Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft
File:                     dF_08GOrXRceBSUbMeKUpLx5c7E.mft (raw, json)
Hash identifier:          ceAyNL8hhieJFfk8ue5GOU+E1xarX7AtlF5gOypXwMU=
Subject key identifier:   4A:31:EC:30:6D:EE:67:B6:C4:0A:58:D6:EA:C2:5A:06:F7:78:BA:10
Authority key identifier: 74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1
Certificate issuer:       /CN=A915E475/serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1
Certificate serial:       0B1B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft
Manifest number:          0A0C
Signing time:             Thu 16 Apr 2026 20:13:48 +0000
Manifest this update:     Thu 16 Apr 2026 20:13:47 +0000
Manifest next update:     Thu 23 Apr 2026 20:13:47 +0000
Files and hashes:         1: dF_08GOrXRceBSUbMeKUpLx5c7E.crl (hash: kycz7weHSpmRfeRvLC6mE+aZ42Ycoun6GD1LtjGscfU=)
                          2: E94D73BE291D11EF86792873C4F9AE02.roa (hash: 9cwwImpG0kuALXJSvuXgLEJYlcBpiuJBifGtYofo6Aw=)
                          3: 61C70D36088411F1B1AFA7640E3D8C67.roa (hash: k6n/b8uPYd+AiCnOzUingvkJYhO7VLfxKO8V9R5dnkQ=)
                          4: B80A9FF60B4111EF919B0B7DC4F9AE02.roa (hash: gsB9c0U2DntNM1+v6I/9WXimUYgEdXTJXViqGyC2AQ0=)
                          5: 4E6E940C612211EB8166284BC4F9AE02.roa (hash: QW6uZWXeGB+Eizq4SwIGwFff/Y27AeGTfhmNqMCDG9M=)
                          6: 7C9D0D66546811EBBF7C8469C4F9AE02.roa (hash: WmHfkDZFO7wJF5fVRRjhSZ2MtLW2NAgEZ/oXceI0GSk=)
                          7: 20AF7940433811EFA525DA49C4F9AE02.roa (hash: 3jwm3MhqEfHhfN91jF6LuuUMLkdpp4+mtNlcLdp031I=)
                          8: E0039822DDDD11EF84C13A22C4F9AE02.roa (hash: lWUMp9J9+EEIyFVfamv9b+gDZejel22GgkvYFOZ8pJs=)
                          9: 4020FFBCF80111ECAC7ADB0CC4F9AE02.roa (hash: OrZ9Ea1QZaI1VDtqb0gOsdHCM2dKMi5dNl6ij8Rdp0E=)
                          10: 315D1630DDD911EFBAA4D977C4F9AE02.roa (hash: IDTH0cAlA2j29Quymic14S26EVLhL7W0jgxsTtfpz7w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl
                          rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:13:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2843 (0xb1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E475, serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1
        Validity
            Not Before: Apr 16 20:13:47 2026 GMT
            Not After : Apr 23 20:13:47 2026 GMT
        Subject: CN=69e142fb-b56b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:69:80:33:c4:5a:b6:e6:ea:0c:d9:21:19:35:
                    e4:68:ba:ed:48:89:85:59:82:91:68:9c:ce:5e:b9:
                    64:40:0f:49:a6:11:c2:dc:d3:04:79:30:0d:3a:87:
                    f9:ed:a4:5c:30:e3:84:ae:03:e1:f2:dd:16:d2:60:
                    f1:c9:a9:23:b7:96:88:0a:99:1e:d5:05:99:ff:77:
                    20:97:13:4d:b1:86:49:4d:65:f9:f9:10:b8:89:9a:
                    15:4c:fc:50:2d:03:9b:0a:a3:13:28:b5:30:12:0a:
                    af:e2:84:f4:55:f3:48:9f:1d:93:e3:51:c9:5a:ca:
                    b5:08:17:2f:47:fb:c0:62:d9:45:9d:ea:d0:b7:0a:
                    15:82:5c:26:4b:6a:8d:e2:60:47:c0:ca:61:43:59:
                    a6:0b:fb:0e:e3:73:68:19:e4:0d:b1:86:a6:e8:9e:
                    49:c7:76:cf:d7:6c:96:4b:3c:85:b4:d3:a6:11:36:
                    c2:e7:ea:25:e6:50:4d:76:27:05:99:f4:19:e2:da:
                    04:a2:81:b1:54:ed:c4:bd:49:b3:f1:e4:ea:b7:79:
                    4e:81:f3:54:27:72:77:6e:b2:7a:d8:a7:1f:cc:e9:
                    89:71:16:49:ea:9e:6e:17:7d:cc:fa:85:36:2e:7e:
                    53:26:b8:55:1d:74:5c:e6:20:78:ec:50:e6:4e:1c:
                    e8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:31:EC:30:6D:EE:67:B6:C4:0A:58:D6:EA:C2:5A:06:F7:78:BA:10
            X509v3 Authority Key Identifier:
                keyid:74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:d3:62:5b:1c:70:cc:b4:79:bb:92:ee:9e:85:c9:fe:6d:43:
         a8:cd:58:c1:f5:e6:5d:a0:f8:72:4e:c5:18:b6:fe:99:63:52:
         f2:35:16:09:e0:1c:09:b9:6c:aa:2c:6e:e1:9c:0a:16:08:5b:
         81:65:ac:01:d0:dd:e8:ed:0d:a2:27:76:be:df:de:48:17:78:
         c8:90:66:96:b5:ce:a0:20:95:0e:45:7f:a5:f2:03:30:56:fd:
         97:f9:c7:bc:0d:eb:6e:7e:03:40:31:6d:67:ec:5a:26:7e:c2:
         87:90:b9:dc:95:99:4c:10:21:44:64:68:0d:e4:2c:30:b0:5a:
         7e:3a:b2:8b:9f:49:f5:33:b1:ad:f8:f4:b2:b0:c9:15:1c:13:
         c5:d6:73:0e:17:76:98:03:55:d5:55:6a:42:ab:2c:3a:e5:9b:
         cf:03:dc:93:64:b3:0f:4e:1d:cf:84:76:ed:6f:34:92:97:32:
         17:a2:a0:66:83:0b:06:e9:0f:f7:d1:31:73:d5:67:ae:69:b8:
         f7:59:18:39:37:69:ce:9a:14:66:21:08:e7:23:39:fc:ae:f9:
         63:fe:23:8b:e9:41:e0:ef:9c:e7:48:6f:d5:10:7a:44:52:7c:
         8f:f8:80:f5:1c:88:de:50:45:c4:b2:ec:71:48:86:59:e9:28:
         4f:2b:eb:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:44:18 2026 by rpki-client