Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft
File:                     dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft (raw, json)
Hash identifier:          U+PJpO0Joik1zHRTN+1vlhutUA6TbDQgmnvL9vI4hYc=
Subject key identifier:   F7:3E:02:F2:AE:AD:AA:8A:B8:38:BF:57:08:A5:C5:69:35:B7:9C:93
Authority key identifier: 74:50:36:09:74:29:CC:1A:C7:6C:4C:99:89:8D:06:F8:3E:07:5C:13
Certificate issuer:       /CN=A9185259/serialNumber=745036097429CC1AC76C4C99898D06F83E075C13
Certificate serial:       6D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dFA2CXQpzBrHbEyZiY0G-D4HXBM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft
Manifest number:          6A
Signing time:             Fri 17 Apr 2026 07:37:19 +0000
Manifest this update:     Fri 17 Apr 2026 07:37:19 +0000
Manifest next update:     Fri 24 Apr 2026 07:37:19 +0000
Files and hashes:         1: dFA2CXQpzBrHbEyZiY0G-D4HXBM.crl (hash: oqPbCBmR0L/ZwFHigWjl5r5nvpOIE0rojbPc/Cjm2mc=)
                          2: 991FC9309CFA11F08F0A1549C4F9AE02.roa (hash: vBEx8MN3paA8oMvLUSfioDhDYGeEtTZ7/oH2tL94g1c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.crl
                          rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dFA2CXQpzBrHbEyZiY0G-D4HXBM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:37:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109 (0x6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185259, serialNumber=745036097429CC1AC76C4C99898D06F83E075C13
        Validity
            Not Before: Apr 17 07:37:19 2026 GMT
            Not After : Apr 24 07:37:19 2026 GMT
        Subject: CN=69e1e32f-db8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6a:d8:79:5c:3b:87:af:99:24:94:f1:2b:3e:
                    60:68:47:1c:44:15:ef:50:9d:2e:00:04:ab:1b:77:
                    ca:3b:fd:61:18:49:bc:be:f7:f3:e1:ea:57:98:c7:
                    4e:3a:e5:d1:e5:15:fc:9c:d2:fd:b7:05:78:da:f6:
                    4f:3e:3d:79:0c:c3:68:16:8c:b1:44:5c:4b:34:93:
                    71:92:e5:76:4e:77:3d:f4:d6:aa:02:5a:42:62:15:
                    01:25:f3:8e:9d:27:e5:a8:ee:57:24:dd:94:b1:bb:
                    02:49:66:11:ff:c1:89:bf:2d:bc:3a:1d:61:0d:d5:
                    74:9e:e1:9e:87:74:f2:48:1a:df:e3:2b:73:d8:ca:
                    d1:52:08:46:ea:4f:93:28:cb:96:91:72:cb:e5:0c:
                    9b:a2:05:d3:6c:f9:cf:00:b4:53:8e:af:9b:83:22:
                    4c:f2:62:7f:28:1a:14:b6:1e:dc:a5:8f:ad:3f:02:
                    2c:30:13:82:37:f6:0d:1f:69:04:83:c0:97:8c:78:
                    5c:0d:98:26:02:f8:fd:e4:32:5e:22:0b:53:03:57:
                    05:b2:de:44:e6:af:2c:af:15:e1:2b:1f:47:ff:01:
                    de:cc:10:92:65:31:66:10:30:06:72:91:ac:01:7a:
                    1f:33:8a:0b:86:7b:10:95:55:4a:95:1e:41:08:f8:
                    e0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:3E:02:F2:AE:AD:AA:8A:B8:38:BF:57:08:A5:C5:69:35:B7:9C:93
            X509v3 Authority Key Identifier:
                keyid:74:50:36:09:74:29:CC:1A:C7:6C:4C:99:89:8D:06:F8:3E:07:5C:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dFA2CXQpzBrHbEyZiY0G-D4HXBM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:d4:8d:be:a8:a2:de:ff:ae:ea:3d:16:83:4a:b2:89:75:20:
         a5:dd:d3:88:a4:11:b6:5d:e7:06:65:60:35:8b:7c:f4:e5:e7:
         d2:e7:6f:ce:26:72:f4:92:1a:47:0a:26:20:71:6b:85:76:4e:
         40:61:41:eb:2a:16:41:9c:7c:98:05:1d:92:67:c8:b1:4b:52:
         ce:e4:8f:81:87:65:62:92:1c:4e:4d:d2:71:b3:57:45:d4:cc:
         8f:88:fc:d1:83:e5:e5:bf:0a:b3:ba:4c:fa:11:19:09:79:0b:
         f1:b1:b7:7a:13:1c:5e:6b:8b:6c:2a:cc:cd:d7:0e:cd:7d:dd:
         9d:8d:f5:70:bb:54:df:fa:75:9c:68:42:44:90:30:a3:68:1b:
         58:e5:74:eb:47:ce:8b:dd:1b:b4:73:6b:fa:3e:f7:95:86:0a:
         c2:28:6b:f9:65:5a:a6:a2:0e:1c:82:1a:59:ec:a7:07:af:79:
         bd:9f:28:57:0f:71:4e:3f:44:e7:5a:06:9a:de:64:44:cf:da:
         8e:8e:32:a3:fd:66:a1:41:cb:4d:74:54:c0:fb:65:a1:d6:54:
         6e:7d:13:db:a6:38:7b:2f:ea:5a:12:3c:c9:61:fb:28:d5:ac:
         66:3b:5c:b2:04:f2:61:d6:e3:0d:98:9f:41:78:db:78:9e:e3:
         fb:89:fe:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:21:53 2026 by rpki-client