Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.mft
File:                     dmH1l-po7_TJKXNjm7Z11_A5CXE.mft (raw, json)
Hash identifier:          4q0vfDexu36mp31WmaOC8SFDSGW8H7a7Dm6b5VYoGO8=
Subject key identifier:   C6:D6:E8:31:52:5A:5D:D9:30:8E:7E:B0:FA:F6:37:76:F1:91:9A:AC
Authority key identifier: 76:61:F5:97:EA:68:EF:F4:C9:29:73:63:9B:B6:75:D7:F0:39:09:71
Certificate issuer:       /CN=A91EA176/serialNumber=7661F597EA68EFF4C92973639BB675D7F0390971
Certificate serial:       06B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmH1l-po7_TJKXNjm7Z11_A5CXE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.mft
Manifest number:          069F
Signing time:             Thu 16 Apr 2026 22:23:14 +0000
Manifest this update:     Thu 16 Apr 2026 22:23:13 +0000
Manifest next update:     Thu 23 Apr 2026 22:23:13 +0000
Files and hashes:         1: dmH1l-po7_TJKXNjm7Z11_A5CXE.crl (hash: eV49q/zXOO2rKWgPqmBw0MZUoutHEBskpiY1SMqMD8Y=)
                          2: 6595CE9CB29011EBBBF4F548C4F9AE02.roa (hash: qSB4ftjX3kA4tLaGQ98+0+IxSSCm+dtpWVZIBrMu7h8=)
                          3: 10123D12E34E11ECB9CB283EC4F9AE02.roa (hash: 8aY/L8nAVzgyjTW/6jXj10GkNKuhhpPDhGncvfwb/Bc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.crl
                          rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmH1l-po7_TJKXNjm7Z11_A5CXE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1716 (0x6b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA176, serialNumber=7661F597EA68EFF4C92973639BB675D7F0390971
        Validity
            Not Before: Apr 16 22:23:13 2026 GMT
            Not After : Apr 23 22:23:13 2026 GMT
        Subject: CN=69e16152-068a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:bd:50:3e:c5:83:09:f2:b6:aa:cf:aa:24:ed:
                    ba:09:95:38:ef:9f:c8:99:29:ab:06:e3:56:4a:f3:
                    c5:58:01:ca:e5:fc:42:a4:27:a9:7a:37:8a:46:54:
                    2b:1a:77:e9:c9:b8:19:7a:11:a6:11:5c:bc:06:f9:
                    6e:07:4d:8e:97:31:17:da:f6:bf:5b:da:a5:41:7b:
                    2b:a0:37:d8:78:1c:bd:18:b4:b3:8a:7a:7d:aa:ee:
                    b9:77:43:cd:91:23:d3:3c:33:23:5e:c5:76:47:df:
                    00:2b:df:80:e9:21:d4:ae:04:e4:14:58:64:21:b7:
                    92:3e:09:3d:46:38:cf:6e:d4:bf:41:2e:f8:1d:f2:
                    c8:ed:1e:df:e3:4a:2b:c8:f1:91:1b:d2:93:e6:43:
                    8b:42:18:d6:ed:95:44:f2:49:22:11:4a:26:b8:d7:
                    ea:bd:6c:e4:04:1d:95:f4:7c:e3:aa:1f:5b:a2:80:
                    fa:d1:bf:2a:e1:d2:57:d0:ae:e4:2e:e6:b8:16:a8:
                    32:b7:b9:3b:a4:14:95:10:f4:c3:cf:cf:2b:f2:fd:
                    5d:a0:a4:8c:6d:9d:d0:cc:ee:69:7c:ac:d0:6e:a9:
                    95:14:72:a7:9c:ff:28:3e:f1:a7:e5:45:88:d4:f1:
                    19:90:2b:bc:93:4a:d0:67:81:fc:10:03:23:d0:f3:
