Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7C68/423986F6972111EDA2E02251C4F9AE02/D2JqMmTW_szL_rLZmx2_iv_sOzQ.mft
File:                     D2JqMmTW_szL_rLZmx2_iv_sOzQ.mft (raw, json)
Hash identifier:          fp0tYPKd78+oHRn/Gs3z+LtpBqspAjqJbb41+GEaB+c=
Subject key identifier:   F7:96:2E:D4:36:4D:4F:3C:4E:22:F8:C4:50:C9:D2:0F:27:A2:AD:59
Authority key identifier: 0F:62:6A:32:64:D6:FE:CC:CB:FE:B2:D9:9B:1D:BF:8A:FF:EC:3B:34
Certificate issuer:       /CN=A91A7C68/serialNumber=0F626A3264D6FECCCBFEB2D99B1DBF8AFFEC3B34
Certificate serial:       027A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D2JqMmTW_szL_rLZmx2_iv_sOzQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7C68/423986F6972111EDA2E02251C4F9AE02/D2JqMmTW_szL_rLZmx2_iv_sOzQ.mft
Manifest number:          026C
Signing time:             Fri 17 Apr 2026 01:56:45 +0000
Manifest this update:     Fri 17 Apr 2026 01:56:45 +0000
Manifest next update:     Fri 24 Apr 2026 01:56:45 +0000
Files and hashes:         1: D2JqMmTW_szL_rLZmx2_iv_sOzQ.crl (hash: jY69rJcxnOmc4WyUM7aEjAmUO/liq8ApPOwF+rjkVY0=)
                          2: BC72661A972911ED8CBCA476C4F9AE02.roa (hash: oqs2HbQnUMYYMDR47oCqmjCl1ra9AMLnfmPG6sV1Oco=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7C68/423986F6972111EDA2E02251C4F9AE02/D2JqMmTW_szL_rLZmx2_iv_sOzQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A7C68/423986F6972111EDA2E02251C4F9AE02/D2JqMmTW_szL_rLZmx2_iv_sOzQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D2JqMmTW_szL_rLZmx2_iv_sOzQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:56:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 634 (0x27a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7C68, serialNumber=0F626A3264D6FECCCBFEB2D99B1DBF8AFFEC3B34
        Validity
            Not Before: Apr 17 01:56:45 2026 GMT
            Not After : Apr 24 01:56:45 2026 GMT
        Subject: CN=69e1935d-b50c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ed:b9:1b:13:1d:74:c4:0a:fd:03:02:cb:6d:
                    ba:96:de:a9:69:d3:6a:b6:71:78:b5:80:da:4b:17:
                    89:c9:ae:8e:9c:b9:c1:ea:c0:18:bf:ca:dd:05:d2:
                    9f:c5:8a:d3:8d:c9:73:c2:55:6b:ae:46:2a:d0:75:
                    71:7c:72:87:0e:bf:f3:92:dc:c6:97:3f:46:65:12:
                    14:fd:2a:fa:24:1f:e5:00:03:73:18:09:98:e1:0e:
                    19:22:e6:0a:0e:dd:ca:cc:88:44:1a:44:13:ea:8f:
                    0a:0d:19:12:fe:51:83:82:75:7f:80:f4:f5:31:c7:
                    ec:19:b8:fa:7e:90:d0:42:ce:c5:64:54:92:07:87:
                    db:50:af:62:48:61:8b:50:2b:dd:c9:cb:de:68:86:
                    00:0f:bc:4b:12:9a:f8:80:78:96:94:8c:74:72:05:
                    b2:c1:9f:ae:bb:a5:c9:96:ca:d2:6d:bd:00:1d:ad:
                    5a:91:c2:79:76:4e:fb:49:0d:22:e7:3f:1f:40:9e:
                    b3:19:28:ba:4a:f0:67:be:88:8c:b6:21:b3:ee:19:
                    93:1d:0b:80:c8:8d:b2:7a:85:03:12:9a:ea:7a:70:
                    0a:db:f6:5f:c2:20:56:45:a1:11:8c:c8:fb:0a:92:
                    33:63:14:9b:5c:fa:25:eb:ed:9b:c2:c3:cc:1d:65:
                    16:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:96:2E:D4:36:4D:4F:3C:4E:22:F8:C4:50:C9:D2:0F:27:A2:AD:59
            X509v3 Authority Key Identifier:
                keyid:0F:62:6A:32:64:D6:FE:CC:CB:FE:B2:D9:9B:1D:BF:8A:FF:EC:3B:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7C68/423986F6972111EDA2E02251C4F9AE02/D2JqMmTW_szL_rLZmx2_iv_sOzQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D2JqMmTW_szL_rLZmx2_iv_sOzQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7C68/423986F6972111EDA2E02251C4F9AE02/D2JqMmTW_szL_rLZmx2_iv_sOzQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:c7:e6:88:68:b0:4e:9a:ec:64:e4:a1:d4:94:79:bd:27:50:
         da:fd:85:98:a8:78:89:42:77:46:a4:84:a5:bd:55:0c:48:45:
         09:1d:a6:f8:9f:5d:93:e8:49:95:1f:ab:27:a9:47:27:96:3d:
         64:65:e9:8a:2b:7e:9b:13:fd:ca:0c:4f:8d:05:a5:6d:5b:03:
         e9:d4:3f:7c:56:01:a0:27:dd:ae:0d:c1:21:48:2a:d5:3e:eb:
         01:ed:86:62:58:ba:4c:10:d8:6d:5c:de:a5:ee:1d:55:f0:2d:
         9f:1b:25:b8:df:5c:98:dc:38:5b:41:d8:f2:23:bf:be:03:79:
         04:d0:d6:95:a6:c9:3f:f9:89:b1:0e:4a:e7:c5:fd:cf:a7:88:
         2a:f4:1d:e7:16:1b:25:9c:7e:e0:8a:46:96:b7:2b:9b:79:c1:
         4b:94:0f:97:6b:ec:07:b3:cc:9f:92:f1:68:6b:30:52:89:48:
         81:e3:f8:1f:55:3c:fa:df:96:75:2c:72:9e:43:6d:4e:e2:d6:
         e9:11:0a:6a:b0:1f:6c:ba:f3:21:0a:e7:4a:0e:1f:0e:2f:96:
         09:4c:70:a6:4e:0c:95:46:74:11:e7:eb:ba:07:05:69:6c:b9:
         b0:bd:e5:d1:28:6d:16:dd:72:d2:67:69:60:30:24:ff:33:c8:
         25:ea:d8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:31:21 2026 by rpki-client