Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft
File:                     DttKNycL9JQYSkbmAjFI_tbjOh4.mft (raw, json)
Hash identifier:          JmFpvIZixGI2CpT7K8jRxjBgMGBz6iZy53oc3ik1+mE=
Subject key identifier:   2D:87:EC:1A:2F:79:E3:54:23:49:94:CC:F4:B5:40:76:D0:AD:5E:DA
Authority key identifier: 0E:DB:4A:37:27:0B:F4:94:18:4A:46:E6:02:31:48:FE:D6:E3:3A:1E
Certificate issuer:       /CN=A91878E2/serialNumber=0EDB4A37270BF494184A46E6023148FED6E33A1E
Certificate serial:       0181
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft
Manifest number:          0178
Signing time:             Fri 17 Apr 2026 04:22:10 +0000
Manifest this update:     Fri 17 Apr 2026 04:22:10 +0000
Manifest next update:     Fri 24 Apr 2026 04:22:10 +0000
Files and hashes:         1: DttKNycL9JQYSkbmAjFI_tbjOh4.crl (hash: Jpz/AjBGY6TNzobSCfAancWMT74XYTPzEhvgxNrrYPI=)
                          2: 1C174EBCFC7011EE96142B1BC4F9AE02.roa (hash: jcMfcvbTYBEvZvAM9l9pumxljJCtyzP7TzycGPDLmwI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.crl
                          rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:22:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 385 (0x181)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91878E2, serialNumber=0EDB4A37270BF494184A46E6023148FED6E33A1E
        Validity
            Not Before: Apr 17 04:22:10 2026 GMT
            Not After : Apr 24 04:22:10 2026 GMT
        Subject: CN=69e1b572-4353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:17:12:70:33:e0:ba:b5:f6:40:cc:ac:52:a7:
                    fa:d1:10:84:94:95:5d:19:8c:d4:37:fe:83:aa:4d:
                    95:a5:73:77:63:bc:d0:45:da:80:a4:f8:a0:48:10:
                    b4:d5:1a:5f:0a:4c:99:83:f4:0f:ed:f8:29:29:fa:
                    bd:d9:f5:4f:ff:1f:8f:02:bf:22:dd:99:b8:bb:d1:
                    f1:93:4a:99:e5:34:2f:eb:9d:ca:c8:71:aa:0d:69:
                    e5:0d:41:55:2c:d2:6c:89:e4:b2:11:cd:b5:29:c0:
                    80:1f:fd:12:74:4b:5f:ab:47:34:82:3a:df:b3:7f:
                    87:d1:36:43:ea:6d:d2:bd:c9:7a:c0:a4:2b:53:84:
                    1e:75:0f:6c:98:1d:d0:f1:81:b8:a9:95:d2:68:89:
                    06:e2:8a:f1:4d:be:29:79:67:f2:b0:91:fc:e1:fe:
                    5e:29:89:33:f7:ab:3d:b0:b8:ba:f2:8e:32:62:0a:
                    06:a7:9a:9a:5f:14:2e:2e:8d:a1:9b:5a:a4:74:54:
                    37:1b:a1:40:55:f6:a2:90:21:0c:6b:94:c1:64:f3:
                    a4:6b:84:d6:1e:31:62:ad:be:b7:ec:35:0b:35:2f:
                    a5:5f:f9:a7:1d:0b:85:4a:8a:1c:06:d8:69:c6:73:
                    93:2e:1c:8a:2e:29:91:3f:8c:ea:14:2d:61:40:f7:
                    f8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:87:EC:1A:2F:79:E3:54:23:49:94:CC:F4:B5:40:76:D0:AD:5E:DA
            X509v3 Authority Key Identifier:
                keyid:0E:DB:4A:37:27:0B:F4:94:18:4A:46:E6:02:31:48:FE:D6:E3:3A:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:dc:81:96:88:28:53:f8:db:ef:67:6f:d7:b2:b9:c3:b7:de:
         12:29:67:f2:4d:27:c2:2f:f0:36:e2:78:ac:fb:17:7e:2e:34:
         4a:a8:5a:4c:d9:5a:c7:c1:a6:26:21:e0:02:a0:26:ba:6c:e2:
         8e:54:7b:2d:d4:31:5b:68:55:7e:b8:01:54:8a:b1:b0:59:0c:
         80:40:81:a5:10:27:a6:dd:2b:c1:33:a7:13:22:9e:5a:ff:b1:
         d9:56:c2:a8:fb:6a:70:a9:8f:b5:7c:52:f6:c8:92:2c:f3:7b:
         6b:c8:cb:d0:ec:7b:84:12:fa:24:16:73:8d:49:07:ef:0d:6a:
         17:0d:7f:b1:2a:8f:d4:e0:f3:19:f5:48:0f:26:fd:65:24:ee:
         14:34:b4:c4:8a:7e:69:7b:59:7d:5c:e0:c3:0a:aa:47:c9:d8:
         32:4f:78:3e:9e:7e:d5:9f:15:97:02:07:ed:75:48:3c:9d:7c:
         1a:28:29:c5:9f:e8:c5:ce:fa:5c:48:80:7f:a4:fd:5f:fc:6f:
         55:bb:df:90:94:52:1f:e2:a8:4f:16:51:04:e6:6b:aa:a9:a5:
         09:71:e8:19:ad:8d:d7:44:2a:68:ff:5e:1e:94:0b:17:4c:09:
         9b:56:9e:66:d8:0c:e1:61:d6:fe:17:3f:9a:5f:71:27:6c:15:
         f3:8e:75:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:43:45 2026 by rpki-client