Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.mft
File:                     pWrnLGamTmJ5yMycDv5PNjaQJ4A.mft (raw, json)
Hash identifier:          C/blonxLXhiSGsDEwxdiVMWscyAwmAkF/1d4S0VDr9Q=
Subject key identifier:   9C:07:CE:2B:A4:87:27:C2:89:57:47:A1:70:6A:DD:65:2A:E4:62:D4
Authority key identifier: A5:6A:E7:2C:66:A6:4E:62:79:C8:CC:9C:0E:FE:4F:36:36:90:27:80
Certificate issuer:       /CN=A912A471/serialNumber=A56AE72C66A64E6279C8CC9C0EFE4F3636902780
Certificate serial:       01C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWrnLGamTmJ5yMycDv5PNjaQJ4A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.mft
Manifest number:          01BE
Signing time:             Fri 17 Apr 2026 03:35:19 +0000
Manifest this update:     Fri 17 Apr 2026 03:35:18 +0000
Manifest next update:     Fri 24 Apr 2026 03:35:18 +0000
Files and hashes:         1: pWrnLGamTmJ5yMycDv5PNjaQJ4A.crl (hash: Z6e8slbmd39uWXhfy3XG3x6k43e8oOX4QiWc6dOZKMc=)
                          2: AC21E1E8924411EE96AA9544C4F9AE02.roa (hash: zEJDvN9ybbZp1LhscTj5sdCfbt2mJ3L379v4/X6XCSM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.crl
                          rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWrnLGamTmJ5yMycDv5PNjaQJ4A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:35:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 452 (0x1c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A471, serialNumber=A56AE72C66A64E6279C8CC9C0EFE4F3636902780
        Validity
            Not Before: Apr 17 03:35:18 2026 GMT
            Not After : Apr 24 03:35:18 2026 GMT
        Subject: CN=69e1aa77-bbac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8a:b2:2a:37:11:45:25:cf:5f:35:02:fd:83:
                    4b:cb:43:fd:0a:d5:03:6e:69:f9:05:bd:eb:e8:6e:
                    30:cb:f2:67:1e:cd:65:38:f5:eb:bc:b4:b3:7d:df:
                    ae:6e:fe:0a:a3:3f:45:aa:84:81:f3:9c:17:13:67:
                    6d:7d:39:e2:80:40:23:49:00:6f:2f:bf:c6:32:63:
                    84:82:c9:8b:96:2d:94:2c:37:1f:6f:d8:e5:2e:61:
                    17:ad:eb:19:07:02:83:6b:dd:ba:99:50:46:5b:c1:
                    9c:ae:1d:66:02:be:15:28:6e:01:c2:c8:37:c8:ea:
                    3b:8f:a5:5c:21:1d:d0:67:76:15:f9:6f:59:98:54:
                    92:b3:9d:e4:5f:e2:7a:43:4c:3d:8a:a0:3e:60:10:
                    e1:0c:b0:6b:67:20:b2:c4:f5:40:b8:7a:19:62:1a:
                    a1:7a:7d:fa:84:4c:a3:1b:4d:36:bf:be:fb:8b:15:
                    66:67:5a:69:c1:21:fa:f6:05:3a:29:fb:cd:12:70:
                    e1:db:f3:cd:be:69:55:f9:98:1f:ee:94:b3:69:31:
                    ee:5b:ef:34:51:64:f8:60:3f:53:b0:e9:29:74:9b:
                    ec:36:80:8e:a0:cd:67:fe:98:ac:8c:45:52:a8:bb:
                    53:9a:50:54:67:cc:79:ed:55:cb:fb:17:66:8a:c9:
                    c0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:07:CE:2B:A4:87:27:C2:89:57:47:A1:70:6A:DD:65:2A:E4:62:D4
            X509v3 Authority Key Identifier:
                keyid:A5:6A:E7:2C:66:A6:4E:62:79:C8:CC:9C:0E:FE:4F:36:36:90:27:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWrnLGamTmJ5yMycDv5PNjaQJ4A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:06:71:64:b9:dc:60:67:40:c5:c2:88:a2:57:31:86:b1:8b:
         8d:55:3e:4b:1f:4d:98:bc:de:00:44:34:ab:1f:6a:19:4e:f7:
         e0:b3:38:b1:3d:a3:c2:88:f7:98:13:86:fc:44:4b:52:29:20:
         c8:ce:83:a9:60:7b:f1:c9:b9:78:70:1a:de:c0:40:3a:04:1f:
         1c:17:36:89:4a:22:ab:95:3e:0b:01:d6:1d:c5:66:d6:ad:66:
         16:c2:46:c1:65:0b:30:35:b0:99:91:a5:fd:dd:b0:17:64:cd:
         40:48:1e:4d:28:62:c1:6c:a1:61:e1:04:72:33:09:11:57:d8:
         92:f8:f9:73:28:ad:c3:0e:7b:90:b8:7c:95:12:38:2e:a6:ed:
         4d:73:a1:8b:49:c3:30:7b:71:b9:06:27:5b:47:e8:e8:3c:0a:
         85:3a:49:43:e4:e6:c0:38:79:3a:c8:6b:e3:75:5b:54:40:e4:
         46:0f:91:18:8a:e7:79:65:96:56:f5:7f:a4:f4:ab:d2:1a:16:
         87:fc:8d:dc:ed:63:bb:2a:58:02:6a:21:4f:8f:d2:ad:aa:04:
         35:4f:d3:c7:d1:0e:c1:e8:d2:8d:60:b0:a7:c2:62:ea:47:a8:
         a7:bc:f4:07:7e:30:f6:f8:af:5c:67:d1:31:c4:07:e6:d6:60:
         57:0a:28:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:08:28 2026 by rpki-client