Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.mft
File:                     DcXOSilPLJOAqRNe4fBTByikzaY.mft (raw, json)
Hash identifier:          oHuIkrkQQs53xCJWDtA7/Z8c3OoGqAgtuh3BnIUpjYU=
Subject key identifier:   F9:E6:AA:CA:71:EC:B2:F0:B9:23:FA:07:25:87:30:2C:44:C1:52:64
Authority key identifier: 0D:C5:CE:4A:29:4F:2C:93:80:A9:13:5E:E1:F0:53:07:28:A4:CD:A6
Certificate issuer:       /CN=A912B4DB/serialNumber=0DC5CE4A294F2C9380A9135EE1F0530728A4CDA6
Certificate serial:       3527
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcXOSilPLJOAqRNe4fBTByikzaY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.mft
Manifest number:          351D
Signing time:             Sat 28 Feb 2026 15:14:48 +0000
Manifest this update:     Sat 28 Feb 2026 15:14:48 +0000
Manifest next update:     Sat 07 Mar 2026 15:14:48 +0000
Files and hashes:         1: DcXOSilPLJOAqRNe4fBTByikzaY.crl (hash: +Xr2goBNoSM/Gy9AZyJ7k6EhxAjwOYhHNJMd6FQKtbA=)
                          2: 7FE5F2CEDB9411E9832A463AC4F9AE02.roa (hash: Sw4ihe/uH6fmIDPdKoxmP7xAVXuq4ul6aZ2AD9s5AWE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.crl
                          rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcXOSilPLJOAqRNe4fBTByikzaY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 15:14:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13607 (0x3527)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B4DB, serialNumber=0DC5CE4A294F2C9380A9135EE1F0530728A4CDA6
        Validity
            Not Before: Feb 28 15:14:48 2026 GMT
            Not After : Mar  7 15:14:48 2026 GMT
        Subject: CN=69a30668-0fcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a5:53:10:28:9a:9e:74:13:5c:1f:9e:b4:5a:
                    82:20:6f:18:96:b3:c1:81:d6:a7:7a:8e:b2:74:3a:
                    27:da:1b:3c:90:ed:fa:3b:f5:d0:f8:e0:ba:f9:2a:
                    6a:05:e7:db:bd:65:ab:8b:57:34:95:4b:4e:7d:55:
                    ca:ce:ca:c7:3c:50:a4:92:bd:fe:46:d5:30:0f:a1:
                    22:a7:da:cc:9c:61:ec:58:3a:b9:87:be:21:d6:19:
                    7a:6a:43:5f:9b:d9:0b:81:5f:af:64:ad:9e:1d:2a:
                    4a:ed:03:cd:98:ab:48:9d:af:36:36:03:77:c6:32:
                    b5:b8:18:15:0c:a3:14:1f:1f:8e:d3:f3:e2:b5:b2:
                    86:9e:98:73:c3:f1:49:c9:05:48:b4:4d:3b:06:c1:
                    03:bf:0f:6f:cb:d2:e1:fc:b8:e0:2b:1a:ea:59:78:
                    0d:55:f9:83:c6:d0:43:2b:fe:b3:6d:9c:fe:d4:09:
                    62:87:6c:55:e7:38:a0:77:9e:ed:6d:ff:53:ef:6d:
                    cb:ce:f3:f7:af:16:e5:bb:4e:22:af:25:f3:1f:88:
                    51:e3:92:c7:43:e5:f4:92:29:9f:76:7b:7e:1c:64:
                    4a:8e:e4:b1:ad:62:54:15:5e:97:61:07:a5:89:73:
                    9d:3a:5a:7e:31:c6:76:8f:bd:50:4c:45:69:c7:c3:
                    4a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:E6:AA:CA:71:EC:B2:F0:B9:23:FA:07:25:87:30:2C:44:C1:52:64
            X509v3 Authority Key Identifier:
                keyid:0D:C5:CE:4A:29:4F:2C:93:80:A9:13:5E:E1:F0:53:07:28:A4:CD:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcXOSilPLJOAqRNe4fBTByikzaY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:36:ed:0c:ae:fe:d2:06:dc:b3:be:d7:f8:b5:9d:3f:eb:fc:
         bd:fc:72:14:13:b2:88:15:3b:06:59:f1:3d:93:37:16:5f:3c:
         15:a5:b5:6b:95:5f:34:cd:66:8f:ac:8e:c1:f4:7d:ab:82:1b:
         6a:fe:ad:41:b5:99:00:a3:e4:a1:32:84:cb:4e:49:cc:27:c4:
         b7:7e:e5:ac:12:ab:cb:63:47:f9:37:14:9a:6d:27:c7:fd:27:
         3e:85:0d:80:7d:aa:45:99:6a:0f:de:ea:e8:b9:74:c9:d8:44:
         c6:fd:32:a9:65:bc:84:20:ec:43:b2:d9:c2:66:5e:5e:f3:f2:
         b4:8b:eb:0d:46:ac:d2:ec:74:b2:0c:97:a0:ee:e7:c4:a2:e0:
         79:34:05:ad:70:e4:e6:2f:8a:06:16:09:7a:3a:8b:51:10:f7:
         92:76:2b:88:ff:70:2c:9e:bd:ac:fc:d6:f9:24:36:90:2c:1c:
         9e:68:1f:1c:5d:46:bd:3e:d4:19:c7:72:ad:4a:87:53:ee:cb:
         e3:44:98:22:a2:3f:14:97:de:3c:fe:ae:6d:65:6a:ce:39:75:
         7f:e2:23:eb:22:1b:af:ee:8f:4a:ae:25:56:6a:b6:c1:41:8e:
         ce:c9:3a:d6:d5:6d:39:4a:85:eb:76:14:1e:f1:2d:4a:7f:e5:
         71:7c:86:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:39:15 2026 by rpki-client