Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5E1C/6475893A879311F0B5786346C4F9AE02/dgeNNhm3wq-92jOrU2PuX-16hg0.mft
File:                     dgeNNhm3wq-92jOrU2PuX-16hg0.mft (raw, json)
Hash identifier:          ghjMVx9KQTdJu9Dt5Yx/niv+8Q2pIIL0ujhLUdx4hPg=
Subject key identifier:   C4:8F:FA:77:74:ED:1A:1B:69:29:37:47:E3:91:BF:FC:93:6D:78:24
Authority key identifier: 76:07:8D:36:19:B7:C2:AF:BD:DA:33:AB:53:63:EE:5F:ED:7A:86:0D
Certificate issuer:       /CN=A91C5E1C/serialNumber=76078D3619B7C2AFBDDA33AB5363EE5FED7A860D
Certificate serial:       77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dgeNNhm3wq-92jOrU2PuX-16hg0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5E1C/6475893A879311F0B5786346C4F9AE02/dgeNNhm3wq-92jOrU2PuX-16hg0.mft
Manifest number:          75
Signing time:             Fri 17 Apr 2026 07:28:23 +0000
Manifest this update:     Fri 17 Apr 2026 07:28:23 +0000
Manifest next update:     Fri 24 Apr 2026 07:28:23 +0000
Files and hashes:         1: dgeNNhm3wq-92jOrU2PuX-16hg0.crl (hash: fvqfghuAFf+0qsuVN2ltVAo3kvFuLHgl54QPPe7hv28=)
                          2: 2A3F7C6A879F11F09F9FAD48C4F9AE02.roa (hash: iC/AbxD41oNNIk1Irlt9oX4UZFYCSbc0qhTqLhLs0qY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5E1C/6475893A879311F0B5786346C4F9AE02/dgeNNhm3wq-92jOrU2PuX-16hg0.crl
                          rsync://rpki.apnic.net/member_repository/A91C5E1C/6475893A879311F0B5786346C4F9AE02/dgeNNhm3wq-92jOrU2PuX-16hg0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dgeNNhm3wq-92jOrU2PuX-16hg0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:28:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5E1C, serialNumber=76078D3619B7C2AFBDDA33AB5363EE5FED7A860D
        Validity
            Not Before: Apr 17 07:28:23 2026 GMT
            Not After : Apr 24 07:28:23 2026 GMT
        Subject: CN=69e1e117-2d11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:07:37:93:d7:10:56:11:44:e9:d3:9e:33:21:
                    2f:63:20:0c:12:03:3b:67:fb:57:60:d9:a5:57:54:
                    d9:a3:c7:89:ac:e3:32:68:2e:98:18:81:00:4b:d6:
                    97:85:d1:e4:db:29:14:89:b4:9b:1b:cb:94:56:15:
                    35:d5:7d:ba:1c:7b:24:7e:50:de:e6:48:ee:ae:55:
                    a6:27:4a:07:0c:29:83:da:b5:1b:f2:03:ad:98:7b:
                    cb:28:41:97:32:41:46:ca:f0:6b:47:bd:df:10:3c:
                    02:42:3e:6a:cd:ba:a0:93:15:ea:91:75:a8:9b:40:
                    ce:a8:7b:e7:79:67:59:9e:bf:73:10:2d:d5:f3:3a:
                    db:e1:f2:42:31:f2:91:e8:06:50:2c:65:f9:80:66:
                    75:66:e9:0f:24:a8:12:67:a6:58:bb:d6:2f:6b:97:
                    96:06:fa:7d:08:7d:4d:d6:02:4a:07:10:3f:bf:12:
                    1d:21:e7:f4:d8:3b:29:e5:90:d4:52:55:ac:9f:17:
                    6c:ee:de:4b:3c:6c:13:33:3b:1f:f3:f4:db:63:da:
                    be:6f:8e:8e:23:95:72:b0:22:f3:fb:bb:9f:e5:df:
                    76:0d:bd:52:d1:db:b9:04:e6:4b:0f:03:c0:54:f8:
                    8c:18:e0:fa:77:32:7e:ee:ea:d3:3d:5f:8f:b9:cd:
