Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft
File:                     w6UehON4f7CMUozMNLwYCAgTXv4.mft (raw, json)
Hash identifier:          Gz1z3Eh4vyKXSpyj4u/PRAcK2Y6Jdo5OV4za94ongMs=
Subject key identifier:   49:4F:57:90:5F:85:38:D1:9A:25:F5:33:10:42:D1:F3:DE:43:A6:2F
Authority key identifier: C3:A5:1E:84:E3:78:7F:B0:8C:52:8C:CC:34:BC:18:08:08:13:5E:FE
Certificate issuer:       /CN=A91971CB/serialNumber=C3A51E84E3787FB08C528CCC34BC180808135EFE
Certificate serial:       356A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6UehON4f7CMUozMNLwYCAgTXv4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft
Manifest number:          354F
Signing time:             Thu 16 Apr 2026 15:10:37 +0000
Manifest this update:     Thu 16 Apr 2026 15:10:37 +0000
Manifest next update:     Thu 23 Apr 2026 15:10:37 +0000
Files and hashes:         1: w6UehON4f7CMUozMNLwYCAgTXv4.crl (hash: HScy99uqU2GSOtzBuZnbZocvfXzhMairURuI2mArXmo=)
                          2: B20C8966F0A011EBAAC0FE77C4F9AE02.roa (hash: bTJP4oJep0TWxqdiJ1HCR8673aSbcj6c/Mn/+kjZzhc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.crl
                          rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6UehON4f7CMUozMNLwYCAgTXv4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13674 (0x356a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91971CB, serialNumber=C3A51E84E3787FB08C528CCC34BC180808135EFE
        Validity
            Not Before: Apr 16 15:10:37 2026 GMT
            Not After : Apr 23 15:10:37 2026 GMT
        Subject: CN=69e0fbed-6811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a8:d8:1e:b7:79:53:72:31:34:12:ba:65:14:
                    70:14:6f:39:0f:8c:e8:43:48:e2:9b:89:3e:87:13:
                    b4:f1:6e:de:64:4e:3b:62:93:9b:a2:f2:d1:83:07:
                    50:c0:2b:d2:c8:5b:33:98:75:06:95:6a:59:8e:8b:
                    1c:8a:f6:44:54:9a:78:dd:bd:ca:e0:3c:f9:89:72:
                    4a:a6:a6:f9:ae:8f:e6:48:10:e4:33:01:41:b8:76:
                    8c:3e:c8:b0:7b:a0:0d:0b:5c:13:a3:4b:35:fb:3b:
                    b9:26:1e:d0:da:82:b0:14:e5:8f:a6:2c:f6:26:18:
                    9f:aa:c7:32:94:4d:5b:bd:3d:35:8e:9b:b7:7e:67:
                    a6:06:17:d5:70:c4:e7:3b:f1:e2:c8:e3:fd:5c:54:
                    03:d0:c8:0c:a9:b8:18:8c:23:0e:f0:f6:c8:0d:f9:
                    44:9a:f8:45:14:9d:01:71:46:cb:04:6d:34:95:c1:
                    1d:aa:ab:05:d7:43:a1:bb:a3:b2:b5:67:2b:28:5b:
                    f1:d3:c0:26:cd:10:5d:70:2d:e8:45:06:77:ca:d7:
                    55:1c:43:1f:9e:1b:ce:e9:d5:34:28:aa:20:4c:64:
                    f6:a6:2e:ac:be:f7:1d:b0:f7:5e:9e:65:fb:a7:81:
                    0f:a0:cd:a9:b6:be:75:cd:3e:b0:a8:39:8d:a1:a3:
                    db:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:4F:57:90:5F:85:38:D1:9A:25:F5:33:10:42:D1:F3:DE:43:A6:2F
            X509v3 Authority Key Identifier:
                keyid:C3:A5:1E:84:E3:78:7F:B0:8C:52:8C:CC:34:BC:18:08:08:13:5E:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6UehON4f7CMUozMNLwYCAgTXv4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:6d:59:2b:2f:e0:b1:3a:4c:58:07:74:af:8e:7e:a0:81:f1:
         94:64:27:d3:a7:c7:04:23:87:d9:35:66:1d:c1:ec:ce:10:8a:
         69:8d:b2:89:a6:f3:4f:c4:af:40:3c:d3:35:cd:f4:e0:b9:66:
         8b:59:8c:ee:9a:05:59:bf:1c:28:56:c0:32:66:f3:1b:68:90:
         db:e4:04:11:98:32:d7:0a:13:69:ab:39:b1:a0:93:db:73:b8:
         1d:df:d8:2d:02:03:40:f5:b0:bb:b0:8a:88:d9:83:c1:db:d0:
         f7:a0:83:a9:0b:f0:12:b6:67:41:55:1a:ee:48:48:28:45:92:
         3e:d0:6a:c0:34:70:88:4d:48:a9:54:93:cd:83:53:bb:c5:03:
         ad:6a:b8:ae:c8:38:1e:51:b0:de:9f:55:b7:7f:14:d4:93:37:
         5d:6b:50:03:99:cb:60:a8:7e:80:36:0a:eb:f7:f5:5b:ec:47:
         5f:8f:4e:8d:06:55:0d:3a:12:df:ab:fa:23:7f:b8:a1:a5:ab:
         5d:d6:57:f5:6c:d1:87:7a:08:a2:6c:92:e0:93:a8:f5:4f:fb:
         1f:cd:4b:15:3d:aa:74:df:4a:c5:24:4f:2d:1b:3c:dd:37:5c:
         ea:a2:a4:48:39:c6:df:5c:e0:14:60:10:cc:f0:4e:27:b5:c8:
         16:fb:8d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:19:46 2026 by rpki-client