Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft
File:                     djSthmVu_mxF5O-Zj5S2l6w5vvE.mft (raw, json)
Hash identifier:          iX4nl+tIWSFkd1n5rA1YoKV+LMUdyqnBaZ4EGFLtw8o=
Subject key identifier:   39:45:3B:92:4F:2F:EC:A6:E5:F1:7E:CF:31:E8:01:56:29:80:86:48
Authority key identifier: 76:34:AD:86:65:6E:FE:6C:45:E4:EF:99:8F:94:B6:97:AC:39:BE:F1
Certificate issuer:       /CN=A91B23D9/serialNumber=7634AD86656EFE6C45E4EF998F94B697AC39BEF1
Certificate serial:       E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djSthmVu_mxF5O-Zj5S2l6w5vvE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft
Manifest number:          DC
Signing time:             Sun 01 Mar 2026 07:43:49 +0000
Manifest this update:     Sun 01 Mar 2026 07:43:48 +0000
Manifest next update:     Sun 08 Mar 2026 07:43:48 +0000
Files and hashes:         1: djSthmVu_mxF5O-Zj5S2l6w5vvE.crl (hash: +8XzopKLDA3pFFo01u+RW+XwW23zBPzwb27IVk5dFMA=)
                          2: 5FF7DA8AC9DD11EF9A19CE57C4F9AE02.roa (hash: TL80adnm/i3PbHLaxDEvwNYLXW0rPwiWujRMcNTrWK0=)
                          3: 7BC585BEC9DD11EF98B1E263C4F9AE02.roa (hash: 4O9H8tsX5WZHjYASy40Ypthbv71WFYxBjR18CKAoahg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.crl
                          rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djSthmVu_mxF5O-Zj5S2l6w5vvE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:43:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 224 (0xe0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B23D9, serialNumber=7634AD86656EFE6C45E4EF998F94B697AC39BEF1
        Validity
            Not Before: Mar  1 07:43:48 2026 GMT
            Not After : Mar  8 07:43:48 2026 GMT
        Subject: CN=69a3ee35-bafb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c4:9d:4e:f5:52:e6:97:80:65:23:80:9b:37:
                    79:15:04:b2:13:b7:d5:72:97:7e:ba:d2:76:4f:3a:
                    db:bc:bc:9e:f9:83:f6:2f:a4:5c:01:ee:3c:67:3b:
                    4f:3d:93:36:f8:1e:83:e8:5e:64:c1:69:e5:c0:5d:
                    59:ec:fa:28:2c:3a:be:72:95:3a:1f:e5:61:fb:21:
                    6a:7d:02:11:96:d3:b4:1d:ea:8b:3a:d4:ca:52:16:
                    10:84:21:fc:9f:08:cd:7d:1e:0a:d0:57:ad:54:b4:
                    07:10:bf:0b:c4:13:2d:ab:da:5b:a3:fb:df:68:e5:
                    48:f9:5f:3d:d7:5a:aa:83:82:2b:d3:cb:6e:36:ad:
                    64:44:b6:b5:95:70:e8:21:dc:f2:cc:3d:7c:8d:31:
                    b4:13:6e:02:21:6a:e8:a6:f8:05:34:9a:ad:b6:0c:
                    83:bc:35:32:f4:64:f6:39:1d:fb:72:48:96:7d:45:
                    75:33:f7:cd:f0:2a:df:9f:ca:e2:d8:cc:33:06:3f:
                    3d:59:a2:62:73:23:3a:d7:5b:f6:0a:c5:b5:83:79:
                    1c:db:51:cb:09:bd:dd:0c:af:cb:8d:cc:0c:c8:9d:
                    44:8f:44:62:bf:ae:b7:4e:15:de:e1:67:7d:e1:e0:
                    07:8a:38:99:cf:4e:1d:13:dc:52:8d:7c:5a:19:7c:
                    5c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:45:3B:92:4F:2F:EC:A6:E5:F1:7E:CF:31:E8:01:56:29:80:86:48
            X509v3 Authority Key Identifier:
                keyid:76:34:AD:86:65:6E:FE:6C:45:E4:EF:99:8F:94:B6:97:AC:39:BE:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djSthmVu_mxF5O-Zj5S2l6w5vvE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:93:d7:31:e4:f1:d3:dd:3e:18:24:34:eb:25:50:cd:67:87:
         29:c4:53:e4:38:ce:59:8f:65:43:a6:63:56:bd:3d:6b:d7:22:
         94:6b:6d:29:f5:30:8c:ed:ff:f4:c9:83:5a:e8:6c:5d:6f:60:
         27:05:dc:6d:95:2f:64:f6:f9:7c:bd:3f:66:97:25:e2:4d:ca:
         b9:34:58:fb:fa:9e:00:e7:b4:91:10:ab:3c:ae:87:e2:fe:7b:
         0d:69:e1:73:84:19:d0:e1:ad:ec:29:c9:87:b3:d1:5d:94:63:
         86:82:aa:b5:e6:86:6a:1c:5d:0f:69:23:b7:8a:d8:71:37:fc:
         0e:d3:e6:f0:91:a4:0d:2d:8e:8e:8a:97:b2:c1:ac:0e:66:2c:
         39:e2:a4:76:ba:9d:94:b3:f7:92:af:89:91:bb:5c:c8:a4:ed:
         33:0a:b9:18:19:01:d2:64:c3:13:07:6b:9c:15:a2:26:64:2f:
         95:34:8a:aa:72:ca:0e:d6:b5:fa:48:7c:e5:de:4b:e6:fb:90:
         24:27:fe:f0:bb:1a:39:5c:31:b1:f1:29:90:38:9d:39:87:15:
         0c:38:ea:14:43:67:3b:d9:22:35:d8:fd:2b:43:d2:e7:93:1d:
         23:0f:e5:1a:0a:8d:2c:df:c7:71:80:d4:a0:31:1c:b8:c8:7d:
         5b:f2:08:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:39:14 2026 by rpki-client