Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E754F/B452BF8C841D11EBA087BF31C4F9AE02/DB8k6eYChXae9hTPqBPuUayemP4.mft
File:                     DB8k6eYChXae9hTPqBPuUayemP4.mft (raw, json)
Hash identifier:          lTdiedCR/4O4cSxJ0hz4sQzN8j/gnxtqteDUjM+8ZHo=
Subject key identifier:   AE:8C:6F:F9:C3:4C:70:F5:7C:65:D1:B8:88:9B:99:E9:50:82:90:51
Authority key identifier: 0C:1F:24:E9:E6:02:85:76:9E:F6:14:CF:A8:13:EE:51:AC:9E:98:FE
Certificate issuer:       /CN=A91E754F/serialNumber=0C1F24E9E60285769EF614CFA813EE51AC9E98FE
Certificate serial:       0706
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DB8k6eYChXae9hTPqBPuUayemP4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E754F/B452BF8C841D11EBA087BF31C4F9AE02/DB8k6eYChXae9hTPqBPuUayemP4.mft
Manifest number:          06FD
Signing time:             Sat 04 Apr 2026 21:48:41 +0000
Manifest this update:     Sat 04 Apr 2026 21:48:40 +0000
Manifest next update:     Sat 11 Apr 2026 21:48:40 +0000
Files and hashes:         1: DB8k6eYChXae9hTPqBPuUayemP4.crl (hash: itYWtMqxzBzlIApM5RmtZjifPVHe6FnE/Z6Sg0Rh1Ks=)
                          2: 26F67E0A842011EB8A4C635AC4F9AE02.roa (hash: ioX0Rrcupy/Da/JHKeAPMLqGB0R4pScdrEz6YhjJBxQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E754F/B452BF8C841D11EBA087BF31C4F9AE02/DB8k6eYChXae9hTPqBPuUayemP4.crl
                          rsync://rpki.apnic.net/member_repository/A91E754F/B452BF8C841D11EBA087BF31C4F9AE02/DB8k6eYChXae9hTPqBPuUayemP4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DB8k6eYChXae9hTPqBPuUayemP4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 21:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1798 (0x706)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E754F, serialNumber=0C1F24E9E60285769EF614CFA813EE51AC9E98FE
        Validity
            Not Before: Apr  4 21:48:40 2026 GMT
            Not After : Apr 11 21:48:40 2026 GMT
        Subject: CN=69d18739-fdcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9b:7c:e2:61:8c:ce:55:66:53:e5:e4:bb:ff:
                    ef:77:80:f3:ec:d2:31:05:30:32:5e:cb:a8:31:1b:
                    37:3f:de:84:5e:ef:80:5b:17:1b:bd:2c:c2:27:6f:
                    37:b4:ba:f7:c2:c8:d0:5a:c2:a0:6d:d3:56:48:56:
                    43:0a:07:c4:f9:1d:ed:b2:10:38:9e:9c:7c:70:d6:
                    e3:b0:a3:5a:1e:50:30:69:30:47:e1:26:55:83:b2:
                    1c:29:3f:c0:98:55:35:e9:31:42:fc:ab:63:dc:bc:
                    52:7c:fa:e4:97:45:8b:cb:2c:2e:26:c2:c9:30:bf:
                    54:07:35:c1:cc:12:87:29:a6:d9:17:ea:8f:51:67:
                    af:df:b7:90:09:ab:b5:35:d9:d9:de:aa:89:a7:93:
                    6a:c9:ee:3e:81:80:b7:27:ec:db:b3:f7:b6:2e:66:
                    f4:09:03:36:13:6f:9d:88:ed:ad:d0:a2:c9:33:fd:
                    60:0f:5e:f5:bb:77:9f:2f:30:21:a9:3c:a6:9c:61:
                    aa:cc:54:c4:95:2c:0a:cf:41:8b:bd:fd:3c:ec:37:
                    79:92:58:0b:67:47:19:fb:75:f6:1a:85:e3:a8:3d:
                    b6:97:6c:62:8a:a5:5c:fc:e9:2b:4e:10:94:a7:9a:
                    ae:69:7c:19:6a:8f:55:7b:40:00:c4:03:ca:39:f6:
                    7a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:8C:6F:F9:C3:4C:70:F5:7C:65:D1:B8:88:9B:99:E9:50:82:90:51
            X509v3 Authority Key Identifier:
                keyid:0C:1F:24:E9:E6:02:85:76:9E:F6:14:CF:A8:13:EE:51:AC:9E:98:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E754F/B452BF8C841D11EBA087BF31C4F9AE02/DB8k6eYChXae9hTPqBPuUayemP4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DB8k6eYChXae9hTPqBPuUayemP4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E754F/B452BF8C841D11EBA087BF31C4F9AE02/DB8k6eYChXae9hTPqBPuUayemP4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:4f:a0:aa:16:42:89:45:62:63:85:89:5c:1a:35:63:6c:a4:
         93:1c:1d:57:8f:9e:14:b5:49:8f:40:41:1f:5b:1f:b1:03:c0:
         38:50:4d:f1:10:a1:57:12:6b:af:6a:a7:1c:63:f0:be:60:2a:
         6d:8e:36:e9:20:33:9b:91:4b:19:75:68:4a:24:44:9d:be:52:
         20:83:84:4e:5c:eb:8b:2c:f1:a2:69:2f:10:e0:5f:27:aa:ef:
         9e:4e:a6:bb:5e:31:4c:92:73:34:77:f1:77:c0:c2:21:a4:d7:
         27:b1:d5:2f:32:a5:f5:d8:b5:5d:d5:7b:10:c4:a4:e6:5c:48:
         ba:39:8b:c6:e4:4e:eb:4b:8c:44:e9:9a:97:8c:04:1a:26:44:
         95:a8:ef:06:38:58:8b:56:81:90:74:a3:af:22:69:44:aa:a8:
         44:25:cc:09:a1:6a:43:67:3b:d8:c4:59:be:94:c7:f6:20:1c:
         4c:8c:85:b0:01:8e:25:21:ab:cf:95:27:35:fa:9d:fa:10:42:
         28:59:34:b8:67:eb:56:29:b5:c6:4b:cf:62:7d:d9:cc:1a:0e:
         f2:ee:eb:96:41:e2:29:a2:77:07:73:fe:48:3c:8a:af:81:3b:
         d3:18:cb:51:3f:23:8b:24:5a:c0:dd:11:2e:0d:82:8a:8c:e5:
         11:cf:ec:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:33:15 2026 by rpki-client