Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.mft
File:                     dEWTNjfMowmkwWGr_t-HecsqsT8.mft (raw, json)
Hash identifier:          kUT7kqxKTK3+N40DN8zhtZ06kYwclPfUBxqe3oxCHOM=
Subject key identifier:   92:15:7F:3A:9D:21:FC:F6:0B:1D:0A:D1:20:37:DB:04:FF:32:A1:18
Authority key identifier: 74:45:93:36:37:CC:A3:09:A4:C1:61:AB:FE:DF:87:79:CB:2A:B1:3F
Certificate issuer:       /CN=A912E53C/serialNumber=7445933637CCA309A4C161ABFEDF8779CB2AB13F
Certificate serial:       010B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEWTNjfMowmkwWGr_t-HecsqsT8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.mft
Manifest number:          0107
Signing time:             Mon 02 Mar 2026 01:34:57 +0000
Manifest this update:     Mon 02 Mar 2026 01:34:56 +0000
Manifest next update:     Mon 09 Mar 2026 01:34:56 +0000
Files and hashes:         1: dEWTNjfMowmkwWGr_t-HecsqsT8.crl (hash: 3tz7wEYGRR8K9/+waMSocYkGibR73JcNZSHZtMdbhEY=)
                          2: 9E3D544AFFFD11EF8D8A924EC4F9AE02.roa (hash: 845Y2aA2itdhNFcJh2u6MWKd/R973iis1jKrvrdf6+g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.crl
                          rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEWTNjfMowmkwWGr_t-HecsqsT8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:34:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 267 (0x10b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E53C, serialNumber=7445933637CCA309A4C161ABFEDF8779CB2AB13F
        Validity
            Not Before: Mar  2 01:34:56 2026 GMT
            Not After : Mar  9 01:34:56 2026 GMT
        Subject: CN=69a4e941-508f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ef:41:ee:f7:0e:11:a2:27:87:e2:e3:ca:0e:
                    68:ee:3b:eb:9b:fa:71:a2:5e:39:17:4b:47:b0:46:
                    8f:83:5e:a1:fe:32:e5:02:0a:7b:72:ee:b2:62:b9:
                    b0:f8:7b:f4:75:ac:fc:7c:b8:a9:87:59:d7:31:3c:
                    c0:23:03:fd:b4:f5:c6:98:18:b5:a8:db:ed:97:ff:
                    7d:39:99:68:b6:53:68:5f:6c:42:67:ea:5f:eb:2c:
                    68:0e:81:0b:c6:27:06:4b:31:5e:4a:1e:71:e7:f9:
                    67:88:15:b6:1c:ad:66:e2:5a:c0:76:bb:06:f7:94:
                    b6:26:a4:55:4d:e4:29:91:cd:41:f0:45:32:58:8f:
                    f5:93:61:99:f1:a4:d2:ce:7b:27:7a:55:f9:64:48:
                    30:08:42:7a:70:0f:80:fb:95:55:9e:e0:d2:ce:95:
                    d7:39:16:ac:d4:7a:c8:7e:ba:dc:14:fe:eb:69:52:
                    b0:9a:ad:b5:2c:95:a4:3f:e6:63:d6:75:77:f5:88:
                    eb:84:9d:d6:7a:83:cb:22:4e:1a:c1:c1:f5:5f:ff:
                    71:28:a2:2f:39:cf:b7:e0:a1:0b:0c:ba:fc:6e:76:
                    b4:c9:82:ce:1f:0e:a3:8d:ed:0e:a4:06:b9:9d:3c:
                    a9:11:c3:45:51:84:e5:d9:1d:37:57:4a:71:0b:eb:
                    ea:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:15:7F:3A:9D:21:FC:F6:0B:1D:0A:D1:20:37:DB:04:FF:32:A1:18
            X509v3 Authority Key Identifier:
                keyid:74:45:93:36:37:CC:A3:09:A4:C1:61:AB:FE:DF:87:79:CB:2A:B1:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEWTNjfMowmkwWGr_t-HecsqsT8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:15:08:93:a4:14:2d:b1:5c:6e:38:bf:52:29:80:2d:98:e5:
         c6:ab:51:4f:d0:07:d9:6a:36:ff:a8:87:0a:2e:82:0a:0a:f8:
         54:3d:e0:67:e7:bd:76:88:dc:d8:28:26:fd:26:a2:fc:37:21:
         bc:a1:de:69:7f:db:58:35:52:17:a5:f7:cf:c6:86:ca:27:ec:
         6c:d6:25:e2:b1:c0:b2:b5:dc:ca:66:9e:a7:13:90:fa:a7:cf:
         b9:d8:6d:cf:34:e9:2f:f8:a8:f9:b0:03:90:e5:13:f2:ea:a1:
         11:c8:a0:fe:9f:98:b1:3e:11:7c:6d:93:0b:f2:63:bc:9c:36:
         1a:54:3b:c8:61:2c:1e:fb:26:4f:6c:15:e1:1f:ae:91:7f:ea:
         65:2d:a8:6d:aa:13:dc:23:7e:11:de:a1:04:61:ec:60:b3:04:
         92:bc:7c:bd:95:69:59:b2:9d:c4:8b:0c:8e:c1:18:9b:86:ab:
         e1:28:a5:fd:aa:b4:bf:3f:10:a1:c7:f0:a7:db:a2:59:b1:bf:
         81:26:a8:2b:cf:b0:89:b7:e5:e1:cf:65:ef:d7:45:3d:5e:61:
         54:68:7d:6a:8e:19:7f:29:80:72:3e:e0:c9:2d:17:2c:67:e3:
         84:ed:df:ca:35:d5:8e:11:ff:7f:62:5d:0d:58:ea:cb:c1:7f:
         a1:2c:b3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:35:00 2026 by rpki-client