Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft
File:                     0DLgYUkj9KWCM463Y2w5aErtUe0.mft (raw, json)
Hash identifier:          msVB0qNG11TFbcaNPmn0jxQ7g3v5kcw69oBzd5jSUp4=
Subject key identifier:   05:EB:0E:43:F9:FA:2C:F6:BB:1D:02:6A:EA:67:80:03:EE:AF:42:B3
Authority key identifier: D0:32:E0:61:49:23:F4:A5:82:33:8E:B7:63:6C:39:68:4A:ED:51:ED
Certificate issuer:       /CN=A913559B/serialNumber=D032E0614923F4A582338EB7636C39684AED51ED
Certificate serial:       1115
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DLgYUkj9KWCM463Y2w5aErtUe0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft
Manifest number:          1108
Signing time:             Thu 16 Apr 2026 17:12:10 +0000
Manifest this update:     Thu 16 Apr 2026 17:12:09 +0000
Manifest next update:     Thu 23 Apr 2026 17:12:09 +0000
Files and hashes:         1: 0DLgYUkj9KWCM463Y2w5aErtUe0.crl (hash: 2NYO5ywJ+kozm2AiRRZ9BciTzk+EdksKEUpOEu2U+pQ=)
                          2: DBC08AD4457911E9BA84DA51C4F9AE02.roa (hash: PxGfyB9W/rrckFKkWTDwSaYZ5fUPv1DDMqq0Qrh6HDI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.crl
                          rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DLgYUkj9KWCM463Y2w5aErtUe0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 17:12:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4373 (0x1115)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913559B, serialNumber=D032E0614923F4A582338EB7636C39684AED51ED
        Validity
            Not Before: Apr 16 17:12:09 2026 GMT
            Not After : Apr 23 17:12:09 2026 GMT
        Subject: CN=69e1186a-93ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8a:e7:38:ab:be:ee:b9:56:ab:40:8e:33:b9:
                    dc:37:a7:53:b9:46:9d:d6:16:71:be:cc:ee:b6:70:
                    26:05:29:22:ae:7e:ee:cb:3e:f6:5e:b9:44:c5:ea:
                    21:57:3f:41:82:19:af:5b:df:6f:67:7b:25:91:e3:
                    f7:bb:9c:cf:ce:9e:95:98:0c:cf:3b:70:14:7d:8a:
                    63:45:83:4a:91:8d:a3:bd:aa:d3:76:0f:09:f2:e5:
                    a1:0a:eb:3b:ae:85:1b:49:9e:80:f7:2f:22:ab:18:
                    02:9a:e5:56:8c:35:df:3c:5a:e4:ae:9f:a2:79:ff:
                    9b:ce:20:01:48:64:f8:e0:f9:df:a7:6b:89:34:c5:
                    2a:06:79:d4:44:47:b8:56:8c:8c:2a:70:89:01:8d:
                    37:23:12:1b:3b:bc:ed:4c:59:81:66:99:2a:0c:09:
                    54:44:53:84:04:67:c6:62:73:bb:fa:b5:ba:f6:a6:
                    9c:4a:8e:e2:b3:90:c3:8c:35:3f:99:61:98:1b:4e:
                    15:bb:39:d6:c9:d6:23:5c:cd:bd:b7:2e:b7:9a:7f:
                    8e:b4:91:53:c0:f1:f0:fb:d5:8c:7e:83:76:25:a3:
                    f5:92:2f:64:59:c4:71:b7:5f:1b:58:40:d3:ec:37:
                    00:1d:95:c4:bb:46:9e:f3:84:4a:1f:82:34:ec:e2:
                    7a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:EB:0E:43:F9:FA:2C:F6:BB:1D:02:6A:EA:67:80:03:EE:AF:42:B3
            X509v3 Authority Key Identifier:
                keyid:D0:32:E0:61:49:23:F4:A5:82:33:8E:B7:63:6C:39:68:4A:ED:51:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DLgYUkj9KWCM463Y2w5aErtUe0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:fb:55:4a:53:67:d5:e6:b3:67:2b:8e:00:20:df:17:7e:42:
         38:06:0f:66:d2:18:26:fb:05:7d:e7:2e:b0:b8:fa:d2:d5:b4:
         4a:30:28:4a:37:23:85:4e:3f:08:a7:e0:2f:26:9f:55:1f:86:
         bb:d0:3c:9e:d0:06:7a:34:cc:ba:39:f7:81:93:ae:62:b6:26:
         a8:35:07:ab:0b:29:62:d5:19:da:f6:17:34:99:74:87:5f:93:
         53:e1:86:8b:2c:6c:5d:88:32:6e:6f:ec:6a:ff:04:90:a5:77:
         ca:e4:eb:a6:ed:72:0a:ec:03:85:be:92:a2:07:16:ae:50:4b:
         f0:cc:3f:21:f3:f2:c2:58:d6:01:52:d2:13:a8:ff:69:89:a5:
         a4:aa:1b:ce:48:8c:f3:f2:f2:8f:69:63:32:e0:ee:59:e6:ca:
         74:61:5e:60:22:7f:d8:a9:dc:ad:6d:f0:be:d0:c1:e5:25:9b:
         bd:fd:e1:7b:17:2c:48:07:9d:ce:91:0b:1f:bb:ac:0e:22:b9:
         2a:57:27:05:ac:9f:55:77:eb:48:a2:c5:20:9d:66:20:fe:73:
         db:72:8b:ba:a1:4e:26:1c:fe:e7:fa:4d:74:2f:17:f6:f4:98:
         0b:63:a2:b4:46:0d:27:3a:3b:be:d8:c2:9d:d1:00:36:df:ff:
         6f:e4:d6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:20:02 2026 by rpki-client