Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.mft
File:                     DPzMWYD1fmvITfEbTFcZNdJdrMo.mft (raw, json)
Hash identifier:          zzqOXXQRmU6L9ahcwVbTA5hHyftVbm1pJXo/xXpM5zw=
Subject key identifier:   A2:80:B0:E4:7C:D6:B3:A8:0A:16:64:8D:33:D6:4C:DA:09:DD:DB:A3
Authority key identifier: 0C:FC:CC:59:80:F5:7E:6B:C8:4D:F1:1B:4C:57:19:35:D2:5D:AC:CA
Certificate issuer:       /CN=A91415AA/serialNumber=0CFCCC5980F57E6BC84DF11B4C571935D25DACCA
Certificate serial:       011C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DPzMWYD1fmvITfEbTFcZNdJdrMo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.mft
Manifest number:          153C
Signing time:             Thu 16 Apr 2026 19:14:35 +0000
Manifest this update:     Thu 16 Apr 2026 19:14:34 +0000
Manifest next update:     Thu 23 Apr 2026 19:14:34 +0000
Files and hashes:         1: DPzMWYD1fmvITfEbTFcZNdJdrMo.crl (hash: qFg7aVYR67CDsGibFM2BHFVNpLN8U/JTvaqzXJ5sg4Q=)
                          2: CB04F4409BE611EF8AFF947CC4F9AE02.roa (hash: qD+BUgUhK3DI5i4LAigsq9eVcd7R9m6jCEFQfslUH2g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.crl
                          rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DPzMWYD1fmvITfEbTFcZNdJdrMo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:14:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 284 (0x11c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91415AA, serialNumber=0CFCCC5980F57E6BC84DF11B4C571935D25DACCA
        Validity
            Not Before: Apr 16 19:14:34 2026 GMT
            Not After : Apr 23 19:14:34 2026 GMT
        Subject: CN=69e1351b-9961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f6:f7:2a:f1:93:8d:80:53:20:f0:b8:f3:dd:
                    b7:29:5e:3f:0e:30:4b:89:eb:0f:1a:ef:83:96:94:
                    ee:bb:7a:ea:5b:f2:77:05:93:48:f7:0f:86:f3:25:
                    01:21:13:0b:76:65:d0:d8:94:fd:ba:86:eb:94:22:
                    96:05:ee:3d:57:b4:a9:60:d1:94:5b:6f:67:14:8f:
                    93:44:b2:11:8a:48:2f:c7:f3:f6:3c:44:d4:0a:35:
                    49:c1:b4:92:b0:c9:d2:51:0f:5a:cd:9e:e6:2a:5e:
                    00:ff:3b:80:fa:ea:dd:0e:26:84:be:9e:12:d6:5c:
                    f7:8d:76:3f:7e:8d:c2:ba:c8:50:c7:e7:29:62:d1:
                    65:18:35:c2:87:17:64:ad:a6:bc:01:11:f4:be:f9:
                    ac:4a:00:9c:7e:00:b8:c5:a1:4b:19:9a:9c:52:5b:
                    d0:70:24:82:10:17:92:19:85:1f:0f:2a:5f:3e:4c:
                    57:97:89:8f:7b:ea:28:0f:7a:b8:dd:e6:88:bb:8e:
                    f8:fb:af:bd:e5:f8:ca:70:71:9d:c4:c4:9c:65:9a:
                    fc:d8:9b:0b:0e:60:72:4f:8b:93:3b:6e:e7:7e:88:
                    05:55:36:73:4d:7f:6a:5a:fe:cc:3b:5e:71:87:04:
                    a2:1a:04:77:80:b7:b3:f3:a0:0c:c7:91:0d:5a:ba:
                    05:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:80:B0:E4:7C:D6:B3:A8:0A:16:64:8D:33:D6:4C:DA:09:DD:DB:A3
            X509v3 Authority Key Identifier:
                keyid:0C:FC:CC:59:80:F5:7E:6B:C8:4D:F1:1B:4C:57:19:35:D2:5D:AC:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DPzMWYD1fmvITfEbTFcZNdJdrMo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:82:67:e3:55:45:1f:83:cb:6a:98:de:cd:68:53:ea:6f:9b:
         08:cb:66:6d:a6:55:71:70:e8:b3:4d:ba:4c:40:ce:21:76:1c:
         e8:98:31:7c:5a:ae:2d:78:a2:1b:9b:dc:98:b6:40:bf:08:51:
         22:4e:ee:fb:2c:36:66:8d:6b:5e:21:a2:87:51:52:ef:e8:26:
         86:cb:e0:9a:ee:90:93:3d:6a:1f:cc:db:3a:69:b7:1d:31:9e:
         8a:dc:f5:c6:2e:93:5e:5c:be:ef:f0:fa:7a:7b:ee:4b:1a:19:
         de:16:13:b0:94:a8:cc:1d:8d:50:5f:19:1a:a5:dc:dc:d6:32:
         b3:80:b6:ac:40:1c:8b:58:1b:41:8c:3e:6b:82:49:24:87:27:
         5f:41:53:e4:4c:e8:9d:89:23:19:0b:a2:9b:66:07:58:66:6b:
         82:b3:7f:b2:a6:c4:f1:b6:6c:d4:00:ab:83:c7:95:8e:e2:5b:
         7c:41:c9:e7:d9:f7:3f:d8:06:9e:e5:ed:8d:68:03:ab:9c:ea:
         e9:fb:3e:5d:33:91:86:67:a3:db:6f:25:69:a2:08:f1:64:b1:
         91:a6:f1:66:de:a5:17:b6:01:36:87:ae:18:90:c0:e0:4e:9d:
         bb:6a:dc:80:59:30:e2:dd:9c:22:b0:c6:90:c9:d7:c5:f5:61:
         7e:7e:75:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:41:19 2026 by rpki-client