Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft
File:                     DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft (raw, json)
Hash identifier:          m/Dq7UsCY6NK3ldDuyfeJKkbSnxrAdPV0Rk3DCDzgQY=
Subject key identifier:   01:95:4B:F1:8C:EC:79:B4:C3:ED:14:5B:87:22:A6:7F:98:69:3B:8F
Authority key identifier: 0E:66:3C:B4:90:0E:F4:D8:22:F9:9A:BD:E2:7F:A4:03:AB:9F:4C:40
Certificate issuer:       /CN=A91EDFAF/serialNumber=0E663CB4900EF4D822F99ABDE27FA403AB9F4C40
Certificate serial:       012B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft
Manifest number:          0119
Signing time:             Sun 05 Apr 2026 05:18:26 +0000
Manifest this update:     Sun 05 Apr 2026 05:18:26 +0000
Manifest next update:     Sun 12 Apr 2026 05:18:26 +0000
Files and hashes:         1: DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl (hash: zKIM8kU+vjh8msqb5rqMtUhuk7ruC/1RmP1PT6vnU0k=)
                          2: 5E89A9888CBD11EFBA479615C4F9AE02.roa (hash: pGkwox9umZUHoOM38loNX04qmSCRj5ejUz67/mM+dmc=)
                          3: 5D58A6368CBD11EFBA479615C4F9AE02.roa (hash: WXld54/qQpJ20SP2MF49RJrfgvRKOagSnwKZf6AK3Ng=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl
                          rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:18:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 299 (0x12b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDFAF, serialNumber=0E663CB4900EF4D822F99ABDE27FA403AB9F4C40
        Validity
            Not Before: Apr  5 05:18:26 2026 GMT
            Not After : Apr 12 05:18:26 2026 GMT
        Subject: CN=69d1f0a2-cab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:9a:e9:bd:9a:94:4d:f5:a4:5c:54:ac:2e:c1:
                    e2:92:58:02:17:bc:48:76:99:c9:b6:98:5d:79:a7:
                    ac:48:2b:44:ea:53:42:a3:17:22:86:fc:51:ae:e1:
                    89:ef:65:5b:e1:23:ee:a4:75:2e:22:b1:df:61:80:
                    db:70:7b:02:a9:64:16:77:ac:00:34:ff:a8:92:db:
                    5e:1f:68:91:f8:bc:0b:ee:aa:bd:e5:5a:9b:25:cb:
                    52:9e:47:97:2c:05:6a:3a:e4:95:fb:b9:d1:28:c4:
                    e2:00:7f:45:70:80:1f:e0:fb:56:06:b7:1f:88:9b:
                    08:7c:1f:37:55:a4:07:44:f3:36:63:41:3d:cf:9b:
                    7c:fd:3d:43:1a:0c:88:e7:40:e9:37:0c:a8:f0:90:
                    7c:28:46:c1:6f:2c:4c:f6:cf:16:f7:f7:bd:40:86:
                    fe:9f:70:29:ac:93:66:79:0b:42:99:8a:d7:99:63:
                    d8:e1:25:79:52:9d:76:5a:d5:35:60:9d:3a:2e:a2:
                    e8:88:62:d0:85:ee:52:99:8f:71:f6:84:34:9c:3e:
                    7e:86:4c:d3:3b:2c:e7:fe:a8:ca:7a:22:83:65:09:
                    c0:c8:72:be:61:65:78:d8:ba:56:95:b6:59:2f:bb:
                    4f:ea:63:4b:65:dd:1a:5e:0e:5e:a1:f7:bb:65:db:
                    8d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:95:4B:F1:8C:EC:79:B4:C3:ED:14:5B:87:22:A6:7F:98:69:3B:8F
            X509v3 Authority Key Identifier:
                keyid:0E:66:3C:B4:90:0E:F4:D8:22:F9:9A:BD:E2:7F:A4:03:AB:9F:4C:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:cb:70:80:81:86:9e:02:81:f2:f2:75:4b:8d:96:3a:11:71:
         41:dd:79:70:a8:21:f8:de:f5:a9:5a:21:30:23:3d:01:b9:ac:
         51:c4:6e:ca:79:ab:18:92:ad:75:bb:1a:dc:70:51:2e:3e:b7:
         17:12:a5:89:10:3a:44:e4:5f:66:0a:b5:43:69:c0:d9:a4:cd:
         4a:70:bc:b5:6e:cc:7a:8f:2a:10:1f:ea:e7:70:33:85:83:b8:
         77:b5:dd:d9:33:d8:db:76:9c:cb:c9:f1:41:08:ac:0d:16:01:
         8b:ca:89:dd:71:ad:49:7b:c5:8f:5f:9a:36:67:17:93:98:d4:
         29:9a:d5:cc:0f:78:66:53:a1:98:86:0c:62:c3:64:82:aa:09:
         48:f3:2b:21:53:d2:40:9b:69:89:65:36:8b:f5:ee:e7:f1:d2:
         2e:97:bc:f3:3d:02:b6:d7:d9:d8:df:65:66:2d:94:56:8d:37:
         02:3d:fe:a0:7b:2d:4d:2a:d9:5a:97:62:f9:6e:c1:cd:ce:d0:
         69:7f:08:e0:61:7c:15:33:2b:34:47:fd:b2:2e:37:21:b6:14:
         52:13:6b:ba:56:49:67:39:eb:5d:06:a1:ce:1c:59:2e:da:6f:
         9a:a7:fc:36:4b:89:d6:15:31:a6:2c:1a:73:5d:64:f6:73:83:
         6c:4b:2a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:42:24 2026 by rpki-client