Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.mft
File:                     DprNgHEUtY9xipwrhZUmJebbK9E.mft (raw, json)
Hash identifier:          exTbs1QwoXfslKQHm16b6jiQgXExlwmbqixbsYtiMK4=
Subject key identifier:   DE:9E:DE:E5:EF:57:B1:3F:D6:BB:98:96:D6:D6:3A:9E:4A:AF:9A:E3
Authority key identifier: 0E:9A:CD:80:71:14:B5:8F:71:8A:9C:2B:85:95:26:25:E6:DB:2B:D1
Certificate issuer:       /CN=A9146D7A/serialNumber=0E9ACD807114B58F718A9C2B85952625E6DB2BD1
Certificate serial:       01B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DprNgHEUtY9xipwrhZUmJebbK9E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.mft
Manifest number:          01AB
Signing time:             Wed 15 Apr 2026 03:45:38 +0000
Manifest this update:     Wed 15 Apr 2026 03:45:37 +0000
Manifest next update:     Wed 22 Apr 2026 03:45:37 +0000
Files and hashes:         1: DprNgHEUtY9xipwrhZUmJebbK9E.crl (hash: gG/sv4eFEV+8nFM+w6nyIdtoesZiqyjAzrmTEi+ilmQ=)
                          2: E3AB124AB5C811EE8795EB6FC4F9AE02.roa (hash: 6pEgldrr1YtYq2k54CPHu0agjPZ4ZtHP2ppniIf4WA4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.crl
                          rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DprNgHEUtY9xipwrhZUmJebbK9E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 03:45:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 433 (0x1b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146D7A, serialNumber=0E9ACD807114B58F718A9C2B85952625E6DB2BD1
        Validity
            Not Before: Apr 15 03:45:37 2026 GMT
            Not After : Apr 22 03:45:37 2026 GMT
        Subject: CN=69df09e2-54e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8a:74:47:9a:70:9d:69:02:90:5e:33:d2:0c:
                    bd:b7:73:21:de:cb:8c:8c:ec:bc:bc:a9:41:9f:82:
                    3b:43:fe:f8:17:66:be:20:00:51:6b:0c:f5:d6:be:
                    6a:e4:b5:60:3f:37:76:37:64:51:08:c5:49:bc:9f:
                    3a:5d:ee:0d:e2:85:5d:ce:ff:65:3c:c6:30:bb:f7:
                    c0:16:0b:55:2a:d4:34:b6:6e:3c:38:b4:f3:0d:62:
                    60:00:ae:26:8e:ef:83:68:0a:8a:a5:ea:bd:d0:c1:
                    3a:72:21:93:0f:b4:89:97:89:7a:8e:94:61:72:da:
                    85:5d:e3:af:b5:b0:8e:cb:90:63:f7:16:bd:2e:1a:
                    92:59:c1:45:df:c3:2d:07:e0:cc:49:1e:92:23:10:
                    cf:bb:32:07:74:88:a4:c2:d0:44:bb:67:0b:df:e0:
                    63:23:bf:4b:c1:d9:c3:43:d8:92:40:9e:61:15:e9:
                    91:05:d8:3b:37:93:2b:ed:37:31:6d:82:3a:19:76:
                    6b:4e:f1:bd:c5:d5:45:5d:5e:c1:d0:0c:4d:3d:e4:
                    5e:22:41:20:50:47:4b:42:ea:fe:de:13:a3:39:e7:
                    a0:9a:24:5a:db:48:d3:27:5c:1a:0d:56:46:8e:4b:
                    f8:1f:91:55:ef:3e:e9:78:ac:91:19:7d:6c:67:55:
                    ef:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:9E:DE:E5:EF:57:B1:3F:D6:BB:98:96:D6:D6:3A:9E:4A:AF:9A:E3
            X509v3 Authority Key Identifier:
                keyid:0E:9A:CD:80:71:14:B5:8F:71:8A:9C:2B:85:95:26:25:E6:DB:2B:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DprNgHEUtY9xipwrhZUmJebbK9E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:92:3a:05:5a:e6:d0:0d:3f:0f:8b:de:d1:18:b0:99:bc:76:
         4f:e1:77:33:fc:c8:2d:3e:47:29:55:28:71:53:06:47:8f:f5:
         2a:a6:03:65:03:f0:51:d5:12:43:85:1d:6d:77:0d:f1:71:9e:
         95:c4:0a:48:6b:f1:a7:90:64:4b:e7:d9:bc:af:da:79:dd:a7:
         87:92:83:63:a4:8f:81:8c:3a:35:cf:05:9b:f2:1d:66:e2:08:
         ac:dc:88:f1:2c:ab:5c:96:9f:6d:18:c7:7e:e4:8f:1e:68:56:
         97:47:72:37:c2:0e:45:44:71:dc:4c:fd:9b:b6:65:91:ea:cd:
         f9:1a:8e:6a:b8:77:74:1d:60:4b:84:15:ef:5b:5d:26:96:d2:
         c3:f0:32:d1:00:3e:35:ca:c1:88:6e:e3:bf:1f:3f:dc:b4:3c:
         f3:ee:44:c7:a8:54:6a:6c:dd:4c:a6:c0:c9:08:13:12:a1:67:
         95:1a:3b:32:d8:a4:7b:a7:76:84:e8:0e:d9:37:b5:ca:2c:4e:
         bb:ff:b6:34:54:f5:b7:5b:ac:e3:42:90:0e:fa:7b:28:34:68:
         4d:ec:fd:dc:08:0b:ef:8d:69:07:03:14:76:d3:58:6b:3b:57:
         5d:0c:90:01:fa:16:e9:64:09:39:38:5c:01:79:6f:10:8c:25:
         aa:f4:17:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:31:16 2026 by rpki-client