Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.mft
File:                     DWjbrWAPi9kLNVuY9LI4-56aV_o.mft (raw, json)
Hash identifier:          bhzcSj+UtXX5p9cj9Ol871lGodmF/1I5sm5EimLn8qc=
Subject key identifier:   DA:86:95:A2:13:79:9D:65:C3:43:9F:30:46:EF:5B:93:A7:D8:EF:A1
Authority key identifier: 0D:68:DB:AD:60:0F:8B:D9:0B:35:5B:98:F4:B2:38:FB:9E:9A:57:FA
Certificate issuer:       /CN=A91DBF0D/serialNumber=0D68DBAD600F8BD90B355B98F4B238FB9E9A57FA
Certificate serial:       0904
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWjbrWAPi9kLNVuY9LI4-56aV_o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.mft
Manifest number:          08F8
Signing time:             Thu 16 Apr 2026 20:14:22 +0000
Manifest this update:     Thu 16 Apr 2026 20:14:21 +0000
Manifest next update:     Thu 23 Apr 2026 20:14:21 +0000
Files and hashes:         1: DWjbrWAPi9kLNVuY9LI4-56aV_o.crl (hash: QAU1VHOszGGQbN1Wn7C8WX9uCsniaG/87OhHoMnNp5c=)
                          2: 9D664600CB1211EAACC0E528C4F9AE02.roa (hash: A/vW/8y1/8Csuv1WZEdk6lJbCOT0BwYWD575nFNCBMU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.crl
                          rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWjbrWAPi9kLNVuY9LI4-56aV_o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:14:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2308 (0x904)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DBF0D, serialNumber=0D68DBAD600F8BD90B355B98F4B238FB9E9A57FA
        Validity
            Not Before: Apr 16 20:14:21 2026 GMT
            Not After : Apr 23 20:14:21 2026 GMT
        Subject: CN=69e1431e-a89a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:85:c1:4e:b8:5e:dd:2d:39:5b:75:0d:06:29:
                    dc:04:c2:81:ab:9d:24:96:3e:ac:67:1e:7f:7d:e2:
                    94:0b:b7:cb:ba:61:35:e9:ea:a1:1d:e2:ac:55:23:
                    1b:82:1e:bf:b8:87:8d:ba:78:d7:77:bc:9a:e4:76:
                    10:94:d5:0e:a0:2e:29:8a:e8:0e:f5:50:27:68:16:
                    24:3b:e0:b8:ef:15:1f:27:28:1b:7e:cd:08:b8:b1:
                    55:0d:b5:a2:23:6f:83:c1:3a:09:72:83:53:b3:13:
                    4c:f8:40:56:6d:0a:37:0b:29:b8:0c:bd:c2:c1:57:
                    63:fe:47:2b:c1:2a:1e:50:6a:9b:c6:03:6b:51:fb:
                    f1:89:12:eb:ce:68:61:49:82:dc:2a:8a:fd:fd:2b:
                    5a:0a:04:76:79:88:44:46:71:b9:80:fa:b0:d9:95:
                    b5:c3:cc:5c:31:7b:a7:70:a6:ae:9b:2e:c4:1c:37:
                    5e:74:f2:5f:58:2d:74:01:8c:85:d9:e6:6a:b4:af:
                    a5:59:fd:5f:88:04:7f:9f:c3:65:38:6e:31:ff:2a:
                    11:9a:73:5d:b0:25:6a:be:4c:8a:8c:ab:6e:e9:cd:
                    7c:31:71:3d:a8:a0:1d:56:81:03:cc:63:86:9f:9b:
                    2f:18:76:94:5d:07:b0:45:27:3d:79:10:f1:4e:b4:
                    4e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:86:95:A2:13:79:9D:65:C3:43:9F:30:46:EF:5B:93:A7:D8:EF:A1
            X509v3 Authority Key Identifier:
                keyid:0D:68:DB:AD:60:0F:8B:D9:0B:35:5B:98:F4:B2:38:FB:9E:9A:57:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWjbrWAPi9kLNVuY9LI4-56aV_o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:38:b6:3d:fb:c5:b0:09:3b:07:52:68:6c:6b:cd:9f:75:d5:
         25:3e:5d:3c:ac:94:c2:0d:0d:ca:d1:7c:69:bb:99:3d:8c:db:
         83:30:91:2b:ee:a5:33:c4:d3:a2:23:90:f7:2b:0a:27:33:f0:
         42:bd:c6:3f:1d:a8:bc:da:8c:98:ab:52:2f:b8:0a:de:ad:05:
         1c:a2:75:bb:85:3e:02:87:9c:78:6b:17:3a:79:69:41:46:d7:
         78:bd:c5:59:3e:b1:63:01:f4:77:de:0e:9a:26:30:3b:b4:88:
         46:04:f2:58:57:80:23:e6:9e:b4:21:9a:55:7d:c2:61:f8:91:
         f4:c0:ad:a0:24:65:a5:fc:49:87:3e:ae:61:8a:4a:82:02:ad:
         cb:04:e0:4d:ca:cf:bd:45:fa:e9:d4:e8:1c:18:53:24:8e:c5:
         5b:fa:80:7d:3b:91:ac:74:7a:67:f6:df:ed:79:f3:30:8e:63:
         c7:68:e3:4c:a2:81:f7:a0:83:2c:4e:ea:1a:a4:3b:26:66:56:
         b5:2d:5e:e9:29:cb:d3:8e:6e:6c:7a:ea:ad:9d:5a:8b:17:43:
         5c:9d:93:01:07:84:95:27:1a:f0:b4:a2:28:9f:fa:de:ab:55:
         81:96:88:49:18:31:28:92:bf:07:6f:b1:ec:57:91:72:e7:12:
         cb:b1:f4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:48:58 2026 by rpki-client