Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.mft
File:                     rwLrQTxcBTF1xvy8GcaTYGPnaBE.mft (raw, json)
Hash identifier:          fAiWvOR/nxsDkYY0vAJIuebB2w2pcFBCRfbQ8LNCwfE=
Subject key identifier:   02:08:0D:B1:CB:63:D3:19:66:72:DF:D5:BB:4F:08:99:BF:38:5A:E5
Authority key identifier: AF:02:EB:41:3C:5C:05:31:75:C6:FC:BC:19:C6:93:60:63:E7:68:11
Certificate issuer:       /CN=A91174DD/serialNumber=AF02EB413C5C053175C6FCBC19C6936063E76811
Certificate serial:       34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwLrQTxcBTF1xvy8GcaTYGPnaBE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.mft
Manifest number:          32
Signing time:             Fri 17 Apr 2026 08:22:11 +0000
Manifest this update:     Fri 17 Apr 2026 08:22:10 +0000
Manifest next update:     Fri 24 Apr 2026 08:22:10 +0000
Files and hashes:         1: rwLrQTxcBTF1xvy8GcaTYGPnaBE.crl (hash: 0eRQitjNXbA4IyebrS+11yTc/1bo6gEgbqhvvh26lbQ=)
                          2: A6977620FC6911F0B9F21353506F56BC.roa (hash: 2+c+kkZNH5WFLaEH+Mtz0KAlZ3T9lg2Gax329RYsTqo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.crl
                          rsync://rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwLrQTxcBTF1xvy8GcaTYGPnaBE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:22:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91174DD, serialNumber=AF02EB413C5C053175C6FCBC19C6936063E76811
        Validity
            Not Before: Apr 17 08:22:10 2026 GMT
            Not After : Apr 24 08:22:10 2026 GMT
        Subject: CN=69e1edb3-2a3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4e:0b:44:ec:67:d3:0c:93:14:06:05:0b:64:
                    a6:2d:72:c6:3e:b2:33:28:50:b3:a5:32:07:fb:b0:
                    e3:c8:55:e6:5a:67:8c:a7:4d:9a:4b:af:cc:29:22:
                    45:c4:c2:09:b6:d9:03:9e:92:74:98:79:e3:66:ed:
                    75:7d:e4:d1:e2:55:c0:ab:a7:5e:48:ef:99:71:c2:
                    b7:e3:d1:4e:f9:fc:24:08:e6:ae:c6:17:4f:56:19:
                    01:e1:9b:bd:a5:46:f1:0d:8d:fc:54:0e:5e:57:32:
                    b7:a4:e3:d1:e8:88:5c:d9:79:ad:b5:94:e4:0c:9f:
                    c9:42:45:96:19:8e:61:fb:34:3c:15:5d:05:b8:5d:
                    7f:4d:49:e8:20:dc:14:1d:52:62:9a:11:18:2d:e7:
                    b9:d5:0a:a3:b1:38:54:d6:78:2b:3a:84:66:5f:f0:
                    9a:d1:e3:9e:e3:b7:99:c6:10:5b:5b:2f:7c:55:98:
                    71:13:5e:ba:40:6b:9d:e1:0a:89:43:f9:6f:4f:00:
                    57:2d:e5:6b:c8:73:ef:5e:9e:8b:74:69:de:3e:7d:
                    0c:6d:e6:42:8a:d3:5a:a1:a0:17:11:e4:9e:90:e5:
                    72:cc:80:af:49:14:66:d0:57:13:e4:d6:4a:a2:82:
                    77:a0:97:65:12:10:ad:52:ea:04:27:e3:64:b3:22:
                    1c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:08:0D:B1:CB:63:D3:19:66:72:DF:D5:BB:4F:08:99:BF:38:5A:E5
            X509v3 Authority Key Identifier:
                keyid:AF:02:EB:41:3C:5C:05:31:75:C6:FC:BC:19:C6:93:60:63:E7:68:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwLrQTxcBTF1xvy8GcaTYGPnaBE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:53:9a:f6:79:12:e8:94:00:ba:ae:08:cd:fb:cc:ae:67:49:
         2e:43:e0:1a:ca:da:5e:ae:fa:76:4f:81:1d:fe:5c:c0:61:97:
         17:9f:3c:1b:66:40:28:46:6a:ea:78:d4:39:66:de:3d:bb:e2:
         ee:df:ec:72:35:b7:41:4b:11:41:15:c3:3d:8c:09:3f:0a:7e:
         d6:79:c8:21:fc:91:20:80:18:19:a2:75:ce:fc:05:1f:a5:2d:
         50:7e:5c:cd:8d:cd:f0:5e:54:4e:13:a6:68:50:b7:16:35:2f:
         5a:1c:2e:f8:e6:f7:4d:00:ff:93:e6:38:59:d1:ea:5c:42:b0:
         93:b4:80:8d:f5:a5:ed:ff:ba:d0:19:2d:82:07:bc:c6:01:d2:
         e0:e2:a1:0d:00:4a:7c:68:90:35:a3:bd:d2:a8:e5:58:bd:d7:
         b7:f4:dc:22:e6:56:69:21:0f:cf:a6:d3:53:80:35:7e:79:26:
         d5:ee:50:82:8a:46:d4:2b:c2:e2:ab:c5:9f:2b:27:35:0c:ee:
         ad:5f:6b:32:61:98:89:11:24:f9:fd:e5:09:e6:4e:c8:6c:c4:
         58:ee:ed:67:5b:d4:8a:42:7b:84:34:87:6c:c0:2c:7a:e4:ec:
         8a:48:44:f1:fd:6b:a3:a0:52:a5:eb:fd:3b:e2:90:87:c2:71:
         ca:0c:66:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:01:56 2026 by rpki-client