Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/DsmozWa374HQeaCEKyY5Zf50-NA.mft
File:                     DsmozWa374HQeaCEKyY5Zf50-NA.mft (raw, json)
Hash identifier:          sH31Zz9k0WjhjcQWw3SVZJwG0g4CaeZovXuk9QcyNZA=
Subject key identifier:   8D:CA:F5:7A:4F:00:C7:1D:DD:4F:1F:4A:CF:7C:78:D4:CF:60:26:FD
Authority key identifier: 0E:C9:A8:CD:66:B7:EF:81:D0:79:A0:84:2B:26:39:65:FE:74:F8:D0
Certificate issuer:       /CN=A91614E3/serialNumber=0EC9A8CD66B7EF81D079A0842B263965FE74F8D0
Certificate serial:       20
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DsmozWa374HQeaCEKyY5Zf50-NA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/DsmozWa374HQeaCEKyY5Zf50-NA.mft
Manifest number:          1E
Signing time:             Mon 15 Jun 2026 09:00:22 +0000
Manifest this update:     Mon 15 Jun 2026 09:00:21 +0000
Manifest next update:     Mon 22 Jun 2026 09:00:21 +0000
Files and hashes:         1: DsmozWa374HQeaCEKyY5Zf50-NA.crl (hash: J7IbqV3mFBK2667rVyibYZjDLiuYWf2h3Se/hYQ3Fc0=)
                          2: FE7346D642CC11F1A52BA276C6833773.roa (hash: U80wdjKrFdkd4k7mDaI1dER/kEU7/YWh7Nwr30a+PjI=)
                          3: 5A98E30A42CB11F1992134BCC5833773.roa (hash: 1GzxVrWXwmq6D+IOsW7P45S3VHfpVtuLEfB3vhPmPmc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/DsmozWa374HQeaCEKyY5Zf50-NA.crl
                          rsync://rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/DsmozWa374HQeaCEKyY5Zf50-NA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DsmozWa374HQeaCEKyY5Zf50-NA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91614E3, serialNumber=0EC9A8CD66B7EF81D079A0842B263965FE74F8D0
        Validity
            Not Before: Jun 15 09:00:21 2026 GMT
            Not After : Jun 22 09:00:21 2026 GMT
        Subject: CN=6a2fbf26-c1d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:32:3e:16:45:0f:37:1f:b9:03:be:d2:f0:c4:
                    4a:3e:d5:93:b2:3f:96:aa:69:41:ee:ff:70:61:c1:
                    ee:66:df:19:09:4e:9e:bb:fb:d7:05:cf:c9:af:c6:
                    df:95:ad:21:52:e1:6b:78:16:97:10:63:14:2c:ba:
                    c7:71:4e:9b:02:09:bc:36:f9:c9:da:c4:b9:a4:2f:
                    8c:dd:36:64:e8:7e:1e:70:4b:c9:14:3d:8a:6e:95:
                    58:cf:22:14:dc:a6:1b:56:88:93:d7:8e:e2:9f:13:
                    23:a4:1b:67:cc:bb:e6:ad:22:a6:02:f5:dd:79:bd:
                    65:ff:46:89:67:25:88:b5:a0:7f:ea:79:f8:02:32:
                    55:84:1f:5b:03:53:8e:bb:53:e1:31:00:55:59:87:
                    bb:38:9d:9e:95:21:d3:f8:37:00:bc:93:53:15:73:
                    2e:d1:ed:93:59:e3:fb:ac:4c:bd:d5:21:79:98:17:
                    eb:99:13:52:78:22:00:b2:0e:eb:7b:ae:c8:74:bb:
                    98:01:1f:d7:5f:74:83:b1:e9:b7:ce:ed:a0:62:cb:
                    7a:b0:13:17:de:ca:df:f4:72:de:99:9a:dd:49:53:
                    5f:9c:e2:03:63:92:d7:7b:0b:6f:98:b3:b9:f0:ca:
                    97:91:e1:8b:66:a8:75:79:de:78:88:73:b8:f0:73:
                    57:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:CA:F5:7A:4F:00:C7:1D:DD:4F:1F:4A:CF:7C:78:D4:CF:60:26:FD
            X509v3 Authority Key Identifier:
                keyid:0E:C9:A8:CD:66:B7:EF:81:D0:79:A0:84:2B:26:39:65:FE:74:F8:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/DsmozWa374HQeaCEKyY5Zf50-NA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DsmozWa374HQeaCEKyY5Zf50-NA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/DsmozWa374HQeaCEKyY5Zf50-NA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:97:a9:17:4f:b3:7b:e5:36:fe:0d:1b:4f:65:08:75:db:96:
         ff:0d:eb:ae:60:2b:4c:1e:cd:ac:e5:4e:d8:9a:e9:d1:f9:90:
         2d:a4:98:fa:03:84:f2:62:8a:7a:72:7f:0e:57:9c:40:35:a3:
         27:f5:ef:bd:ac:80:c4:46:0e:9d:8f:45:fd:c7:73:8a:b9:c9:
         8b:d8:94:b4:94:b1:8a:05:44:c5:b1:13:22:54:a6:73:40:f7:
         a3:aa:1e:47:c1:a9:49:c2:3e:49:31:b9:f8:09:b6:cc:14:fd:
         ce:05:d4:9e:27:7d:15:3d:2f:eb:0b:bb:f3:d6:2a:cb:84:a8:
         4b:6b:99:03:fd:78:ec:6a:ca:e9:21:cc:9f:a9:c3:31:3f:33:
         d1:b0:d3:a1:13:c6:62:83:0d:cc:fa:98:1e:47:16:f7:32:b6:
         e1:ed:53:19:4a:6a:4c:80:99:e5:73:c8:39:21:61:f2:f9:9d:
         fb:97:13:04:ef:f1:06:dd:97:f3:87:bb:99:1d:f5:41:38:14:
         b7:34:c5:a5:97:a1:97:17:d6:16:4d:75:b4:06:c8:2b:00:59:
         d5:95:ba:ef:0f:d6:42:86:e2:93:1f:99:67:3a:3c:7a:a8:f7:
         f5:51:60:2e:45:13:7f:86:c6:7a:03:3b:0b:e2:80:0e:d3:50:
         f4:2d:71:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:03:18 2026 by rpki-client