Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.mft
File:                     dOHLgzYmhzR4kyyiEYioj98uneA.mft (raw, json)
Hash identifier:          FoabApq486M0VXGWKJjMFWX05b+vRfE1XMomriBQgsw=
Subject key identifier:   2E:C8:3E:63:DB:45:26:09:BB:5C:91:2C:50:23:77:25:3E:A3:93:AD
Authority key identifier: 74:E1:CB:83:36:26:87:34:78:93:2C:A2:11:88:A8:8F:DF:2E:9D:E0
Certificate issuer:       /CN=A9121E13/serialNumber=74E1CB833626873478932CA21188A88FDF2E9DE0
Certificate serial:       06F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOHLgzYmhzR4kyyiEYioj98uneA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.mft
Manifest number:          06F7
Signing time:             Thu 16 Apr 2026 14:47:06 +0000
Manifest this update:     Thu 16 Apr 2026 14:47:06 +0000
Manifest next update:     Thu 23 Apr 2026 14:47:06 +0000
Files and hashes:         1: dOHLgzYmhzR4kyyiEYioj98uneA.crl (hash: E4WWrjMlnxH6jNBnuzkOFk2HCgaBghJARq9tDPAP8Lk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.crl
                          rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOHLgzYmhzR4kyyiEYioj98uneA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 14:47:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1784 (0x6f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121E13, serialNumber=74E1CB833626873478932CA21188A88FDF2E9DE0
        Validity
            Not Before: Apr 16 14:47:06 2026 GMT
            Not After : Apr 23 14:47:06 2026 GMT
        Subject: CN=69e0f66a-b0f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:27:d7:41:df:15:f9:16:93:b9:78:55:ca:47:
                    87:13:17:c0:d3:62:3d:29:0d:ec:eb:fe:00:30:ed:
                    b9:03:20:f8:36:09:81:77:e9:72:94:d6:62:fc:83:
                    7b:5a:21:45:60:1f:7a:6f:12:cd:40:21:63:30:cf:
                    37:22:51:d8:ef:b1:4c:df:68:ce:78:a0:a6:8c:83:
                    06:c0:04:16:2a:3f:56:db:fa:49:46:a7:3f:5d:7c:
                    d2:ac:20:bf:c4:bd:c8:11:0e:ad:0d:48:8d:ac:6a:
                    ac:30:29:36:31:73:4a:4a:4e:16:50:c6:92:e5:47:
                    4e:b4:e6:3d:0e:1d:f1:0a:f7:d2:67:52:23:d7:48:
                    86:11:2c:93:0c:78:66:c7:24:58:3b:71:bd:6e:02:
                    c9:62:1f:d0:75:1d:ee:d9:2c:ad:cf:25:4d:fb:3a:
                    43:bc:ee:21:59:1b:d3:0e:9e:5a:4c:68:95:ff:bc:
                    72:ee:76:97:6e:89:90:37:de:68:10:55:03:3c:fe:
                    d1:a3:61:78:00:7d:22:26:2b:81:6a:b0:56:66:d5:
                    eb:17:18:54:60:dc:bc:66:12:4f:48:aa:cf:16:96:
                    3c:72:29:50:6f:f4:3b:24:a0:b7:4b:00:91:3d:60:
                    72:22:cb:fd:d4:b0:84:1d:2a:69:c2:1c:3c:94:fe:
                    66:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:C8:3E:63:DB:45:26:09:BB:5C:91:2C:50:23:77:25:3E:A3:93:AD
            X509v3 Authority Key Identifier:
                keyid:74:E1:CB:83:36:26:87:34:78:93:2C:A2:11:88:A8:8F:DF:2E:9D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOHLgzYmhzR4kyyiEYioj98uneA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:e0:49:31:f2:ac:31:4d:58:5a:a5:82:86:e1:90:59:bb:1b:
         94:b6:71:01:4b:8d:47:56:0d:53:82:1f:c9:3b:e6:2c:87:0c:
         77:d2:92:ba:54:f1:f2:bf:76:a1:fa:02:dc:e1:50:48:2d:57:
         a1:72:e4:16:ff:3c:ad:77:23:70:4c:b4:61:5c:ab:1d:a0:59:
         26:7b:3d:a0:c1:6d:21:a3:a6:d2:ed:fd:da:2a:fb:e3:3e:eb:
         fe:49:da:03:2f:35:1f:b5:71:47:31:3e:3c:f3:9d:f8:07:5d:
         89:1d:d4:3d:80:ce:45:dd:85:d8:d5:62:61:d3:6c:e3:2b:e6:
         6f:91:1d:55:5f:58:60:f0:bd:cd:b6:e3:f9:ab:a6:62:9b:44:
         99:8e:f2:5b:44:da:28:d4:1f:cf:61:14:2a:c7:d9:4b:c2:39:
         5c:46:aa:80:a4:25:4a:f8:cd:48:61:4a:fc:5e:59:b1:64:e1:
         54:ee:cb:30:6d:c2:e0:a2:69:d9:3a:e4:d2:b6:b2:37:ea:61:
         13:63:fd:3c:b1:20:de:08:3c:02:c9:65:2c:76:74:76:af:97:
         52:c0:82:84:e4:4c:cb:aa:03:3b:ba:cf:f3:46:bb:a9:6a:3d:
         9b:32:f4:4f:b2:d9:d3:a8:b4:30:0a:e0:b4:14:90:44:ca:71:
         ae:c8:43:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:50:05 2026 by rpki-client