Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft
File:                     CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft (raw, json)
Hash identifier:          YUveB+do81JfvBjeUjaslaZBnm4nDsdnVeXvX/9w9LE=
Subject key identifier:   8A:2E:2C:B5:6F:1E:C3:6A:F5:9D:7A:C6:32:10:9E:3C:B2:0D:7A:11
Authority key identifier: 0B:02:2B:1E:A3:4C:03:7C:51:F6:57:FC:3E:0D:84:A3:C6:18:68:22
Certificate issuer:       /CN=A91D890E/serialNumber=0B022B1EA34C037C51F657FC3E0D84A3C6186822
Certificate serial:       09D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft
Manifest number:          09CB
Signing time:             Sat 18 Apr 2026 19:47:02 +0000
Manifest this update:     Sat 18 Apr 2026 19:47:01 +0000
Manifest next update:     Sat 25 Apr 2026 19:47:01 +0000
Files and hashes:         1: CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl (hash: j3fUcSFMveIGHdnA9KTaYuuWAGHz2ywzFjo8qbRYRHQ=)
                          2: FDAEEFB0A12A11EAB063A548C4F9AE02.roa (hash: cNrjBilbrF0h5gqh8r2I8xpeSdxfHL1i6pc3sR9uCdw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl
                          rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 19:47:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2516 (0x9d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D890E, serialNumber=0B022B1EA34C037C51F657FC3E0D84A3C6186822
        Validity
            Not Before: Apr 18 19:47:01 2026 GMT
            Not After : Apr 25 19:47:01 2026 GMT
        Subject: CN=69e3dfb6-406c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:99:18:0b:9e:12:96:4b:af:98:40:92:7c:be:
                    84:08:0b:01:05:a0:bc:b1:a0:22:b3:4d:0a:46:35:
                    61:f5:7b:b8:98:f4:68:05:cd:e0:b7:d0:17:65:18:
                    20:31:52:ea:70:fe:89:59:aa:1b:6c:c7:ed:60:15:
                    da:91:7d:d6:c6:37:6c:8c:ef:c1:60:42:b9:14:3a:
                    22:53:08:20:97:cb:1a:45:6f:e4:ed:49:d9:7a:a9:
                    b2:09:62:3f:39:cb:c6:81:e1:63:dd:7a:51:77:ad:
                    7e:79:d2:73:74:e6:1b:56:64:a0:30:e2:56:d1:63:
                    47:76:66:a5:e2:f0:83:56:0d:fa:1b:2a:23:45:d0:
                    ec:28:37:08:6e:70:aa:32:71:c5:51:81:ca:fe:5b:
                    a7:78:90:3d:d3:e5:ae:00:12:93:8a:fc:fa:8a:c5:
                    8f:fb:bb:b7:83:3f:09:c2:aa:20:76:0c:0d:84:c7:
                    98:6e:15:22:45:13:bd:74:a5:bb:f4:8e:d4:fa:e8:
                    a1:45:7d:49:9b:aa:1f:fa:62:2d:79:df:e5:fa:e3:
                    ad:94:e4:f3:4c:ea:6f:a9:9a:fb:c5:c7:c7:86:8c:
                    46:74:bb:f0:bd:ef:2e:72:49:7e:2d:18:e5:13:e3:
                    7c:58:41:2f:a4:7b:fb:c6:c9:13:87:0e:5c:46:4c:
                    4c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:2E:2C:B5:6F:1E:C3:6A:F5:9D:7A:C6:32:10:9E:3C:B2:0D:7A:11
            X509v3 Authority Key Identifier:
                keyid:0B:02:2B:1E:A3:4C:03:7C:51:F6:57:FC:3E:0D:84:A3:C6:18:68:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:3e:85:06:44:13:7c:11:1b:6f:32:88:a0:68:70:3f:5e:42:
         09:a6:58:a3:71:e6:6f:83:52:b8:55:9a:4f:9a:e4:35:d8:19:
         e7:11:b5:14:eb:e5:8a:30:17:bd:4c:b6:59:b3:44:44:c5:0b:
         0c:e2:43:f9:7c:86:36:5d:62:04:aa:2e:5f:22:73:18:0a:4c:
         1f:89:b2:87:d3:14:b2:7d:0f:e4:7c:ff:ac:59:99:7b:7f:a5:
         02:2a:2a:82:d6:ea:54:ec:87:b1:73:34:cb:25:fb:70:ec:47:
         fa:ee:a6:4a:17:a3:31:d4:61:8f:4e:d5:09:5b:bd:27:3c:a5:
         e5:ba:79:51:17:d5:aa:cb:d9:27:7c:d3:dd:dd:45:8b:0b:fe:
         d7:dd:80:50:53:29:a7:a7:c5:fb:7f:42:36:3c:1b:bf:9e:b2:
         26:60:22:e0:72:79:12:95:bc:f0:f4:b7:31:46:ed:8e:58:58:
         80:13:e1:e5:6e:00:67:15:06:66:c5:5d:a8:11:5b:20:05:3b:
         7f:94:1e:7f:ee:eb:c3:02:f0:c5:cd:42:57:7e:82:10:f8:cc:
         b3:46:fe:da:03:8f:97:bd:07:de:e8:fe:fe:95:7e:36:d3:96:
         9c:e8:db:4c:f8:6b:ec:0f:2b:5b:fa:81:49:78:45:33:b9:f2:
         c1:5f:9f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:51:08 2026 by rpki-client