Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.mft
File:                     DWjbrWAPi9kLNVuY9LI4-56aV_o.mft (raw, json)
Hash identifier:          XiEqLY7ulcumKUlMZKnn/+iok8gn3vUZ60gCbzVohdM=
Subject key identifier:   1D:42:7D:53:65:0A:F1:AD:2F:BB:6D:16:79:B5:BE:52:5E:60:3A:45
Authority key identifier: 0D:68:DB:AD:60:0F:8B:D9:0B:35:5B:98:F4:B2:38:FB:9E:9A:57:FA
Certificate issuer:       /CN=A91DBF0D/serialNumber=0D68DBAD600F8BD90B355B98F4B238FB9E9A57FA
Certificate serial:       08E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWjbrWAPi9kLNVuY9LI4-56aV_o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.mft
Manifest number:          08DE
Signing time:             Sat 28 Feb 2026 20:42:12 +0000
Manifest this update:     Sat 28 Feb 2026 20:42:12 +0000
Manifest next update:     Sat 07 Mar 2026 20:42:12 +0000
Files and hashes:         1: DWjbrWAPi9kLNVuY9LI4-56aV_o.crl (hash: M5k0giEQ4F1n6i2wtGbZfv0lyVr0wKYHtngTwMUS/Vg=)
                          2: 9D664600CB1211EAACC0E528C4F9AE02.roa (hash: UoilLNu3ETB9DmYNTcuXP1NIaDKZxQjUXn9bZTv+2gY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.crl
                          rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWjbrWAPi9kLNVuY9LI4-56aV_o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 20:42:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2280 (0x8e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DBF0D, serialNumber=0D68DBAD600F8BD90B355B98F4B238FB9E9A57FA
        Validity
            Not Before: Feb 28 20:42:12 2026 GMT
            Not After : Mar  7 20:42:12 2026 GMT
        Subject: CN=69a35324-14c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bf:44:99:92:af:86:ec:f0:ad:39:52:6f:7f:
                    f9:5c:7f:fa:a6:8b:a5:4c:6d:87:1a:f7:11:ca:b1:
                    7a:23:d9:4e:f2:10:c0:7b:c9:e7:20:ea:13:8a:e8:
                    fe:e4:79:83:b8:36:ea:2f:87:1f:03:f3:6f:e6:5a:
                    04:bc:b3:19:a9:d6:f2:c4:ef:72:1f:b5:4a:f9:f2:
                    8e:44:98:b3:44:1a:9b:67:04:97:0e:09:e7:19:55:
                    6c:a8:ea:40:09:3f:3d:ae:0a:f4:3a:ca:ad:22:42:
                    f1:e9:a9:de:6c:b1:de:93:25:e3:fc:65:ff:f8:99:
                    ab:c4:9d:dc:ab:cc:0f:a7:be:88:bf:f4:11:90:3e:
                    b4:85:92:8c:7f:68:fb:00:90:79:0a:0f:58:2b:77:
                    ed:fb:d2:2a:3a:76:d1:f5:e3:2b:c9:8e:02:c1:2e:
                    b1:67:3f:28:20:af:7c:ee:45:00:95:6f:46:d4:2c:
                    44:b7:96:85:31:bd:31:78:91:bd:25:f7:b7:39:08:
                    4c:92:be:d5:12:be:3d:dd:da:8d:b5:31:28:34:47:
                    f7:b7:00:bb:1e:88:9c:ef:0c:ff:c3:b0:35:32:70:
                    59:54:ee:b8:f8:6c:2b:7d:39:24:82:da:9b:62:26:
                    ce:ff:db:10:26:40:f3:2b:56:ec:ef:c5:ae:f5:2f:
                    04:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:42:7D:53:65:0A:F1:AD:2F:BB:6D:16:79:B5:BE:52:5E:60:3A:45
            X509v3 Authority Key Identifier:
                keyid:0D:68:DB:AD:60:0F:8B:D9:0B:35:5B:98:F4:B2:38:FB:9E:9A:57:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWjbrWAPi9kLNVuY9LI4-56aV_o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:1f:d0:bc:42:9c:6e:2f:f2:68:b9:fc:3c:74:a5:20:a8:c1:
         01:d0:8b:1f:2b:dd:dc:d5:ae:31:15:9e:65:6b:e6:e1:80:d5:
         8e:d9:f1:0b:20:5f:72:8c:a2:48:e1:5f:d4:fe:68:ad:c5:51:
         0b:c3:d7:27:64:fd:77:19:da:5d:da:97:80:0d:f8:3c:dd:97:
         f5:89:c0:b3:9a:cf:cf:34:81:d2:47:65:d4:d1:d0:56:49:ca:
         35:ab:21:0b:de:96:54:63:96:10:2d:1f:44:ab:17:7c:d5:d0:
         cc:9e:68:ab:48:d6:eb:af:b8:14:b6:97:b8:f0:95:43:03:d7:
         cd:f8:8a:d6:7e:ee:ea:6d:1d:85:18:4e:4b:f9:c9:db:f3:cf:
         af:25:7e:12:28:80:22:fb:2c:7c:c1:c9:64:91:61:5b:63:04:
         50:8b:ac:57:f1:e1:0d:06:59:07:82:a2:51:71:a6:de:2a:3f:
         75:f4:71:81:f3:15:7b:81:02:9b:a1:b6:e4:13:c8:c5:a3:41:
         c0:a6:62:d9:ec:8a:42:57:d5:dd:5d:07:fa:49:16:d8:d2:64:
         a3:4d:30:b8:29:10:55:8d:b7:da:31:c1:4f:f3:ec:d9:59:78:
         96:82:4c:c9:95:60:7c:a9:fe:90:ad:a2:6a:35:0b:b6:23:31:
         f9:34:56:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:58:09 2026 by rpki-client