Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.mft
File:                     DmxKtne94a1EYD_XN9olwGAcRZw.mft (raw, json)
Hash identifier:          grGrlD3OLexAfs2raeJl+YaG7/ZmEU1fMshjwZnP2UU=
Subject key identifier:   23:1F:25:36:AE:A1:86:0A:B2:0C:3A:EF:66:3C:02:6E:76:F5:38:A9
Authority key identifier: 0E:6C:4A:B6:77:BD:E1:AD:44:60:3F:D7:37:DA:25:C0:60:1C:45:9C
Certificate issuer:       /CN=A91939CF/serialNumber=0E6C4AB677BDE1AD44603FD737DA25C0601C459C
Certificate serial:       D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmxKtne94a1EYD_XN9olwGAcRZw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.mft
Manifest number:          D4
Signing time:             Fri 17 Apr 2026 06:26:27 +0000
Manifest this update:     Fri 17 Apr 2026 06:26:27 +0000
Manifest next update:     Fri 24 Apr 2026 06:26:27 +0000
Files and hashes:         1: DmxKtne94a1EYD_XN9olwGAcRZw.crl (hash: 2qhsXPim8ApZJT5paBVRi70kmHjWlbvIjMQXMU8TC3w=)
                          2: C488A080FB5911EFA827FD17C4F9AE02.roa (hash: R8smImtHPkQX7G+nBf5PC7cAGT+ubkBObp2FM3F8pkE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.crl
                          rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmxKtne94a1EYD_XN9olwGAcRZw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:26:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 216 (0xd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91939CF, serialNumber=0E6C4AB677BDE1AD44603FD737DA25C0601C459C
        Validity
            Not Before: Apr 17 06:26:27 2026 GMT
            Not After : Apr 24 06:26:27 2026 GMT
        Subject: CN=69e1d293-f237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f9:2e:8a:de:44:4c:4f:a6:5a:ec:74:f5:50:
                    ab:e0:da:3c:e4:27:72:b8:27:e9:28:31:b9:24:34:
                    5b:77:da:31:ff:e6:42:3c:40:15:36:8c:24:14:3d:
                    26:38:f2:c0:3c:b2:1c:99:21:63:c5:04:cc:ce:95:
                    39:c4:d5:56:14:f0:4c:de:88:cd:f7:d9:7c:8c:66:
                    e0:90:8a:56:72:5b:27:ed:2f:b8:e4:1a:1d:51:8d:
                    f9:64:c8:05:5c:a4:fe:10:d6:ca:42:b5:0b:43:67:
                    44:9e:5d:c6:40:e9:01:9e:25:7f:94:06:0a:7e:d1:
                    cc:47:2d:90:7b:52:4a:33:d4:fa:47:73:da:e6:d2:
                    19:2a:2b:68:27:c6:64:ca:6f:03:86:e3:02:2b:73:
                    43:9a:0e:9a:05:c4:e9:24:ee:cd:e0:f2:f0:5b:bb:
                    08:9c:e6:f6:19:9c:ed:65:55:f5:ad:ab:9c:42:f1:
                    16:ec:73:68:a4:d3:28:91:96:f9:db:28:15:ee:72:
                    19:50:3f:cc:89:6f:ee:e9:fb:ac:74:f9:98:db:6d:
                    0b:0f:17:d2:5f:e1:ff:38:5d:fc:71:5a:eb:69:55:
                    ba:5e:a6:54:1a:b1:66:b1:9e:e6:c6:02:23:40:e7:
                    af:47:56:78:03:12:89:24:d4:e7:d1:99:22:dd:5b:
                    f3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:1F:25:36:AE:A1:86:0A:B2:0C:3A:EF:66:3C:02:6E:76:F5:38:A9
            X509v3 Authority Key Identifier:
                keyid:0E:6C:4A:B6:77:BD:E1:AD:44:60:3F:D7:37:DA:25:C0:60:1C:45:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmxKtne94a1EYD_XN9olwGAcRZw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:85:38:3b:3d:ee:4c:03:1a:76:2a:d7:15:ef:76:5f:5f:07:
         9a:c1:5b:b1:22:4f:1b:e8:62:88:ef:b5:4c:d1:04:2b:39:2e:
         2c:30:46:3a:41:e2:83:20:c1:35:62:a1:66:f7:58:6f:90:12:
         5c:3f:c7:5a:3d:91:93:86:69:9c:29:6f:cf:b2:9b:c3:e4:74:
         8f:02:f2:45:03:30:51:91:e1:75:84:fc:e8:88:a2:af:87:b7:
         2c:b5:9d:1e:ae:8c:c1:1a:bb:64:17:2f:35:d1:5d:2c:60:1c:
         40:77:72:e5:16:6d:c9:20:5c:70:87:3d:40:9c:b8:50:18:71:
         a6:28:ec:0f:3d:62:54:f6:12:6a:06:0f:8f:44:4d:e4:18:94:
         ba:56:e8:76:cf:98:22:4a:84:04:12:e1:ed:85:03:1a:d3:2c:
         6c:72:b9:e3:13:66:f8:50:e0:bc:e5:2c:67:fd:63:d4:d7:ef:
         3a:b8:9a:47:65:94:4d:33:74:1e:80:88:fb:06:85:55:b4:15:
         7e:2f:9f:ca:3c:ad:88:84:50:93:fe:b3:b1:47:fb:dc:6d:80:
         95:83:1f:b1:ca:d8:71:7b:d7:40:ad:79:f4:8a:d1:51:65:03:
         a4:ec:82:c5:6f:32:28:07:12:de:96:7c:c0:cb:2b:68:36:ca:
         ed:47:2e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:43:18 2026 by rpki-client