Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91164D3/155048EA338911EF99FD1C27C4F9AE02/mWsZb8o8chhx7p4UE5Mri1DtCas.mft
File:                     mWsZb8o8chhx7p4UE5Mri1DtCas.mft (raw, json)
Hash identifier:          FWOPTWWyrywpI19O2CiAG8mEOM+ar+7ihtq7FhDJTYI=
Subject key identifier:   65:B3:81:DF:7E:63:1B:F9:21:69:62:CA:62:AE:CD:EA:5E:5C:90:F3
Authority key identifier: 99:6B:19:6F:CA:3C:72:18:71:EE:9E:14:13:93:2B:8B:50:ED:09:AB
Certificate issuer:       /CN=A91164D3/serialNumber=996B196FCA3C721871EE9E1413932B8B50ED09AB
Certificate serial:       0156
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWsZb8o8chhx7p4UE5Mri1DtCas.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91164D3/155048EA338911EF99FD1C27C4F9AE02/mWsZb8o8chhx7p4UE5Mri1DtCas.mft
Manifest number:          0153
Signing time:             Fri 17 Apr 2026 04:44:52 +0000
Manifest this update:     Fri 17 Apr 2026 04:44:51 +0000
Manifest next update:     Fri 24 Apr 2026 04:44:51 +0000
Files and hashes:         1: mWsZb8o8chhx7p4UE5Mri1DtCas.crl (hash: 4pu9ZIIrIIKjZxUaBDlRvi9quo1b2hzikWHceYuwdRY=)
                          2: 934F8250338A11EFB9C7A738C4F9AE02.roa (hash: YzfDTQT2HU5tWjIevZns8MtBtBlyBZzvBj6T470nXi8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91164D3/155048EA338911EF99FD1C27C4F9AE02/mWsZb8o8chhx7p4UE5Mri1DtCas.crl
                          rsync://rpki.apnic.net/member_repository/A91164D3/155048EA338911EF99FD1C27C4F9AE02/mWsZb8o8chhx7p4UE5Mri1DtCas.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWsZb8o8chhx7p4UE5Mri1DtCas.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:44:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 342 (0x156)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91164D3, serialNumber=996B196FCA3C721871EE9E1413932B8B50ED09AB
        Validity
            Not Before: Apr 17 04:44:51 2026 GMT
            Not After : Apr 24 04:44:51 2026 GMT
        Subject: CN=69e1bac4-f9eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:de:2b:67:bf:25:4d:4e:5a:08:d3:da:ab:f8:
                    46:d0:db:c5:a3:c1:b3:63:8b:52:02:6f:dc:89:b5:
                    f9:95:fb:bb:a4:ba:be:a4:a5:81:38:e9:4d:67:e4:
                    c7:4c:27:ad:03:e6:63:18:65:c6:08:e3:d0:f1:30:
                    e5:64:1c:4f:04:dd:42:40:99:0d:26:7d:50:0d:83:
                    f8:8e:12:20:9e:2d:c9:e4:bf:4a:be:65:62:e7:75:
                    06:a6:82:e4:24:1d:b9:ba:4a:6a:cc:4f:93:98:95:
                    84:91:6c:03:24:51:c1:c8:24:1f:87:85:02:89:cb:
                    56:47:11:07:72:4f:37:4a:cc:cd:98:d6:96:2e:73:
                    d4:27:a3:ca:00:dd:28:5a:07:96:20:f1:87:12:9c:
                    46:77:66:a5:5d:d9:ad:ab:13:dd:cf:e2:8c:39:ec:
                    d4:c0:d8:e6:13:0d:d5:45:16:b8:74:6b:8b:06:4f:
                    d7:e8:31:26:f6:94:7f:52:ba:5d:25:94:5c:1f:88:
                    fa:3c:54:3e:65:12:1d:2b:9b:85:4d:9a:39:e4:9f:
                    f4:6f:a3:ba:98:be:25:0e:27:b0:5a:5b:3a:8c:60:
                    8b:f2:ae:ee:1b:03:a4:92:73:bf:76:06:3c:57:9d:
                    f7:d4:2f:88:d9:32:d8:37:79:43:9d:31:ce:e4:a5:
                    54:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:B3:81:DF:7E:63:1B:F9:21:69:62:CA:62:AE:CD:EA:5E:5C:90:F3
            X509v3 Authority Key Identifier:
                keyid:99:6B:19:6F:CA:3C:72:18:71:EE:9E:14:13:93:2B:8B:50:ED:09:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91164D3/155048EA338911EF99FD1C27C4F9AE02/mWsZb8o8chhx7p4UE5Mri1DtCas.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWsZb8o8chhx7p4UE5Mri1DtCas.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91164D3/155048EA338911EF99FD1C27C4F9AE02/mWsZb8o8chhx7p4UE5Mri1DtCas.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:ef:78:03:aa:89:6a:8b:97:3f:6f:c2:4c:9e:c0:73:f7:f3:
         3e:24:dd:65:9b:0e:de:1f:bd:69:9d:0c:b3:db:e9:96:b8:d0:
         44:26:6e:b2:d5:cf:89:9d:2e:95:c4:cb:13:7a:9b:5f:a0:f2:
         c0:c6:a6:67:4a:61:f8:0b:55:4a:05:90:aa:a2:8c:98:2e:f5:
         e2:07:50:da:2f:24:92:2d:ac:63:bf:2d:f8:bf:87:0f:8f:62:
         54:53:1e:68:fe:83:38:fa:aa:9f:de:6a:48:46:8f:50:08:a5:
         32:34:79:83:46:c1:c3:6c:26:0a:da:d2:7b:28:02:e4:a9:89:
         1a:fa:2f:67:6e:a0:96:f6:79:df:0d:5c:e5:d2:76:f1:5c:1d:
         15:fc:0b:dc:08:72:c4:91:7e:c5:35:dd:87:d9:b7:dc:01:0d:
         dc:3b:2b:56:26:0c:17:e9:3d:28:59:aa:fb:0b:dd:e9:e9:ac:
         ce:82:50:ae:5b:2e:6f:1c:ea:60:a8:4a:ab:cf:f0:ad:36:4c:
         15:33:0a:b3:fc:6e:13:32:e1:28:6d:b7:0a:72:1a:a6:82:8d:
         01:d8:42:1b:e0:cd:71:69:66:d8:a4:40:22:29:13:0a:4d:75:
         f1:cf:c5:60:83:48:74:f4:be:3b:f9:2e:28:e6:35:91:5b:92:
         0c:90:ea:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:16:17 2026 by rpki-client