Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.mft
File:                     MPDbgtWPWD6EiDeboA01rLNSYRA.mft (raw, json)
Hash identifier:          vZ38peiInkj1FTnU3Avqv42GKVqL8HRmGzhoS2xLf/k=
Subject key identifier:   27:20:18:BB:BB:4F:57:46:53:81:03:A4:A5:46:C6:4D:26:0A:3E:8F
Authority key identifier: 30:F0:DB:82:D5:8F:58:3E:84:88:37:9B:A0:0D:35:AC:B3:52:61:10
Certificate issuer:       /CN=A913C07A/serialNumber=30F0DB82D58F583E8488379BA00D35ACB3526110
Certificate serial:       01B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPDbgtWPWD6EiDeboA01rLNSYRA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.mft
Manifest number:          01A9
Signing time:             Fri 17 Apr 2026 03:54:57 +0000
Manifest this update:     Fri 17 Apr 2026 03:54:57 +0000
Manifest next update:     Fri 24 Apr 2026 03:54:57 +0000
Files and hashes:         1: MPDbgtWPWD6EiDeboA01rLNSYRA.crl (hash: pgKwRoYuBrTuq6OmKgvytlj1JMUQQXLezQ62n0aOpm0=)
                          2: A20C3500BE6811EEBFF35870C4F9AE02.roa (hash: ZnZ838yb1Lnlhy/ggGN6w4nIsswXCTJ1iI4zj1SyX/Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.crl
                          rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPDbgtWPWD6EiDeboA01rLNSYRA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:54:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 433 (0x1b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C07A, serialNumber=30F0DB82D58F583E8488379BA00D35ACB3526110
        Validity
            Not Before: Apr 17 03:54:57 2026 GMT
            Not After : Apr 24 03:54:57 2026 GMT
        Subject: CN=69e1af11-1899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:e6:2e:41:62:b6:b9:4f:c5:14:6b:71:e1:af:
                    83:cc:bd:80:97:63:15:e4:fa:b2:26:3b:ce:26:32:
                    c0:29:3f:a7:20:ae:98:11:03:36:f8:3b:6a:13:06:
                    98:29:8e:fb:ae:90:5d:b7:f1:e0:d9:57:ba:da:30:
                    d6:0d:00:97:32:0c:5c:b7:8c:0a:3b:54:eb:bb:8d:
                    75:af:12:58:92:34:d2:95:16:39:16:f3:5e:7c:c0:
                    9f:96:08:d3:4c:d2:47:f7:dc:ef:66:97:10:ee:5a:
                    7b:fd:22:f8:c5:f3:de:ee:87:c1:b2:95:92:21:dc:
                    84:a8:91:f4:07:15:97:1b:0c:ce:fe:8b:2a:1d:98:
                    19:e2:f9:cf:34:79:4f:1f:0b:00:fc:b6:78:30:ee:
                    45:65:4e:ed:83:40:7e:e7:e8:8d:42:99:15:b1:2a:
                    ca:f3:46:ec:c2:30:df:4b:0a:96:42:33:ce:a2:5e:
                    1c:d7:33:2e:a0:0d:49:32:84:18:9c:59:6c:53:e3:
                    a1:5f:9a:58:98:98:d6:08:04:ac:ea:de:f9:35:3d:
                    66:e9:d2:37:2c:b9:d7:e1:76:38:fe:d5:22:a5:33:
                    ca:ab:50:07:31:fa:9b:cc:95:a4:81:1d:c8:08:b8:
                    98:15:99:00:c8:13:5b:ad:21:d8:0c:ca:5f:12:cb:
                    f1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:20:18:BB:BB:4F:57:46:53:81:03:A4:A5:46:C6:4D:26:0A:3E:8F
            X509v3 Authority Key Identifier:
                keyid:30:F0:DB:82:D5:8F:58:3E:84:88:37:9B:A0:0D:35:AC:B3:52:61:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPDbgtWPWD6EiDeboA01rLNSYRA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:48:6f:d7:13:3a:db:4a:68:3e:ee:e0:ea:ea:d2:c3:28:64:
         ce:cf:77:8c:95:aa:97:70:5f:44:0b:d4:9e:91:fe:ba:44:31:
         f0:df:2f:11:ad:eb:91:b1:67:c2:4f:e9:42:32:2e:bc:7f:46:
         a0:1e:e2:72:21:01:3b:b8:e7:e3:a4:28:fc:0b:c7:38:17:e1:
         43:ad:90:50:ce:85:6c:40:a1:44:fb:c0:25:d3:51:c3:ca:8e:
         39:72:bb:eb:00:ec:aa:51:0e:2f:15:80:e6:5d:16:e3:1a:da:
         54:e8:cd:df:f7:e5:e8:5b:e8:c3:42:3d:30:73:44:86:b0:6e:
         18:93:72:df:28:df:4f:f8:a9:8b:3d:1f:d9:e3:a1:3c:05:82:
         df:87:d3:00:af:a2:fc:a6:c1:02:9c:01:59:0e:1d:01:9f:3f:
         c9:f8:4e:9a:82:72:ad:9d:68:4a:e2:ad:bb:88:24:78:49:6e:
         dd:f8:df:46:05:9d:55:a0:59:b1:88:c8:89:b9:6a:8f:04:37:
         df:ec:ec:9b:ef:e0:c1:2d:10:d2:7c:d8:6e:17:4f:15:4d:b1:
         1a:4f:50:f4:a2:75:29:da:43:f3:e9:da:f2:3a:4d:a5:87:67:
         58:c1:7a:df:40:a1:02:98:1f:00:a0:b7:76:53:33:cf:57:e0:
         a9:a2:2b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:36:35 2026 by rpki-client