                    aa:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:8F:FA:77:74:ED:1A:1B:69:29:37:47:E3:91:BF:FC:93:6D:78:24
            X509v3 Authority Key Identifier:
                keyid:76:07:8D:36:19:B7:C2:AF:BD:DA:33:AB:53:63:EE:5F:ED:7A:86:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5E1C/6475893A879311F0B5786346C4F9AE02/dgeNNhm3wq-92jOrU2PuX-16hg0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dgeNNhm3wq-92jOrU2PuX-16hg0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5E1C/6475893A879311F0B5786346C4F9AE02/dgeNNhm3wq-92jOrU2PuX-16hg0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:46:0d:76:62:28:c2:59:a5:70:63:2e:12:0e:a3:10:a0:dd:
         94:86:df:7c:3c:53:13:3c:bc:b3:31:67:09:26:b6:80:7d:fe:
         2a:b7:e3:a7:4b:c0:fb:67:1b:e1:9a:fc:44:c8:40:bd:83:59:
         3a:c7:72:dd:ad:ed:03:7f:0f:cc:d5:55:65:21:96:47:d7:13:
         ed:71:87:43:c6:28:60:eb:0a:39:14:a1:8e:cb:20:50:92:e8:
         f1:8f:a8:b4:87:67:0d:e1:fd:60:f1:e2:a4:54:4c:28:4c:d1:
         22:39:79:e4:32:f9:86:ca:83:5b:6a:c8:b1:c3:12:24:89:72:
         1d:51:dc:d5:0f:71:a2:45:32:57:a0:b8:11:6a:6b:8a:b9:93:
         2b:96:1a:1c:f2:b9:ea:a1:f3:53:c2:43:ac:a3:28:2c:ee:76:
         9d:ae:17:18:22:33:b8:cf:98:14:a8:c5:46:ea:83:ef:e8:5b:
         4a:70:9d:3c:2c:08:cd:46:f9:87:e8:f8:15:0e:ba:79:c9:5d:
         37:70:99:ae:7b:50:29:da:9d:5b:cd:7b:f9:96:4a:75:f3:6e:
         04:05:36:a5:dc:f5:b9:4c:92:e8:e9:f3:8d:a2:c6:3a:31:33:
         61:b5:26:ec:cb:0c:93:d4:59:0f:d2:32:1b:46:a7:7c:b5:36:
         c0:c5:0a:c6
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
NUUxQzExMC8GA1UEBRMoNzYwNzhEMzYxOUI3QzJBRkJEREEzM0FCNTM2M0VFNUZF
RDdBODYwRDAeFw0yNjA0MTcwNzI4MjNaFw0yNjA0MjQwNzI4MjNaMBgxFjAUBgNV
BAMTDTY5ZTFlMTE3LTJkMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDKBzeT1xBWEUTp054zIS9jIAwSAztn+1dg2aVXVNmjx4ms4zJoLpgYgQBL1peF
0eTbKRSJtJsby5RWFTXVfboceyR+UN7mSO6uVaYnSgcMKYPatRvyA62Ye8soQZcy
QUbK8GtHvd8QPAJCPmrNuqCTFeqRdaibQM6oe+d5Z1mev3MQLdXzOtvh8kIx8pHo
BlAsZfmAZnVm6Q8kqBJnpli71i9rl5YG+n0IfU3WAkoHED+/Eh0h5/TYOynlkNRS
VayfF2zu3ks8bBMzOx/z9Ntj2r5vjo4jlXKwIvP7u5/l33YNvVLR27kE5ksPA8BU
+IwY4Pp3Mn7u6tM9X4+5zapnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUxI/6d3Tt
GhtpKTdH45G//JNteCQwHwYDVR0jBBgwFoAUdgeNNhm3wq+92jOrU2PuX+16hg0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1RTFDLzY0NzU4OTNBODc5
MzExRjBCNTc4NjM0NkM0RjlBRTAyL2RnZU5OaG0zd3EtOTJqT3JVMlB1WC0xNmhn
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZGdlTk5obTN3cS05MmpPclUyUHVYLTE2aGcwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1
RTFDLzY0NzU4OTNBODc5MzExRjBCNTc4NjM0NkM0RjlBRTAyL2RnZU5OaG0zd3Et
OTJqT3JVMlB1WC0xNmhnMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAuRg12YijCWaVwYy4SDqMQoN2Uht98PFMTPLyzMWcJJraAff4qt+OnS8D7Zxvh
mvxEyEC9g1k6x3Ldre0Dfw/M1VVlIZZH1xPtcYdDxihg6wo5FKGOyyBQkujxj6i0
h2cN4f1g8eKkVEwoTNEiOXnkMvmGyoNbasixwxIkiXIdUdzVD3GiRTJXoLgRamuK
uZMrlhoc8rnqofNTwkOsoygs7nadrhcYIjO4z5gUqMVG6oPv6FtKcJ08LAjNRvmH
6PgVDrp5yV03cJmue1Ap2p1bzXv5lkp1824EBTal3PW5TJLo6fONosY6MTNhtSbs
ywyT1FkP0jIbRqd8tTbAxQrG
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:17:49 2026 by rpki-client