Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft
File:                     dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft (raw, json)
Hash identifier:          wbwzc2cLZo2yNw52Ok5q6qahq0oW6MIT2Kim21Fx47c=
Subject key identifier:   1A:16:FA:8B:5C:27:9B:8D:E1:18:B7:D7:84:64:E0:25:FE:E5:40:75
Authority key identifier: 75:11:CB:31:3E:B8:3F:1C:39:02:AA:63:C4:3B:7A:03:6A:CC:63:17
Certificate issuer:       /CN=A91273B6/serialNumber=7511CB313EB83F1C3902AA63C43B7A036ACC6317
Certificate serial:       65
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRHLMT64Pxw5AqpjxDt6A2rMYxc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft
Manifest number:          62
Signing time:             Sun 01 Mar 2026 09:22:40 +0000
Manifest this update:     Sun 01 Mar 2026 09:22:39 +0000
Manifest next update:     Sun 08 Mar 2026 09:22:39 +0000
Files and hashes:         1: dRHLMT64Pxw5AqpjxDt6A2rMYxc.crl (hash: HjwWQFPsvWtUO3/ApZXQHc7RC6BJvTnjyMd8jJtTul0=)
                          2: 90034B4C041F11F1953EEBDB1D3D8C67.roa (hash: PWO0PtHR3i2A8c+n/GQz3pRYsga4DLIC1zV8n2NEh6k=)
                          3: A7FC3D6C041F11F1A6FA4A091E3D8C67.roa (hash: ziNsK/2lsfw71zRd+87XntBZSh13O3gDsDFh0uTxIOY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.crl
                          rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRHLMT64Pxw5AqpjxDt6A2rMYxc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:22:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91273B6, serialNumber=7511CB313EB83F1C3902AA63C43B7A036ACC6317
        Validity
            Not Before: Mar  1 09:22:39 2026 GMT
            Not After : Mar  8 09:22:39 2026 GMT
        Subject: CN=69a4055f-2ac3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:3d:a7:df:a1:79:80:f4:08:81:c6:09:a9:cd:
                    2c:0c:b8:ef:82:1e:3f:98:0d:7a:6c:72:6a:69:68:
                    42:c7:5f:6b:a5:c2:68:7d:46:44:ef:e4:19:9d:67:
                    ea:9c:34:b2:04:8a:d8:6a:d3:26:5a:6f:7d:d1:21:
                    9b:7e:4a:a0:6f:6c:1b:c6:a5:5a:2d:79:b1:19:38:
                    95:ba:2b:5a:2e:13:de:a1:a7:e6:af:4f:c4:66:84:
                    7a:31:8a:dc:ff:3e:27:fe:56:29:e4:97:88:ae:23:
                    7e:c0:a0:08:74:0f:f1:24:c4:c0:66:15:c6:15:dd:
                    f6:3a:26:cc:e1:28:72:6c:f3:d9:e4:97:90:af:dd:
                    65:6c:ed:9b:5e:39:d4:00:8d:8c:71:08:0b:90:fc:
                    96:fb:79:26:b6:f3:0d:c1:33:a7:16:47:6f:15:80:
                    70:93:2e:7c:bc:b4:72:38:44:9c:36:43:6a:fe:c3:
                    97:40:38:ac:83:fe:4b:12:2e:7d:98:37:c5:fa:34:
                    83:6b:88:80:20:fa:ed:74:97:e7:a2:77:d1:45:41:
                    15:e9:8e:a3:57:a0:43:29:cc:ff:20:a7:66:8b:e2:
                    af:85:28:4f:9a:6a:7c:a8:65:30:bd:c1:8c:d7:aa:
                    ba:52:07:c5:51:3e:83:67:62:2d:fa:14:9c:0d:d9:
                    5e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:16:FA:8B:5C:27:9B:8D:E1:18:B7:D7:84:64:E0:25:FE:E5:40:75
            X509v3 Authority Key Identifier:
                keyid:75:11:CB:31:3E:B8:3F:1C:39:02:AA:63:C4:3B:7A:03:6A:CC:63:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRHLMT64Pxw5AqpjxDt6A2rMYxc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:5c:3b:fe:7d:1c:d3:9a:aa:e2:32:24:84:96:94:ce:1f:ad:
         08:f5:30:33:0b:51:f6:57:fa:13:fc:89:40:1a:1a:aa:b6:d4:
         42:bd:78:ba:16:03:1e:48:a5:bf:2f:ca:b9:a8:76:bc:cb:2a:
         b5:01:7a:15:20:02:c9:c4:11:ca:86:d3:a4:18:11:0f:b5:7b:
         b4:af:f5:e9:c7:96:f6:7a:11:54:67:fe:c1:72:c6:91:e9:12:
         36:2b:1a:e0:ef:f1:b1:bc:c2:81:cc:38:c9:85:6d:9a:09:bb:
         0e:10:ba:6d:99:35:d0:75:b5:d5:e2:ed:ce:ed:d4:1a:c3:d8:
         84:aa:12:d3:ef:0c:a9:95:0d:30:e4:d3:36:31:eb:e3:f8:70:
         18:c8:97:cf:31:38:37:d7:21:7c:65:01:d9:44:eb:8c:4a:75:
         96:ab:0a:99:61:c5:39:b5:fd:1d:86:d9:9b:d4:6c:82:06:12:
         2f:d5:c1:01:bf:66:32:8e:78:57:db:a7:9e:ea:08:63:ab:44:
         6c:77:51:2b:69:9f:61:20:cb:e8:ac:59:ea:99:2d:5a:ce:61:
         76:0c:46:4d:c6:d6:df:43:95:ff:a9:54:34:8c:65:32:97:97:
         4a:ba:a1:0b:4f:57:f7:0b:9f:9e:33:7a:98:21:da:df:5c:78:
         2d:2b:af:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:15:33 2026 by rpki-client