                    67:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:D6:E8:31:52:5A:5D:D9:30:8E:7E:B0:FA:F6:37:76:F1:91:9A:AC
            X509v3 Authority Key Identifier:
                keyid:76:61:F5:97:EA:68:EF:F4:C9:29:73:63:9B:B6:75:D7:F0:39:09:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmH1l-po7_TJKXNjm7Z11_A5CXE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:f9:e3:98:1e:58:5a:21:73:7c:bd:85:dd:e4:86:03:68:b3:
         47:f6:aa:d0:68:1c:9c:a7:c4:52:0b:ec:ec:dc:e3:7d:92:5e:
         a1:90:c9:7d:17:7c:73:45:19:aa:82:06:06:e3:0d:3a:43:51:
         77:48:1f:45:86:24:cb:1a:20:ca:e5:f0:cf:5e:c8:5a:c2:4c:
         25:8e:70:ae:32:43:12:8a:6a:ba:ba:90:69:5a:16:13:79:c5:
         50:dd:fb:69:82:fc:c2:4a:04:43:f2:f8:eb:5a:47:a0:6a:9d:
         17:65:ba:4a:ec:09:ad:c3:d8:10:06:32:84:46:a0:a0:db:ff:
         20:4d:fc:ac:cd:b5:cc:05:60:ea:31:67:12:c4:b8:36:95:33:
         c6:d8:57:b7:22:25:76:6a:55:c3:6d:7d:d0:17:11:a9:9c:5d:
         66:17:a7:0b:3a:24:a4:d3:3e:ff:ea:65:2d:d7:35:3a:02:d2:
         8f:14:f9:38:06:90:ed:1c:eb:ff:89:a6:ec:a0:17:a1:19:ae:
         76:1d:d0:7d:2e:06:f0:f0:1b:1f:bd:7f:e5:d5:ec:8a:d9:ae:
         a1:75:1f:86:1f:da:db:ff:04:e8:86:f1:db:75:22:fa:af:9e:
         36:45:b2:d8:ed:4a:67:26:0c:49:b1:28:d1:83:d5:ca:0c:3d:
         45:28:a2:e7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBrQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUExNzYxMTAvBgNVBAUTKDc2NjFGNTk3RUE2OEVGRjRDOTI5NzM2MzlCQjY3NUQ3
RjAzOTA5NzEwHhcNMjYwNDE2MjIyMzEzWhcNMjYwNDIzMjIyMzEzWjAYMRYwFAYD
VQQDEw02OWUxNjE1Mi0wNjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApr1QPsWDCfK2qs+qJO26CZU475/ImSmrBuNWSvPFWAHK5fxCpCepejeKRlQr
GnfpybgZehGmEVy8BvluB02OlzEX2va/W9qlQXsroDfYeBy9GLSzinp9qu65d0PN
kSPTPDMjXsV2R98AK9+A6SHUrgTkFFhkIbeSPgk9RjjPbtS/QS74HfLI7R7f40or
yPGRG9KT5kOLQhjW7ZVE8kkiEUomuNfqvWzkBB2V9Hzjqh9booD60b8q4dJX0K7k
Lua4Fqgyt7k7pBSVEPTDz88r8v1doKSMbZ3QzO5pfKzQbqmVFHKnnP8oPvGn5UWI
1PEZkCu8k0rQZ4H8EAMj0PNnEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMbW6DFS
Wl3ZMI5+sPr2N3bxkZqsMB8GA1UdIwQYMBaAFHZh9ZfqaO/0ySlzY5u2ddfwOQlx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTE3Ni9BREQzQUVDRUIy
OEUxMUVCOTREMjE4NDdDNEY5QUUwMi9kbUgxbC1wbzdfVEpLWE5qbTdaMTFfQTVD
WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RtSDFsLXBvN19USktYTmptN1oxMV9BNUNYRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QTE3Ni9BREQzQUVDRUIyOEUxMUVCOTREMjE4NDdDNEY5QUUwMi9kbUgxbC1wbzdf
VEpLWE5qbTdaMTFfQTVDWEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlfnjmB5YWiFzfL2F3eSGA2izR/aq0GgcnKfEUgvs7NzjfZJeoZDJfRd8c0UZ
qoIGBuMNOkNRd0gfRYYkyxogyuXwz17IWsJMJY5wrjJDEopqurqQaVoWE3nFUN37
aYL8wkoEQ/L461pHoGqdF2W6SuwJrcPYEAYyhEagoNv/IE38rM21zAVg6jFnEsS4
NpUzxthXtyIldmpVw2190BcRqZxdZhenCzokpNM+/+plLdc1OgLSjxT5OAaQ7Rzr
/4mm7KAXoRmudh3QfS4G8PAbH71/5dXsitmuoXUfhh/a2/8E6Ibx23Ui+q+eNkWy
2O1KZyYMSbEo0YPVygw9RSii5w==
-----END CERTIFICATE-----
Generated at Sat Apr 18 09:15:13 2026 by rpki-client