Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.mft
File:                     cwyRiCmzP6bI58jQUnsmzFC5NS0.mft (raw, json)
Hash identifier:          wLFrYsYWDD0KqfeH3UPh9TpwMP0UCAhqYopmeC5cVcE=
Subject key identifier:   B5:C3:C1:7A:05:4A:BD:D1:E5:30:7E:C6:6E:CE:DE:33:C4:0C:2F:E0
Authority key identifier: 73:0C:91:88:29:B3:3F:A6:C8:E7:C8:D0:52:7B:26:CC:50:B9:35:2D
Certificate issuer:       /CN=A91A0FB6/serialNumber=730C918829B33FA6C8E7C8D0527B26CC50B9352D
Certificate serial:       0249
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwyRiCmzP6bI58jQUnsmzFC5NS0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.mft
Manifest number:          0242
Signing time:             Fri 17 Apr 2026 02:16:08 +0000
Manifest this update:     Fri 17 Apr 2026 02:16:07 +0000
Manifest next update:     Fri 24 Apr 2026 02:16:07 +0000
Files and hashes:         1: cwyRiCmzP6bI58jQUnsmzFC5NS0.crl (hash: 6Q9+0QY+0VlR4Lhn8jMhsXPQfiE6AXr6e6dRVcfGNMc=)
                          2: 1B010960CD2211ED8A66486BC4F9AE02.roa (hash: 4TQYkH8AoWjbT+Svxs5AnQ83Cfk6vgNgAFDSksmAXXQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.crl
                          rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwyRiCmzP6bI58jQUnsmzFC5NS0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:16:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 585 (0x249)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0FB6, serialNumber=730C918829B33FA6C8E7C8D0527B26CC50B9352D
        Validity
            Not Before: Apr 17 02:16:07 2026 GMT
            Not After : Apr 24 02:16:07 2026 GMT
        Subject: CN=69e197e8-d4d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e0:76:6a:ca:86:93:80:96:1c:8e:6b:f5:d1:
                    62:5e:d7:b8:37:b5:de:c5:5e:ca:52:25:8f:01:33:
                    57:6a:84:ef:36:bb:48:db:74:6c:f1:2d:a8:43:ce:
                    8b:2c:17:d5:76:41:f3:be:e2:a0:16:d2:37:ae:8c:
                    20:01:d7:c5:56:a6:01:e6:21:20:59:ec:b6:b9:f4:
                    97:09:56:7a:6b:09:ee:23:ef:85:8f:f1:f1:7e:e3:
                    dc:41:e5:4f:b4:be:b5:ed:4b:6b:8b:e7:67:aa:59:
                    67:ec:c6:ce:cf:4a:49:23:3c:85:1e:20:e2:df:6b:
                    a8:38:01:0a:e4:7f:18:1e:6e:60:83:a5:22:ae:50:
                    04:a3:6b:59:ea:1b:da:03:83:79:63:17:e8:cf:f2:
                    8c:b8:bd:2e:0b:e8:9c:0b:9b:e7:73:2d:b2:3e:9c:
                    60:c4:57:ba:40:be:62:70:58:e3:c8:5f:5c:38:a5:
                    01:bb:ea:2b:fa:28:bc:36:40:d7:f2:4a:9a:f4:bd:
                    a7:a7:21:3e:e3:18:a0:56:cb:99:ef:da:34:01:99:
                    81:7d:14:15:77:00:ff:70:1e:c7:b0:a2:1a:9a:d5:
                    57:71:2b:2f:b9:d9:35:d8:d3:0f:ef:d1:47:aa:f0:
                    f3:3e:de:d4:84:b9:ad:17:23:01:a1:f2:b6:29:95:
                    dc:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C3:C1:7A:05:4A:BD:D1:E5:30:7E:C6:6E:CE:DE:33:C4:0C:2F:E0
            X509v3 Authority Key Identifier:
                keyid:73:0C:91:88:29:B3:3F:A6:C8:E7:C8:D0:52:7B:26:CC:50:B9:35:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwyRiCmzP6bI58jQUnsmzFC5NS0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:ce:79:ad:af:40:fc:23:2b:30:cd:55:0e:45:58:26:bc:fb:
         c0:98:f0:cc:21:b5:0c:a8:6c:17:52:b4:0e:84:6c:71:05:76:
         3f:68:ec:a6:99:df:3f:6d:7b:b1:57:69:c5:f6:6b:a5:17:bb:
         eb:e9:09:f6:21:de:6e:15:f7:5c:cd:80:f3:f8:6e:0a:1f:9d:
         8c:fa:b3:26:f5:ec:65:74:b0:0c:ae:9d:a6:4b:1a:10:78:6b:
         96:c3:8b:72:45:6c:45:e1:1c:fd:e4:86:8c:11:47:af:76:7d:
         b7:26:98:37:ca:29:fd:83:8e:d7:29:02:1c:41:92:64:b3:0a:
         6f:72:59:eb:17:df:a4:07:76:18:de:21:9f:ad:bb:70:b2:13:
         de:0b:e9:92:07:53:a6:9b:31:05:cd:77:a7:de:05:fa:5a:c6:
         8c:01:f4:e7:38:d1:90:87:94:f7:6e:8f:06:9f:9c:f0:eb:74:
         2f:b9:38:e7:12:20:40:84:72:15:e2:56:68:3b:ce:24:ae:f4:
         68:4f:cf:55:0a:d1:38:2f:02:1d:7b:a0:95:2c:10:ea:15:e6:
         46:8b:51:69:6a:ea:d5:e8:ea:4c:43:71:7a:6a:39:95:b7:12:
         aa:32:a2:fb:aa:b5:cc:da:4b:2d:8e:d3:c5:94:b8:ff:5b:36:
         57:be:a9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:47:33 2026 by rpki-client