Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911170F/46064FD09F6A11F1AC7746063611F970/dTtODkQmioFmFCG306CSJ-Xi3K4.mft
File:                     dTtODkQmioFmFCG306CSJ-Xi3K4.mft (raw, json)
Hash identifier:          KJHFUePy6ClElbe7Z6tXj0o6WtxODGxlyHfrU7cDe7Q=
Subject key identifier:   EC:E8:57:96:B9:15:A6:70:17:1A:F3:B3:DB:52:1C:85:7A:05:31:C2
Authority key identifier: 75:3B:4E:0E:44:26:8A:81:66:14:21:B7:D3:A0:92:27:E5:E2:DC:AE
Certificate issuer:       /CN=A911170F/serialNumber=753B4E0E44268A81661421B7D3A09227E5E2DCAE
Certificate serial:       2D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dTtODkQmioFmFCG306CSJ-Xi3K4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911170F/46064FD09F6A11F1AC7746063611F970/dTtODkQmioFmFCG306CSJ-Xi3K4.mft
Manifest number:          2D
Signing time:             Fri 13 Nov 2026 08:55:56 +0000
Manifest this update:     Fri 13 Nov 2026 08:55:56 +0000
Manifest next update:     Fri 20 Nov 2026 08:55:56 +0000
Files and hashes:         1: dTtODkQmioFmFCG306CSJ-Xi3K4.crl (hash: o6v4KVY+POxTScVYFcV/kwAIa0Rej9mkYtcgE1Cn24o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911170F/46064FD09F6A11F1AC7746063611F970/dTtODkQmioFmFCG306CSJ-Xi3K4.crl
                          rsync://rpki.apnic.net/member_repository/A911170F/46064FD09F6A11F1AC7746063611F970/dTtODkQmioFmFCG306CSJ-Xi3K4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dTtODkQmioFmFCG306CSJ-Xi3K4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Nov 2026 08:55:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911170F, serialNumber=753B4E0E44268A81661421B7D3A09227E5E2DCAE
        Validity
            Not Before: Nov 13 08:55:56 2026 GMT
            Not After : Nov 20 08:55:56 2026 GMT
        Subject: CN=6af6d09c-75e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c8:ca:37:72:96:65:50:02:31:f8:35:7d:95:
                    23:1f:a4:b1:4c:c2:77:56:86:e0:b7:38:2a:e3:7b:
                    79:12:d7:d8:0f:ed:42:5b:22:0c:1c:8a:93:36:cd:
                    c1:a5:67:58:a8:71:97:f9:10:24:83:dd:ea:6a:ba:
                    5d:48:6e:09:c6:96:8c:8e:43:63:21:1b:db:8c:eb:
                    27:47:db:21:7d:03:9a:a7:52:c6:6c:26:e9:13:3e:
                    c7:fb:ff:1b:bd:87:e7:05:88:e7:05:0e:8b:31:a5:
                    e8:9d:50:4b:55:ea:7d:66:5c:08:9a:ba:b7:6f:e6:
                    b4:ca:5a:95:b1:2a:6e:99:53:d9:e9:fa:ed:db:39:
                    50:e1:79:0e:bd:4d:59:c9:bc:0e:e1:fc:fd:c7:72:
                    0f:c8:12:40:ad:d6:de:cd:e0:42:00:cd:51:c7:4f:
                    cd:3e:a6:7f:a2:d4:4e:4e:ba:ae:fe:33:77:dd:30:
                    b8:c8:b7:53:1c:72:f2:f7:10:f4:59:b7:6a:71:b5:
                    10:40:66:a5:4d:1e:5b:5d:c9:17:56:c5:45:e3:98:
                    1a:0f:6d:52:6f:2b:09:45:67:4e:97:5b:1c:f4:43:
                    8a:6c:49:fa:08:35:68:52:8b:35:2a:fd:d5:82:06:
                    65:0c:87:03:a1:71:94:3e:1b:84:1d:b0:c8:52:54:
                    00:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:E8:57:96:B9:15:A6:70:17:1A:F3:B3:DB:52:1C:85:7A:05:31:C2
            X509v3 Authority Key Identifier:
                keyid:75:3B:4E:0E:44:26:8A:81:66:14:21:B7:D3:A0:92:27:E5:E2:DC:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911170F/46064FD09F6A11F1AC7746063611F970/dTtODkQmioFmFCG306CSJ-Xi3K4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dTtODkQmioFmFCG306CSJ-Xi3K4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911170F/46064FD09F6A11F1AC7746063611F970/dTtODkQmioFmFCG306CSJ-Xi3K4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:7d:4f:24:83:74:58:dd:c8:d4:5b:99:b4:a7:df:87:2d:68:
         25:71:20:66:3e:8e:ac:23:d2:ef:5f:29:fa:1c:af:41:6b:10:
         0d:c8:f9:6e:7a:05:34:df:c4:19:7f:c5:f1:a6:a0:1c:a7:fb:
         17:47:6f:9a:e0:71:4e:1a:1b:d8:8f:32:3c:d1:65:e8:2c:78:
         60:db:24:9c:4a:bc:03:ea:8f:ec:f2:5b:87:cf:dc:6a:79:25:
         a7:fc:ee:fa:71:97:ba:97:6a:74:75:4e:2c:3c:80:68:e7:dc:
         21:f0:af:cb:a3:5c:9f:66:f1:bc:d7:63:ec:21:7f:0e:40:7b:
         00:fe:93:ab:0f:e3:11:ef:b0:95:71:25:7b:2b:3a:66:36:ef:
         db:dc:db:6a:35:bc:3e:e0:f1:3c:d2:2c:07:2e:27:d7:07:82:
         1c:9a:0c:c1:cb:0c:8a:f9:bb:48:7c:d4:80:22:69:14:7a:c9:
         77:d6:ee:35:37:3c:ad:87:41:3f:fd:12:cd:c8:4f:f2:53:a9:
         96:e5:80:7f:4b:fa:db:8a:49:3e:b9:5b:e2:70:ef:8d:07:a2:
         bb:11:29:cf:ce:84:40:13:4b:59:67:f2:e4:c5:26:c0:9a:68:
         8b:fc:59:c5:72:90:f6:4b:7d:b1:b9:c3:e8:96:6e:cd:ec:1f:
         9d:f0:0d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:26:55 2026 by rpki-client