Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft
File:                     DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft (raw, json)
Hash identifier:          YriLSe26MJzvIEoewvJVhX3/DJg7RmuNKDW447IadZI=
Subject key identifier:   AC:7A:A2:64:5D:55:82:F2:BE:A0:2F:49:A7:38:F0:EE:E2:E3:4B:38
Authority key identifier: 0C:EE:0D:96:77:3D:5D:DA:D4:67:9E:0E:83:9A:8D:C1:26:69:E2:32
Certificate issuer:       /CN=A9132742/serialNumber=0CEE0D96773D5DDAD4679E0E839A8DC12669E232
Certificate serial:       046C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft
Manifest number:          0465
Signing time:             Mon 02 Mar 2026 01:39:01 +0000
Manifest this update:     Mon 02 Mar 2026 01:38:59 +0000
Manifest next update:     Mon 09 Mar 2026 01:38:59 +0000
Files and hashes:         1: DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl (hash: Mfs4wGiX6Ennw0tX01uVzrhRophiNVOZUaZT6ylLT0o=)
                          2: 41A312C684BB11EC95CF1D6DC4F9AE02.roa (hash: d5iSZj62C8juxE8auMNyD5ksUnuDKMjscM3w2qSQY9g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl
                          rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:38:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1132 (0x46c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132742, serialNumber=0CEE0D96773D5DDAD4679E0E839A8DC12669E232
        Validity
            Not Before: Mar  2 01:38:59 2026 GMT
            Not After : Mar  9 01:38:59 2026 GMT
        Subject: CN=69a4ea35-feed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:37:03:bf:f1:c4:a5:79:a5:66:f3:f6:62:12:
                    1a:28:5f:28:c7:3a:91:06:58:85:99:20:5f:b2:d7:
                    3a:0e:dc:86:b1:db:c7:f3:97:72:6d:ff:e6:86:5e:
                    72:4e:fe:39:0a:20:1a:49:63:6b:a4:fd:15:14:24:
                    4b:6a:bb:76:e4:c2:42:83:26:bf:d6:6c:b3:3e:e0:
                    06:32:fb:8f:ee:f4:a8:5f:40:16:bf:34:a6:0e:ff:
                    e7:a9:b6:d2:e8:fe:53:e4:97:da:42:ce:28:f7:ee:
                    4c:8c:6e:8c:26:d9:41:69:a5:81:95:40:e0:17:50:
                    d7:98:14:f6:26:52:ff:66:8a:d6:1b:65:71:c6:86:
                    1a:7b:88:60:fe:31:72:3f:55:32:57:df:c1:65:f4:
                    63:b8:3e:42:b8:ca:cc:4d:fe:65:23:85:75:bc:43:
                    21:0d:d3:b1:ec:de:91:4c:fd:00:da:f6:23:7c:83:
                    14:b1:06:bf:b6:69:7a:ce:02:7c:7b:a1:a5:59:4d:
                    85:40:c7:70:c6:e3:7c:be:94:f6:4e:d0:eb:a8:69:
                    db:fd:32:ab:8a:d5:3b:9f:5a:ec:3d:a7:ff:5e:30:
                    89:9e:1b:52:28:2e:29:67:ec:fc:e1:7a:28:f6:cf:
                    0b:1e:e4:79:85:c2:aa:d9:d5:18:5a:ce:d1:3c:36:
                    47:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:7A:A2:64:5D:55:82:F2:BE:A0:2F:49:A7:38:F0:EE:E2:E3:4B:38
            X509v3 Authority Key Identifier:
                keyid:0C:EE:0D:96:77:3D:5D:DA:D4:67:9E:0E:83:9A:8D:C1:26:69:E2:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:4f:30:75:41:04:f2:31:23:2d:42:d6:de:43:c6:4b:51:a7:
         42:9d:3e:85:c3:2b:29:b7:74:25:78:45:14:eb:b1:4c:0f:4c:
         ae:96:d0:38:9e:dd:b3:e0:22:f5:22:f8:96:7a:f1:b0:80:c3:
         9f:9b:15:8a:72:3f:2c:33:3d:91:80:bd:91:93:99:94:3f:a1:
         19:cb:28:21:87:c2:ff:80:d8:9f:67:8e:c5:1e:c6:5f:f5:ea:
         ad:99:0e:2d:3a:06:e3:8e:b4:b4:c2:07:47:ee:2b:0d:a3:c3:
         ec:ed:5c:88:5f:b4:15:a5:8f:87:1d:a4:b1:50:0f:c4:71:87:
         30:b6:7e:23:63:97:3d:9b:1d:97:f0:87:bb:a7:00:40:a6:0a:
         6d:b2:d1:fc:2b:ec:19:f9:e2:0f:4a:07:0d:b7:31:75:8e:d8:
         11:c0:2c:3b:b8:3c:15:64:10:45:2b:cf:34:af:b0:4a:99:7c:
         e1:5f:d9:c1:e5:d7:9d:2a:2f:9d:fd:7a:3b:be:54:05:4e:50:
         e1:69:e8:95:66:01:b1:42:2b:86:d7:8d:7c:26:ea:9a:a8:57:
         06:4c:22:cc:36:74:bb:36:8a:05:fa:96:af:bc:a2:20:98:fd:
         09:f2:46:33:67:87:93:48:03:35:ae:6a:1c:01:0c:b9:9c:03:
         de:45:12:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:01:13 2026 by rpki-client