Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft
File:                     DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft (raw, json)
Hash identifier:          sdqXyLk1J904hcstKulvn4sgCwZOIowxKWmvjbF0k+I=
Subject key identifier:   F5:0B:85:BD:B7:6F:4F:3F:A3:44:1B:8B:6E:73:69:22:C4:62:49:71
Authority key identifier: 0E:03:D3:C2:E8:F2:C5:35:82:BE:D1:C2:14:C1:FD:3A:AE:A5:AE:5A
Certificate issuer:       /CN=A911418D/serialNumber=0E03D3C2E8F2C53582BED1C214C1FD3AAEA5AE5A
Certificate serial:       0694
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft
Manifest number:          067B
Signing time:             Sun 20 Sep 2026 22:28:32 +0000
Manifest this update:     Sun 20 Sep 2026 22:28:32 +0000
Manifest next update:     Sun 27 Sep 2026 22:28:32 +0000
Files and hashes:         1: DgPTwujyxTWCvtHCFMH9Oq6lrlo.crl (hash: 0OBXYik/yZswcD0ljkgmOROm0zhpXwdYEqzOceg4MfA=)
                          2: 33392DE2059011F1A8DF17AA3E3D8C67.roa (hash: q1rBnMxJ+DzQAHD3yWNtFqN06AdWDOlKoKntvnfHolI=)
                          3: CB7909B4B26C11F08ED1666AC4F9AE02.roa (hash: 8uzxFmMR3Sr3PxroRuZhI7xinnvv5MK7IdYyanz4uBY=)
                          4: F7AB4FF8058F11F1B7BFF5793E3D8C67.roa (hash: smzhzupHrKLINvK/TUbRvcJq4YEGD40s9iChZgILW3o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.crl
                          rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 22:28:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1684 (0x694)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911418D, serialNumber=0E03D3C2E8F2C53582BED1C214C1FD3AAEA5AE5A
        Validity
            Not Before: Sep 20 22:28:32 2026 GMT
            Not After : Sep 27 22:28:32 2026 GMT
        Subject: CN=6ab05e10-9ca9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:25:e6:0c:ee:ca:ea:d3:12:a7:6d:01:54:18:
                    a5:49:b4:59:d5:9b:7a:8a:73:d0:d5:5f:3b:61:38:
                    4f:7e:0b:e7:83:e8:a5:54:d9:cb:ab:21:06:14:be:
                    b6:c6:9b:85:93:a3:75:5d:c6:6d:9e:15:67:81:d8:
                    ef:e7:21:1c:e9:8d:bf:47:63:fe:df:2d:1f:9a:39:
                    3f:28:0c:29:62:07:a1:7b:9d:6e:16:1b:fe:3f:53:
                    2e:5e:1f:2f:52:08:61:47:41:25:27:ed:7e:5b:02:
                    8b:9e:56:05:27:68:ee:da:39:a2:07:2d:44:5f:6d:
                    8d:41:08:89:b2:80:71:49:bb:21:2e:40:f7:e9:cc:
                    f6:e5:12:31:86:04:3b:33:6d:0e:74:b9:4e:85:e7:
                    4f:f9:1e:2c:43:bb:73:64:8f:51:b9:e4:b6:74:7d:
                    fe:ac:2f:e6:ed:23:78:43:fc:88:cb:ed:7d:a6:55:
                    03:7a:2c:96:d9:ea:22:6f:b0:d9:67:b3:92:ad:c4:
                    d9:31:ea:2f:ed:d2:82:bf:55:50:d6:c7:8f:f7:0e:
                    df:07:b1:2d:7d:cb:64:fa:79:60:a1:4d:ac:d2:ef:
                    14:5d:96:36:b4:c4:c6:e5:7e:de:f8:1e:30:b7:d3:
                    61:c6:06:3d:a3:0d:be:58:11:44:3a:0d:9e:fc:42:
                    7d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:0B:85:BD:B7:6F:4F:3F:A3:44:1B:8B:6E:73:69:22:C4:62:49:71
            X509v3 Authority Key Identifier:
                keyid:0E:03:D3:C2:E8:F2:C5:35:82:BE:D1:C2:14:C1:FD:3A:AE:A5:AE:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:16:54:d2:c2:79:c3:3f:c9:42:8c:09:28:61:99:f0:50:94:
         2f:55:09:7c:c2:af:68:6e:d9:9e:c6:14:4f:77:f8:98:31:b9:
         90:b3:f3:9b:6d:eb:58:92:1e:76:43:75:99:77:70:aa:de:ed:
         b6:52:b7:b4:80:c7:ed:85:10:86:f1:f3:8c:95:4c:06:33:c4:
         84:fc:e2:79:c1:1b:e4:98:30:94:1f:56:f5:3f:e2:ef:38:ca:
         87:71:4c:06:98:1f:b5:76:e1:a2:61:f4:30:d9:3e:86:9d:2c:
         08:f1:80:12:02:cb:cd:bd:44:fc:02:b8:d1:af:c3:4d:24:10:
         a4:d1:bb:9e:96:04:ec:cc:38:17:74:cd:66:c1:95:55:b7:15:
         b1:4c:69:eb:77:13:ff:61:42:82:b9:d0:b3:1e:3e:8e:d9:cb:
         bc:6b:8d:4d:67:e0:a8:4e:6d:10:42:63:9c:2e:aa:83:98:6b:
         83:e2:6a:18:63:3d:26:51:db:d9:2c:08:38:7b:37:43:e4:18:
         9b:ad:b7:f9:96:d4:a2:64:4d:7b:17:61:f5:be:3f:f1:f9:94:
         45:29:3c:d8:cf:8b:4c:9a:37:93:1b:9f:83:45:74:a9:f2:f5:
         f4:2c:9f:18:d8:95:72:46:e2:d0:95:f6:eb:f7:0e:0d:b4:51:
         01:09:2d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:57:27 2026 by rpki-client