Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft
File:                     DNkEx-s5CtGlXbr0_FAFTAhUbis.mft (raw, json)
Hash identifier:          6wh+/MIxh66DS/uD3/HZ2x0s/uIrOdrtEZ2mC3Q+Plc=
Subject key identifier:   91:01:B4:0F:5A:FB:F2:34:C2:46:69:90:17:4E:BD:82:B8:EB:63:20
Authority key identifier: 0C:D9:04:C7:EB:39:0A:D1:A5:5D:BA:F4:FC:50:05:4C:08:54:6E:2B
Certificate issuer:       /CN=A91A47B6/serialNumber=0CD904C7EB390AD1A55DBAF4FC50054C08546E2B
Certificate serial:       019E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNkEx-s5CtGlXbr0_FAFTAhUbis.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft
Manifest number:          0195
Signing time:             Fri 17 Apr 2026 04:02:39 +0000
Manifest this update:     Fri 17 Apr 2026 04:02:38 +0000
Manifest next update:     Fri 24 Apr 2026 04:02:38 +0000
Files and hashes:         1: DNkEx-s5CtGlXbr0_FAFTAhUbis.crl (hash: +SUp9JZ08+/fTnW+ggubwCpf2bvQho6moPkCIxLCb3A=)
                          2: D45022C8CEC211EE80F08B36C4F9AE02.roa (hash: iG/FIqaT6KtwO+xKsXOo+peJz09fYygQm2FEIezx1zo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.crl
                          rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNkEx-s5CtGlXbr0_FAFTAhUbis.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 414 (0x19e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A47B6, serialNumber=0CD904C7EB390AD1A55DBAF4FC50054C08546E2B
        Validity
            Not Before: Apr 17 04:02:38 2026 GMT
            Not After : Apr 24 04:02:38 2026 GMT
        Subject: CN=69e1b0df-766e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:16:61:a2:0d:4a:6e:1d:69:1c:4b:62:5a:30:
                    98:e0:44:7b:1a:c9:cc:44:f4:92:9a:b7:b6:f1:2e:
                    46:84:51:c3:ee:34:cf:55:7b:ca:79:86:44:20:f5:
                    a5:d9:b7:94:6e:f9:26:85:57:f7:3e:ca:0b:a7:87:
                    a7:fc:70:4c:1d:47:6e:92:04:c9:4a:94:9c:d4:c4:
                    f4:1d:79:66:66:7e:95:59:a8:ee:11:e1:d4:f2:78:
                    80:46:1d:bb:24:7a:71:88:af:98:ac:c1:e1:89:75:
                    10:87:80:ca:fe:c7:80:08:ba:29:34:2a:00:13:88:
                    72:02:46:26:45:f8:61:4c:9c:3b:23:9f:8c:57:8f:
                    a3:50:ef:45:ec:41:ee:86:29:7c:86:f3:1b:2a:91:
                    42:1b:62:ff:13:d9:cc:9b:76:a1:a8:0c:94:b4:55:
                    fd:3c:49:04:4a:5e:1a:e4:4d:aa:94:2e:f8:b7:39:
                    00:83:d1:7d:18:06:8c:33:d0:84:ad:2c:f5:23:0b:
                    b8:8c:c4:8f:50:2b:8a:17:04:04:2b:5e:b5:41:27:
                    39:df:77:fa:a0:96:89:87:6d:45:8e:7f:72:4a:d1:
                    56:4e:84:7b:6a:9b:f6:c0:67:96:ee:5a:d8:09:f4:
                    48:40:44:92:fa:98:6c:5e:97:a0:c0:a0:8e:4d:e0:
                    50:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:01:B4:0F:5A:FB:F2:34:C2:46:69:90:17:4E:BD:82:B8:EB:63:20
            X509v3 Authority Key Identifier:
                keyid:0C:D9:04:C7:EB:39:0A:D1:A5:5D:BA:F4:FC:50:05:4C:08:54:6E:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNkEx-s5CtGlXbr0_FAFTAhUbis.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:fa:d7:d8:8e:97:76:19:47:14:44:aa:4d:5a:ed:13:43:79:
         59:42:fa:11:96:8a:2f:76:2c:9e:0f:39:99:d6:2d:b5:3f:0e:
         bf:17:10:94:2b:cf:cb:7d:9b:53:c4:d7:35:a1:14:6e:d3:60:
         ba:e2:94:da:59:a0:d2:3b:49:bd:e7:03:f4:ce:99:80:b8:29:
         92:12:ff:af:52:1c:f2:1a:7f:93:9b:00:e6:70:fe:1a:5b:b7:
         00:ee:31:2f:96:58:b9:bb:ea:6c:38:44:d1:e7:76:7e:6b:95:
         de:ac:65:a8:ec:45:ec:2e:4d:a7:e3:57:ab:86:ed:35:bb:38:
         81:ab:cb:f9:cb:2f:e2:26:f7:a8:f6:93:cb:e5:b7:1e:4e:dc:
         4d:d2:b3:bf:b1:29:33:71:15:f1:b0:e8:4a:d1:63:a4:c1:b1:
         25:12:d6:40:5e:d5:c4:09:68:1d:e1:14:77:61:72:53:65:57:
         5e:d3:a3:95:ea:fe:e5:d2:e5:e0:25:3f:77:c8:6a:64:a6:46:
         20:9e:78:65:b6:55:0f:b9:38:66:b0:d1:c5:bb:e3:a8:50:a2:
         61:c0:b0:db:c7:04:83:34:5e:38:09:32:a3:e2:50:fd:e3:c5:
         b5:09:f7:58:da:a4:21:26:63:67:b5:6d:49:66:9e:a0:1d:3e:
         b9:25:16:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:46:23 2026 by rpki-client