Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft
File:                     cwR3XBzjhaykBAWGTqm5q_7ekbM.mft (raw, json)
Hash identifier:          Vt7Xa2Sevgb0nTrOxmJ4z5iSxZYCAkizXyReLPDTK6Q=
Subject key identifier:   1E:1C:BC:55:E3:4A:5E:29:B1:3C:A7:93:5E:9D:45:6E:30:34:AD:E1
Authority key identifier: 73:04:77:5C:1C:E3:85:AC:A4:04:05:86:4E:A9:B9:AB:FE:DE:91:B3
Certificate issuer:       /CN=A911580A/serialNumber=7304775C1CE385ACA40405864EA9B9ABFEDE91B3
Certificate serial:       03B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft
Manifest number:          03AE
Signing time:             Fri 17 Apr 2026 00:35:58 +0000
Manifest this update:     Fri 17 Apr 2026 00:35:58 +0000
Manifest next update:     Fri 24 Apr 2026 00:35:58 +0000
Files and hashes:         1: cwR3XBzjhaykBAWGTqm5q_7ekbM.crl (hash: 7DVDkjjh+7mxQZY8TzZAUHKS7XO1HYYimVtMeSaDgEg=)
                          2: BC6E83E0D4E411EC976A7E55C4F9AE02.roa (hash: nomqtva7ggVLFevc3wGgCUafYyn97H4GgqbrGIpWBXM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.crl
                          rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:35:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 949 (0x3b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911580A, serialNumber=7304775C1CE385ACA40405864EA9B9ABFEDE91B3
        Validity
            Not Before: Apr 17 00:35:58 2026 GMT
            Not After : Apr 24 00:35:58 2026 GMT
        Subject: CN=69e1806e-3b18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:29:f5:04:58:11:2c:00:68:bb:7d:1c:d5:7d:
                    90:56:e7:63:e9:22:9f:21:24:78:16:83:30:0e:6a:
                    a6:5d:17:61:13:83:6f:78:42:51:7b:4d:46:0b:bc:
                    34:ed:1d:2b:a5:ab:2d:fd:c7:46:8e:eb:40:41:06:
                    25:37:fd:d2:96:f7:62:74:9c:32:56:bb:45:d5:f5:
                    7a:3e:b3:19:a6:82:53:e3:bb:68:71:32:b5:76:53:
                    aa:13:d8:bf:6c:52:f8:5a:df:e5:63:db:3f:15:be:
                    3f:a6:81:42:3a:14:f9:92:5b:8e:47:60:e8:4f:23:
                    fc:ef:c9:f3:92:dc:59:19:e9:ba:db:73:5a:2f:95:
                    e9:24:3f:ae:06:7b:bf:53:ac:fd:00:c6:44:f2:ed:
                    0b:bb:bc:13:db:e7:76:e9:4f:3f:3f:14:0f:a5:8e:
                    86:64:34:3a:cd:1f:7b:1b:3a:ed:26:00:d9:dc:72:
                    3b:9a:16:bf:de:94:ba:9b:10:c8:25:1e:9f:f7:44:
                    19:58:45:91:60:31:18:21:10:18:09:90:38:9a:3a:
                    45:8e:7d:22:1a:12:be:5e:0b:cb:31:49:98:e5:80:
                    89:84:3a:fd:d2:42:75:c6:6f:de:24:a8:2c:84:02:
                    0a:36:dc:75:3e:88:68:af:3e:c0:12:19:2d:8d:7a:
                    c4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:1C:BC:55:E3:4A:5E:29:B1:3C:A7:93:5E:9D:45:6E:30:34:AD:E1
            X509v3 Authority Key Identifier:
                keyid:73:04:77:5C:1C:E3:85:AC:A4:04:05:86:4E:A9:B9:AB:FE:DE:91:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:24:ac:eb:a5:db:94:7b:9c:cb:fa:13:00:75:b5:62:0f:da:
         06:32:55:31:d8:3e:81:98:69:10:82:24:60:20:44:67:b2:57:
         f2:41:6f:ca:71:f7:14:7c:92:30:2d:d9:47:13:3c:9f:1b:c1:
         ff:4c:78:49:4c:05:d2:eb:be:e9:f3:c0:4f:28:16:af:76:b8:
         2a:96:c2:ec:d0:d2:ad:b6:19:a8:5f:0d:21:fe:33:18:85:95:
         95:36:63:80:bb:73:73:98:9d:ec:2d:bc:52:6d:5d:2a:bf:d1:
         27:40:99:dc:c9:34:7d:6a:02:65:ae:a9:4e:b5:b8:95:9f:2f:
         47:44:3b:0a:ba:f4:e8:8b:86:13:35:22:95:d9:64:d7:b4:47:
         e5:fc:bd:04:0a:b5:b6:15:a1:74:ba:4c:7f:f2:06:ce:d4:40:
         63:28:c5:0e:f4:e7:d4:d6:dd:97:52:52:fb:d2:d0:d4:53:ee:
         da:bc:f1:26:b2:2a:8c:aa:7e:01:ad:08:12:e9:09:07:aa:ce:
         77:d8:a3:ed:63:e1:2b:fe:c8:a2:2a:3f:54:20:5c:cc:f2:c9:
         f0:62:52:ee:bd:96:bb:a5:0b:2e:6a:53:ef:62:4d:d2:a3:c8:
         ba:3e:63:69:6a:5f:fe:3f:e3:27:f6:6e:27:df:08:50:d6:1c:
         bd:61:8d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:54:06 2026 by rpki-client