Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.mft
File:                     DAUkO371VhHkCk279_5-kSCSplI.mft (raw, json)
Hash identifier:          yogOjT438+AxJgfTl2LpfzJY9bW/nkKGK6bwKaUxVxA=
Subject key identifier:   B2:2F:B8:96:BC:D9:E7:9F:C9:8A:A5:FE:6A:21:0F:E2:9B:32:EF:29
Authority key identifier: 0C:05:24:3B:7E:F5:56:11:E4:0A:4D:BB:F7:FE:7E:91:20:92:A6:52
Certificate issuer:       /CN=A916A8E2/serialNumber=0C05243B7EF55611E40A4DBBF7FE7E912092A652
Certificate serial:       0121
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAUkO371VhHkCk279_5-kSCSplI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.mft
Manifest number:          0119
Signing time:             Sun 01 Mar 2026 06:55:40 +0000
Manifest this update:     Sun 01 Mar 2026 06:55:40 +0000
Manifest next update:     Sun 08 Mar 2026 06:55:40 +0000
Files and hashes:         1: DAUkO371VhHkCk279_5-kSCSplI.crl (hash: K1zulq96wq+Cr5AQSFDp54BCM7ze9xtrPB3fzYeUC5k=)
                          2: 04EFECDA6F3411EF833F4C23C4F9AE02.roa (hash: 9FFQWaVB+irLH5LQK4lUbYq93QbOasqqLLPoEvtouvY=)
                          3: 04679AF66F3411EF833F4C23C4F9AE02.roa (hash: gV+HYc6PaGbXoIxv4tVP5eLeL26hhMkwhH4xgC6rrVc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.crl
                          rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAUkO371VhHkCk279_5-kSCSplI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:55:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 289 (0x121)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A8E2, serialNumber=0C05243B7EF55611E40A4DBBF7FE7E912092A652
        Validity
            Not Before: Mar  1 06:55:40 2026 GMT
            Not After : Mar  8 06:55:40 2026 GMT
        Subject: CN=69a3e2ec-a8f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bc:17:f6:44:23:2f:bc:e5:b7:4e:0d:e9:af:
                    f7:bc:0f:22:a2:3d:52:6c:56:eb:73:bf:c3:5a:93:
                    b2:4f:9d:4c:3b:74:8a:f7:cb:e3:8a:b8:1d:b8:bf:
                    32:50:13:97:7d:93:8f:9c:e7:dc:dd:6e:90:ca:a5:
                    c4:f3:66:05:7b:94:5e:32:17:54:4d:0d:99:64:b2:
                    20:81:e4:a8:95:ef:c2:e9:b5:67:25:b8:a5:26:24:
                    d4:6f:47:77:ee:47:00:47:ab:0f:ca:de:20:9b:d9:
                    1e:5e:c1:7c:88:ee:8b:bf:9d:2a:6c:e8:2e:62:c1:
                    e9:79:d5:1c:53:b7:be:9d:6c:37:d1:3e:33:7e:3f:
                    f0:2d:f2:d7:d8:8c:5e:fe:68:44:e6:c4:ee:c3:6d:
                    55:d3:13:73:3f:8b:c6:c4:d7:d9:f3:6e:e1:39:bd:
                    f8:d3:69:38:c7:53:5b:f1:19:cf:ea:ba:1a:d4:d1:
                    65:47:a3:55:ea:17:29:fd:6e:32:b5:25:5b:50:1f:
                    fa:f7:ef:9a:86:41:c2:e4:5f:ac:92:22:fd:72:05:
                    ec:fb:1e:94:44:10:d8:bd:d8:65:83:40:33:35:05:
                    89:15:8c:5a:e5:82:54:b5:39:29:e5:30:90:fc:6e:
                    26:8a:5a:2b:4a:70:99:9a:97:d8:c9:03:46:90:16:
                    d7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:2F:B8:96:BC:D9:E7:9F:C9:8A:A5:FE:6A:21:0F:E2:9B:32:EF:29
            X509v3 Authority Key Identifier:
                keyid:0C:05:24:3B:7E:F5:56:11:E4:0A:4D:BB:F7:FE:7E:91:20:92:A6:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAUkO371VhHkCk279_5-kSCSplI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:ac:fe:49:c5:8f:21:29:5f:b7:6c:59:82:9f:62:05:4a:d3:
         bf:34:0b:5e:38:68:58:2f:90:cb:fc:73:90:ce:1f:59:c9:d2:
         1e:90:fb:a1:98:5f:73:55:20:dc:1c:eb:89:8f:f7:07:19:4f:
         c2:80:10:16:43:7d:52:1b:4a:0f:e6:0f:dc:7c:31:3d:60:f4:
         f3:66:93:5a:17:56:3a:7b:21:56:82:65:68:05:ef:04:e5:66:
         be:2c:c7:95:9f:f7:98:a3:26:6a:d5:ad:fa:b0:e6:a7:e9:ca:
         0b:d9:84:ba:67:3f:81:f1:87:93:f8:4d:95:ec:d4:df:91:32:
         e0:c9:46:b9:d2:63:d8:f6:0c:a2:7e:b9:d8:ff:09:06:c1:90:
         a1:5a:2a:95:7b:fc:cf:38:f1:bb:a9:27:1c:12:be:7d:96:c9:
         5a:96:89:8e:af:46:0f:6b:90:59:07:b8:b0:4a:d2:e6:74:33:
         cf:e4:48:cb:8d:2a:eb:e1:43:57:04:a9:9d:90:09:b5:03:36:
         00:34:c6:16:cd:62:8c:aa:6c:e4:0f:18:40:0e:fa:df:c9:44:
         6c:ce:6e:c8:a3:86:41:c1:e4:fb:17:85:8c:33:c4:73:98:3c:
         38:da:e8:b9:26:ac:fb:0c:e2:23:40:ee:b8:87:8b:be:26:97:
         cf:00:23:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:59:10 2026 by rpki-client