Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft
File:                     RSWIQffwT7Odkdo-P6u1KehSj0k.mft (raw, json)
Hash identifier:          rEziCNqxOGiBZxXHYpc/fOQU52Nof+MEtST9L7uTKKU=
Subject key identifier:   A0:54:A8:A1:3E:CE:40:F4:F8:F4:97:CE:51:91:F9:EE:F2:69:4C:25
Authority key identifier: 45:25:88:41:F7:F0:4F:B3:9D:91:DA:3E:3F:AB:B5:29:E8:52:8F:49
Certificate issuer:       /CN=A91317E5/serialNumber=45258841F7F04FB39D91DA3E3FABB529E8528F49
Certificate serial:       06CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RSWIQffwT7Odkdo-P6u1KehSj0k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft
Manifest number:          06C2
Signing time:             Thu 16 Apr 2026 22:15:56 +0000
Manifest this update:     Thu 16 Apr 2026 22:15:55 +0000
Manifest next update:     Thu 23 Apr 2026 22:15:55 +0000
Files and hashes:         1: RSWIQffwT7Odkdo-P6u1KehSj0k.crl (hash: 2TR28EQag74OgyVptRoXpq/cc5hgIFid+k4cwlw+7Mk=)
                          2: 53E7583E3D0511EF99169B21C4F9AE02.roa (hash: B5b4pHn3Q7lWdfVk+2VqlqlxqURQjUTmZj9KZGH2lHg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.crl
                          rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RSWIQffwT7Odkdo-P6u1KehSj0k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1741 (0x6cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91317E5, serialNumber=45258841F7F04FB39D91DA3E3FABB529E8528F49
        Validity
            Not Before: Apr 16 22:15:55 2026 GMT
            Not After : Apr 23 22:15:55 2026 GMT
        Subject: CN=69e15f9b-b4da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f9:a0:2a:bf:09:48:5a:f4:39:bc:24:af:3a:
                    16:3a:46:29:e5:59:5b:74:0e:c2:45:fd:82:2b:4a:
                    e7:84:f7:34:21:8c:13:b6:d1:3c:a5:ab:bc:7f:42:
                    a9:a1:d4:0d:de:10:c7:95:0c:41:3d:c0:1b:b1:60:
                    61:c1:d0:f8:9f:6d:44:21:5d:fc:49:9a:f3:63:ca:
                    ce:47:a8:fc:16:95:3b:ad:be:9d:e9:38:0a:52:75:
                    2a:e7:7b:0d:a6:ee:da:aa:b5:ad:2d:74:f8:79:72:
                    c7:fc:52:98:8e:1c:dc:4d:4e:2c:c9:49:1b:b6:62:
                    23:6f:88:91:a5:0b:e2:91:60:bd:27:ef:9f:c2:63:
                    4f:e6:de:28:a2:db:80:4d:5f:d7:bd:f1:13:76:9b:
                    b4:ea:74:69:8f:79:16:2c:3f:d5:b2:41:a6:4c:11:
                    cb:dc:79:93:2b:b2:28:12:6a:7e:d6:35:12:bc:87:
                    f1:2f:32:a3:b3:1c:3d:cb:f0:c4:7e:f2:f2:3e:58:
                    4d:8f:25:9c:af:19:c9:82:fd:2d:57:3c:d7:98:2b:
                    38:2c:62:cb:6d:bf:45:21:66:97:4a:6f:5f:48:2b:
                    6c:48:ad:ef:cb:c2:c3:a5:94:ec:65:42:34:f9:a7:
                    58:16:7a:7e:af:72:e6:c7:68:5e:2b:b5:8c:9a:9b:
                    3e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:54:A8:A1:3E:CE:40:F4:F8:F4:97:CE:51:91:F9:EE:F2:69:4C:25
            X509v3 Authority Key Identifier:
                keyid:45:25:88:41:F7:F0:4F:B3:9D:91:DA:3E:3F:AB:B5:29:E8:52:8F:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RSWIQffwT7Odkdo-P6u1KehSj0k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:b7:a2:47:05:fe:ee:30:1d:ba:82:d3:0b:b9:99:e3:fe:37:
         21:c9:3c:17:a6:59:45:fd:1f:ee:96:ef:64:f7:2e:0f:db:5b:
         65:0c:57:0c:3f:53:d5:8c:1b:0d:49:6a:80:67:c5:ea:b8:3c:
         0a:80:72:47:b6:39:23:5c:2e:34:f6:9f:d7:2e:d9:49:13:c9:
         b6:09:8a:bd:b1:c4:07:04:a3:9f:ba:a8:0f:d1:7c:e2:df:8b:
         09:3d:ef:18:16:45:d8:10:76:cf:39:ae:2b:89:49:ad:3d:cd:
         84:51:a1:ab:c7:a4:7a:23:b1:54:9f:70:29:b5:0f:2f:ca:dd:
         54:c4:e3:4d:48:4e:48:18:ca:57:33:e2:e6:a1:e1:7d:71:f9:
         13:b1:be:d0:93:f0:91:14:c3:e1:aa:f3:be:52:2a:18:61:e6:
         fa:33:9f:de:56:54:cf:0e:f9:b8:a4:8a:ca:c2:91:23:41:b1:
         45:7a:4b:0b:54:36:79:12:f5:21:03:37:e9:46:e9:b6:16:e7:
         12:7c:4c:47:7c:24:6b:37:46:e6:6e:39:15:47:56:17:4a:b9:
         be:36:86:27:6d:53:05:51:a6:9c:e7:21:41:53:87:5f:a8:a7:
         e7:0d:20:c1:55:0a:3c:73:be:00:c9:ce:13:b9:44:fa:9f:80:
         70:8b:28:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:04:28 2026 by rpki-client