Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.mft
File:                     DGlwyrnfjpvRDhw-kYkaCafojCA.mft (raw, json)
Hash identifier:          js7vCU3Ld19fkCVjKbTTh0u43HlJ52tGaomiVDhoWa4=
Subject key identifier:   42:7F:9B:01:88:DE:7F:40:E5:18:C4:20:EF:EB:B8:25:E7:E5:3A:93
Authority key identifier: 0C:69:70:CA:B9:DF:8E:9B:D1:0E:1C:3E:91:89:1A:09:A7:E8:8C:20
Certificate issuer:       /CN=A9179672/serialNumber=0C6970CAB9DF8E9BD10E1C3E91891A09A7E88C20
Certificate serial:       E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGlwyrnfjpvRDhw-kYkaCafojCA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.mft
Manifest number:          DD
Signing time:             Mon 02 Mar 2026 14:47:59 +0000
Manifest this update:     Mon 02 Mar 2026 14:47:59 +0000
Manifest next update:     Mon 09 Mar 2026 14:47:59 +0000
Files and hashes:         1: DGlwyrnfjpvRDhw-kYkaCafojCA.crl (hash: ns2g2Cs108w/2+ltl9D7V5InRvhgGZEhP1Sp4PX+InE=)
                          2: D1C1AFB2135511F0976BA50CC4F9AE02.roa (hash: cXnna13A37da56cbsTCo0fbmD5n4hI69trG/+73mamk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.crl
                          rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGlwyrnfjpvRDhw-kYkaCafojCA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 14:47:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 229 (0xe5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179672, serialNumber=0C6970CAB9DF8E9BD10E1C3E91891A09A7E88C20
        Validity
            Not Before: Mar  2 14:47:59 2026 GMT
            Not After : Mar  9 14:47:59 2026 GMT
        Subject: CN=69a5a31f-d254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:6d:cc:03:1a:b7:ab:ec:b5:8d:10:c3:3f:f8:
                    84:a2:3a:d6:31:85:e7:3b:ca:98:e9:00:f1:0e:5a:
                    5f:51:2c:82:69:84:80:f6:c4:6e:ae:7f:6d:c2:88:
                    48:8e:d1:c1:7d:7c:eb:64:2a:99:81:85:4c:7d:a5:
                    98:56:dd:c8:51:4f:74:0b:7e:7c:92:3c:6f:ae:68:
                    aa:c8:32:ad:8d:f0:3c:eb:2f:f7:c8:e6:1b:80:5f:
                    98:8e:cc:ef:e5:33:57:a3:cb:2a:d5:3b:66:ed:ca:
                    fb:3d:14:af:c4:23:65:4e:c1:33:61:1d:71:cd:f2:
                    9f:b4:1a:51:53:00:3f:39:e9:5c:87:73:b9:9b:82:
                    d1:81:20:9d:30:fc:31:b5:d4:f4:86:d9:dc:71:3c:
                    76:dc:02:fa:06:3d:93:35:65:1a:81:b3:5d:c2:4b:
                    b5:db:5b:41:7f:f2:88:39:a8:50:3c:b6:b8:36:d5:
                    2a:3f:ee:dc:15:98:4d:00:f2:85:b4:10:df:02:5d:
                    55:cf:7b:03:e3:60:e3:ec:73:63:bf:71:30:a5:b7:
                    22:b7:b4:4e:59:19:d1:58:bf:c8:45:6b:25:c7:2c:
                    be:a4:d6:6a:fc:4a:9f:19:ea:d4:90:78:4a:2a:e6:
                    41:6e:9f:84:ee:ba:62:10:8c:68:bc:6d:7c:33:ab:
                    60:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:7F:9B:01:88:DE:7F:40:E5:18:C4:20:EF:EB:B8:25:E7:E5:3A:93
            X509v3 Authority Key Identifier:
                keyid:0C:69:70:CA:B9:DF:8E:9B:D1:0E:1C:3E:91:89:1A:09:A7:E8:8C:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGlwyrnfjpvRDhw-kYkaCafojCA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:8a:a1:a9:ab:18:b2:ee:11:c2:42:88:a1:9c:13:64:2e:d5:
         ec:e0:21:2e:24:88:a0:99:93:7f:12:88:62:8a:92:0b:26:47:
         ae:9f:99:33:8b:18:96:d0:3b:51:c3:2d:79:9a:bc:35:27:cc:
         b1:f9:1d:de:53:c3:52:9d:d9:4c:28:36:e9:bf:34:a6:82:fb:
         97:c5:eb:20:03:9d:3d:ac:a1:5a:f3:bd:44:5d:b0:4e:4f:85:
         3d:0e:f0:90:26:7c:b9:13:4b:92:f4:be:63:fb:b2:25:09:16:
         91:38:df:df:80:ab:69:2e:8b:7a:8e:fb:72:c7:73:07:1a:81:
         46:5d:ed:3a:c7:0a:4b:dd:f4:0c:ba:3d:17:b9:f3:40:c4:e2:
         0e:86:69:59:5e:03:61:aa:4b:78:09:ef:90:99:eb:f9:3a:c3:
         6b:8c:bd:61:64:39:cc:13:e7:ed:1b:24:6c:2c:ef:a1:5a:8e:
         46:00:87:81:27:48:cc:98:20:66:96:64:9e:27:48:0d:9f:84:
         51:c4:d0:4e:2e:f9:81:51:11:7f:17:e4:75:b8:1e:5b:75:53:
         d5:ef:3c:e4:d6:d8:f8:27:20:a3:81:67:36:de:c0:d5:fe:4d:
         6b:e2:8f:69:96:63:3d:b5:57:24:3a:df:97:1c:b9:e2:e6:75:
         9b:a9:e8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:15:49 2026 by rpki-client