Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft
File:                     DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft (raw, json)
Hash identifier:          bpmPgRDWBcIKNuog9IMG60FCkwtnkfkK252hUpCAU94=
Subject key identifier:   34:FF:DC:BD:E5:C5:DD:B6:AE:AD:5C:E7:3E:90:C4:5F:57:8B:1F:47
Authority key identifier: 0C:01:5C:06:D1:CD:23:78:42:B6:70:57:C1:D5:4A:20:EF:27:2D:47
Certificate issuer:       /CN=A911DEBE/serialNumber=0C015C06D1CD237842B67057C1D54A20EF272D47
Certificate serial:       09B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAFcBtHNI3hCtnBXwdVKIO8nLUc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft
Manifest number:          09A8
Signing time:             Thu 16 Apr 2026 19:52:08 +0000
Manifest this update:     Thu 16 Apr 2026 19:52:07 +0000
Manifest next update:     Thu 23 Apr 2026 19:52:07 +0000
Files and hashes:         1: DAFcBtHNI3hCtnBXwdVKIO8nLUc.crl (hash: eqdo+wFSI4XcNUKyKHquQuR+eFJobylXEHdqPL13MDE=)
                          2: A4955B14A91B11EA924D2D7BC4F9AE02.roa (hash: CDcLRqPOlIl7GGhyIqwucsiXiEcpvCH7QLIogd4pmBQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.crl
                          rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAFcBtHNI3hCtnBXwdVKIO8nLUc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:52:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2482 (0x9b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DEBE, serialNumber=0C015C06D1CD237842B67057C1D54A20EF272D47
        Validity
            Not Before: Apr 16 19:52:07 2026 GMT
            Not After : Apr 23 19:52:07 2026 GMT
        Subject: CN=69e13de8-6a80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:93:c7:90:d6:8a:02:07:a3:e7:48:03:d5:0c:
                    8f:1c:4d:71:88:23:f9:ac:4a:df:e3:6e:5f:44:12:
                    68:7d:e6:a4:2a:51:77:cb:a5:e6:bf:02:19:03:31:
                    c6:b1:40:3c:98:d4:07:f3:3a:c1:47:49:df:b7:61:
                    15:e8:88:b7:43:ab:2c:6a:22:27:45:11:e2:fc:d9:
                    ae:d8:3d:98:f9:85:ab:69:e8:1a:96:9d:7d:08:2e:
                    09:7f:8f:63:81:39:37:06:e3:07:0d:fd:26:52:92:
                    32:d3:e8:f1:ee:52:d7:64:39:d1:fa:c3:e6:f3:bb:
                    a1:35:8b:5d:7f:44:f7:ec:b5:0c:a5:6d:5a:c3:6e:
                    d3:98:85:e3:e4:8b:c9:9e:ce:53:99:48:e3:49:d4:
                    04:e3:70:50:a6:92:e8:60:f8:e6:88:56:aa:a4:43:
                    95:d9:21:76:48:e2:84:85:80:2c:d8:a7:2a:52:85:
                    af:53:1e:87:7e:cc:2d:51:f0:8b:e5:18:5b:2f:fa:
                    d6:4c:3a:20:3d:6c:ba:a2:15:2d:90:86:56:42:8a:
                    49:77:d2:52:20:f0:32:65:ed:e1:fe:5b:e6:1f:32:
                    71:f5:c8:41:ff:88:57:1e:c7:a0:3f:27:d0:6f:cc:
                    c3:b7:3d:30:5d:29:94:fa:e5:f4:62:6a:83:fe:a1:
                    8c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:FF:DC:BD:E5:C5:DD:B6:AE:AD:5C:E7:3E:90:C4:5F:57:8B:1F:47
            X509v3 Authority Key Identifier:
                keyid:0C:01:5C:06:D1:CD:23:78:42:B6:70:57:C1:D5:4A:20:EF:27:2D:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAFcBtHNI3hCtnBXwdVKIO8nLUc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:81:67:ad:c9:10:68:dd:9f:e5:68:8c:bf:cc:39:0d:65:30:
         ba:89:d5:08:38:a1:bb:15:4a:4c:6a:b9:a0:00:53:d5:15:7f:
         8e:94:89:c0:21:7c:8e:51:b1:37:c5:a5:ad:fd:f1:90:00:b8:
         43:14:23:c1:63:66:2c:fc:c4:9e:f4:4a:52:7a:a8:cf:4d:c8:
         39:a2:04:59:00:46:a8:79:87:b8:b9:c4:4f:2b:48:36:aa:ff:
         3c:60:22:a9:e8:4f:cf:d5:a4:3b:3f:e3:82:c8:01:15:4b:d7:
         e9:a0:bf:44:ae:d7:ac:c4:6d:af:35:da:41:58:41:b1:ec:66:
         b2:02:8b:8c:d5:88:84:0b:33:6e:d8:73:88:2b:d0:48:37:08:
         68:23:9e:91:d5:bb:d3:62:f9:3b:cd:30:fd:20:14:0a:8a:3c:
         53:98:3f:07:6b:d0:a3:24:6c:0d:fe:2b:99:b2:81:c6:f3:76:
         2a:10:16:56:c3:5c:7e:69:a5:84:9f:a6:44:47:42:09:94:51:
         5f:d0:e2:fa:87:9c:cd:5e:0b:22:e3:e4:79:54:46:01:bf:0f:
         48:97:e8:f6:9a:ef:e2:d3:4a:04:aa:25:94:9d:64:bc:37:d6:
         ca:ad:1e:29:1c:4f:db:7f:fc:e7:f4:54:58:33:9a:61:2f:5e:
         b3:c4:ab:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:25:35 2026 by rpki-client