Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft
File:                     bywgdVh2TqtQ74UGb3hZDOWxxWE.mft (raw, json)
Hash identifier:          JOUd9DRxN4Dg6ZDJf4PZt67gyt8j4g40ZSoRyjZP0rc=
Subject key identifier:   6F:BA:1A:C6:17:72:DD:E4:45:1E:DB:0F:F8:01:DD:F2:84:A7:58:EA
Authority key identifier: 6F:2C:20:75:58:76:4E:AB:50:EF:85:06:6F:78:59:0C:E5:B1:C5:61
Certificate issuer:       /CN=A91995D5/serialNumber=6F2C207558764EAB50EF85066F78590CE5B1C561
Certificate serial:       114F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bywgdVh2TqtQ74UGb3hZDOWxxWE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft
Manifest number:          1144
Signing time:             Thu 16 Apr 2026 17:09:50 +0000
Manifest this update:     Thu 16 Apr 2026 17:09:50 +0000
Manifest next update:     Thu 23 Apr 2026 17:09:50 +0000
Files and hashes:         1: bywgdVh2TqtQ74UGb3hZDOWxxWE.crl (hash: KJMRkt3QKIiyggO4cbIotxKKAIFUvPlPvRw8EyMBQ3U=)
                          2: ADA9DA3C2AAE11E9BEFAEF4EC4F9AE02.roa (hash: w7sXrnUGsDJc+cQ7IcP7P8MU3+8bOEuBq5H+umacKzQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.crl
                          rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bywgdVh2TqtQ74UGb3hZDOWxxWE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 17:09:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4431 (0x114f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91995D5, serialNumber=6F2C207558764EAB50EF85066F78590CE5B1C561
        Validity
            Not Before: Apr 16 17:09:50 2026 GMT
            Not After : Apr 23 17:09:50 2026 GMT
        Subject: CN=69e117de-9191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:14:ec:db:25:10:fa:89:d3:f6:d4:62:dd:e6:
                    5d:6e:30:60:0b:36:a8:60:3f:d9:34:82:9c:15:1a:
                    ba:28:bc:96:2c:ac:d0:a2:27:3e:9b:ce:49:cb:ac:
                    2b:b1:1d:70:9d:73:a0:f4:24:2f:79:c2:01:05:ff:
                    68:56:66:96:7b:54:ca:5d:43:1d:8a:78:dc:01:fd:
                    9d:30:89:de:9d:53:06:d7:7b:bf:29:6f:58:0d:e9:
                    c0:4d:77:e3:2d:82:c1:60:b5:98:48:ab:01:36:8a:
                    9d:ba:e7:b5:ec:b8:74:03:0a:fe:80:e4:96:f2:a3:
                    1d:53:21:a1:d3:bc:69:85:b1:eb:26:b4:9b:bc:6d:
                    bb:5f:4c:dc:3c:aa:2c:cd:27:79:b6:20:50:29:ac:
                    65:31:37:e0:fb:f9:9b:0c:c7:48:14:52:1a:4b:5b:
                    8f:a9:2a:f4:17:38:e5:5b:74:e2:de:ec:ca:2e:7e:
                    f9:ce:91:3d:5a:2a:8b:a1:02:8c:db:95:51:de:ac:
                    65:bc:75:d4:4c:80:e7:bb:0e:59:a3:67:60:97:df:
                    57:e5:41:0e:1d:b4:c7:21:54:af:8a:c6:27:08:d7:
                    17:07:71:ed:45:1d:8f:95:50:0f:03:a6:a4:03:ed:
                    39:b3:df:39:6e:67:8c:28:82:ba:15:f2:54:cc:24:
                    15:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:BA:1A:C6:17:72:DD:E4:45:1E:DB:0F:F8:01:DD:F2:84:A7:58:EA
            X509v3 Authority Key Identifier:
                keyid:6F:2C:20:75:58:76:4E:AB:50:EF:85:06:6F:78:59:0C:E5:B1:C5:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bywgdVh2TqtQ74UGb3hZDOWxxWE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:ba:af:7c:47:a0:e2:91:a2:97:74:ff:c8:89:1e:45:7b:d8:
         d9:08:42:11:39:2b:e2:4b:d6:ea:de:3f:51:7d:cb:67:f0:35:
         92:ef:ed:67:23:bb:c5:20:80:04:64:5a:d6:25:b8:b5:50:42:
         14:2e:d3:53:e1:33:64:07:cc:53:c4:dd:28:ea:df:e3:dd:09:
         61:b3:51:39:a8:f4:b0:35:2f:44:8c:64:c9:1f:20:5f:21:25:
         69:d0:9f:c3:b8:46:28:b8:ff:a4:12:56:dd:18:64:5c:16:34:
         07:45:ad:ee:63:22:a3:73:9e:99:4d:97:ec:87:26:1b:71:5b:
         6a:a6:56:51:10:ed:d1:42:b9:1a:93:e5:66:ff:88:4c:5d:a5:
         3b:b9:36:e4:52:8f:d3:40:de:f6:30:0d:1a:d3:54:b1:fd:f4:
         b9:3a:bb:15:bf:18:a4:44:48:38:9f:d4:9a:e2:44:76:c0:4d:
         fd:3d:4d:cf:d0:f3:10:b1:1f:fa:be:1a:e9:5b:0b:3e:f2:d3:
         11:7b:24:2c:ce:83:47:ca:92:94:19:ef:01:7b:eb:52:4a:61:
         5c:f5:ea:7e:90:7a:b9:6c:6f:1f:4e:6b:b4:50:6b:bd:6b:f4:
         c7:eb:45:2e:aa:79:bf:3e:76:dc:48:a6:49:10:af:92:7d:d3:
         0a:f0:c1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:24:14 2026 by rpki-client