Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.mft
File:                     DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.mft (raw, json)
Hash identifier:          0zL9x8CKMeKARHGBHU+KOAGJOFJGBMnzhScyxWyIb9Y=
Subject key identifier:   3C:AB:6F:2B:3E:5B:C5:01:F2:4A:19:C1:47:D3:9E:AB:A4:4F:52:6A
Authority key identifier: 0D:03:46:C8:A2:66:BE:6A:DC:E4:B7:E8:39:50:AF:5F:E1:EB:E5:C4
Certificate issuer:       /CN=A9112BDE/serialNumber=0D0346C8A266BE6ADCE4B7E83950AF5FE1EBE5C4
Certificate serial:       07A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.mft
Manifest number:          079D
Signing time:             Sun 01 Mar 2026 22:24:29 +0000
Manifest this update:     Sun 01 Mar 2026 22:24:28 +0000
Manifest next update:     Sun 08 Mar 2026 22:24:28 +0000
Files and hashes:         1: DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.crl (hash: EcZaWzMb48MxBvfptVXfWgxCnhMskE06HtLG+AxG8ts=)
                          2: 511EBFFE3E7E11EB979F564CC4F9AE02.roa (hash: 9KtZPuEFaySBfCkE/NQSz20UG0qNsgPpWhyyVzH5fGo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.crl
                          rsync://rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1958 (0x7a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112BDE, serialNumber=0D0346C8A266BE6ADCE4B7E83950AF5FE1EBE5C4
        Validity
            Not Before: Mar  1 22:24:28 2026 GMT
            Not After : Mar  8 22:24:28 2026 GMT
        Subject: CN=69a4bc9d-c638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7e:11:4b:5e:fd:ff:95:46:32:88:ca:55:11:
                    c5:8c:69:99:6a:0f:af:44:de:a9:e5:82:47:c3:86:
                    ef:68:e5:72:f9:52:ff:5d:f7:d4:0d:56:ee:29:25:
                    91:1a:7f:8d:d0:1a:09:c2:af:f9:b6:13:3d:ff:08:
                    0b:d0:eb:66:ae:8b:40:48:f6:97:c0:86:89:6c:73:
                    84:36:87:3a:85:60:a5:fd:76:e5:87:6b:4c:1a:a8:
                    47:3f:b2:8a:8d:66:18:2a:ec:42:0a:14:ab:7c:09:
                    d9:e1:b0:db:6e:1e:6d:6a:88:65:ff:ac:84:9c:30:
                    4d:2f:d0:28:6e:da:8d:af:af:38:5d:db:d4:3f:65:
                    9d:9d:17:a6:7f:6e:96:63:cd:4a:e5:6a:6f:23:6f:
                    35:a2:40:95:31:f4:a1:76:86:d9:8b:c5:0d:75:49:
                    2a:7a:95:9a:0e:90:dc:e0:0f:8f:bc:09:82:ec:41:
                    8b:99:c6:30:08:b4:a1:a4:2f:59:61:89:0a:e9:f5:
                    df:e7:19:c4:1a:97:36:17:c7:ab:4d:63:2b:ff:00:
                    83:2e:24:49:ef:65:3f:42:af:03:08:c4:4c:29:00:
                    e8:3c:4e:5a:6c:fb:61:39:1f:c3:10:ba:5d:b1:9d:
                    ce:bd:45:44:c6:3f:76:31:cb:86:d9:3d:e8:c8:6b:
                    62:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:AB:6F:2B:3E:5B:C5:01:F2:4A:19:C1:47:D3:9E:AB:A4:4F:52:6A
            X509v3 Authority Key Identifier:
                keyid:0D:03:46:C8:A2:66:BE:6A:DC:E4:B7:E8:39:50:AF:5F:E1:EB:E5:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:d7:23:c8:52:2d:0b:15:68:63:36:74:c7:25:55:a9:92:a9:
         81:c9:31:c7:6b:0d:98:90:00:01:f7:03:ba:fd:de:02:02:a0:
         f9:b6:70:09:74:13:d4:2c:b3:6c:e5:df:70:02:70:59:23:e4:
         78:06:f2:e3:24:43:1e:53:2c:22:fc:36:81:5f:40:39:08:b0:
         3e:c4:d7:4c:62:d7:01:23:87:30:98:d2:06:11:07:53:3a:c7:
         88:35:68:99:ef:74:99:44:ab:1c:0b:f6:e0:e4:aa:0e:07:20:
         68:fe:7b:a9:f5:a1:71:64:93:1d:db:0c:20:39:3d:22:26:91:
         d0:ed:23:a6:b8:50:d6:a9:ea:b7:e2:b4:ea:b4:54:3a:ad:11:
         74:af:b6:2c:2e:a3:20:be:9b:0e:b6:a7:44:49:63:73:78:e0:
         a3:aa:c2:81:a8:6f:1f:1b:2c:41:61:52:91:89:07:bc:45:b4:
         32:2a:b1:0a:cd:0e:4e:e8:43:c5:74:0e:78:24:c4:c2:c6:2d:
         d6:e0:4e:8d:53:ff:12:15:14:f8:ae:04:5f:91:84:fa:9b:95:
         dd:e0:f4:ae:3e:c5:9a:10:b3:b0:0b:5e:e3:ae:40:e2:47:ac:
         c2:ef:f0:e2:27:2e:f8:5f:9f:e3:6e:49:f9:2c:80:dc:26:50:
         b6:14:d9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:34:42 2026 by rpki-client