serialNumber=746241ADA77DDBDFEA0FE144EFE21391E3FC4FD9
Certificate serial:       0D8F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft
Manifest number:          0D69
Signing time:             Tue 28 Apr 2026 18:07:41 +0000
Manifest this update:     Tue 28 Apr 2026 18:07:40 +0000
Manifest next update:     Tue 05 May 2026 18:07:40 +0000
Files and hashes:         1: dGJBrad929_qD-FE7-ITkeP8T9k.crl (hash: ASkbTLRR6KsNyf1gI+ajZ4RUVvS3Ij7uRAUjn+w+jrk=)
                          2: 2B9FBCB0DEC911EBA828524CC4F9AE02.roa (hash: MCYhaXeWm4Azn45D+8Hoz0m3yVVZUkz11sIQ3TDfy9w=)
                          3: 2CC5D50CDEC911EBA828524CC4F9AE02.roa (hash: 90DgDT5NeM7xQ03ACEtF57cO7mWeIuHF/7OMNDwtBac=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.crl
                          rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 05 May 2026 18:07:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3471 (0xd8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ACBB7, serialNumber=746241ADA77DDBDFEA0FE144EFE21391E3FC4FD9
        Validity
            Not Before: Apr 28 18:07:40 2026 GMT
            Not After : May  5 18:07:40 2026 GMT
        Subject: CN=69f0f76d-7785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7e:c9:0a:68:b1:75:87:de:0f:7c:b8:51:50:
                    3f:41:04:50:ce:83:6f:44:86:fb:8b:76:e9:de:1f:
                    f8:51:65:fa:e8:c9:07:72:ce:75:d3:0d:2b:90:9c:
                    7f:2f:0f:96:70:c7:ef:82:7c:42:06:ca:8d:25:4a:
                    4d:8c:09:c5:dc:e4:df:e4:97:8e:84:ec:14:c9:ee:
                    3b:a9:9f:bf:60:9a:80:a1:fb:62:c8:b6:88:54:18:
                    ea:dd:80:b7:5d:43:c1:44:f3:53:79:81:53:3c:0b:
                    20:7d:54:1f:5b:36:9f:69:b7:d1:8f:f3:a4:12:76:
                    ef:af:b6:49:92:9c:c8:04:92:15:76:4a:3a:5b:9d:
                    44:73:b3:ec:a9:b0:89:36:77:66:74:70:82:e5:49:
                    0e:0e:07:ac:4a:ce:cc:26:7d:e1:81:48:85:56:5a:
                    29:3e:a9:25:e3:02:65:09:f2:e8:3d:2f:d7:de:a9:
                    e3:b7:4c:38:7f:12:d9:6f:da:34:39:53:94:71:df:
                    e2:85:00:c7:c8:4e:be:09:80:06:04:92:9a:6f:5a:
                    e0:e9:be:68:cf:e3:f4:3a:8c:05:f1:15:27:b7:97:
                    a8:3c:49:d6:1a:32:44:d3:8e:c1:be:21:08:8c:91:
                    17:08:22:94:0e:1f:dd:5e:3e:48:21:eb:94:4a:5c:
                    db:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:74:40:31:5D:95:19:70:7D:DE:74:CC:17:76:46:FB:93:F2:27:07
            X509v3 Authority Key Identifier:
                keyid:74:62:41:AD:A7:7D:DB:DF:EA:0F:E1:44:EF:E2:13:91:E3:FC:4F:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:94:bf:7e:ec:ee:96:b9:83:2a:6d:6a:45:b8:00:15:90:c3:
         cc:1b:37:74:02:18:10:59:45:b6:01:86:03:7f:68:b1:b1:d2:
         e2:3e:6a:71:f5:fc:85:07:34:26:33:82:e1:66:53:59:84:1a:
         5b:b6:5a:6f:d6:fe:2b:4b:0a:1f:11:4f:fb:59:1a:cc:1e:60:
         07:78:ae:c7:c3:04:38:02:51:f9:92:e2:76:7e:0c:3b:08:70:
         27:6e:b9:b3:d3:57:7b:df:bf:21:23:97:0f:40:c1:e2:42:e6:
         ab:54:59:db:ce:35:e9:25:7a:f8:3e:de:ca:cc:89:88:f0:91:
         09:16:16:d9:cc:2c:01:d3:34:fd:bf:c8:b9:d0:e9:22:0c:4a:
         b3:a2:70:e1:d8:74:7a:40:8e:0e:e5:38:c5:bc:30:35:25:75:
         8a:99:8b:35:b9:a1:60:83:cd:9f:db:d6:73:5e:e5:59:ea:20:
         39:32:be:99:b9:ef:66:35:f5:68:a8:d3:a9:bf:3a:38:41:dc:
         23:8c:c5:77:54:e5:bb:b2:2d:b8:f9:13:59:a2:21:c0:4f:dc:
         7e:e0:5f:cc:bf:19:20:2f:96:c5:8c:8f:e2:b2:0d:c6:4e:ff:
         a5:1c:47:0c:fa:c0:e2:91:5e:1f:7a:28:2d:0d:45:fe:21:2a:
         d4:a5:61:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 22:16:41 2026 by rpki-client