Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA409/F944E3CC9CAB11EFAB595516C4F9AE02/IWTdWaYV1fLjOT5yCYpzrYaOeNo.mft
File:                     IWTdWaYV1fLjOT5yCYpzrYaOeNo.mft (raw, json)
Hash identifier:          kps2czS3H4VVjLyjbhe/IWIUFlfnqBo5izqxNEC1rXo=
Subject key identifier:   C0:66:D8:D7:AC:89:7E:F0:CE:85:D7:92:B8:EC:18:3E:F7:18:5B:4A
Authority key identifier: 21:64:DD:59:A6:15:D5:F2:E3:39:3E:72:09:8A:73:AD:86:8E:78:DA
Certificate issuer:       /CN=A91EA409/serialNumber=2164DD59A615D5F2E3393E72098A73AD868E78DA
Certificate serial:       0136
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IWTdWaYV1fLjOT5yCYpzrYaOeNo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA409/F944E3CC9CAB11EFAB595516C4F9AE02/IWTdWaYV1fLjOT5yCYpzrYaOeNo.mft
Manifest number:          0131
Signing time:             Sat 13 Jun 2026 05:35:44 +0000
Manifest this update:     Sat 13 Jun 2026 05:35:43 +0000
Manifest next update:     Sat 20 Jun 2026 05:35:43 +0000
Files and hashes:         1: IWTdWaYV1fLjOT5yCYpzrYaOeNo.crl (hash: aZhtHXX/G1L35N/nSZ+5hV+/ftOWhM6YgktSVc3erlQ=)
                          2: E9F177B89D9C11EFA9526A6CC4F9AE02.roa (hash: aIh23/3y8xgm3k9QGKPnGbqB42NXH2OLUXREX9l30Z4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA409/F944E3CC9CAB11EFAB595516C4F9AE02/IWTdWaYV1fLjOT5yCYpzrYaOeNo.crl
                          rsync://rpki.apnic.net/member_repository/A91EA409/F944E3CC9CAB11EFAB595516C4F9AE02/IWTdWaYV1fLjOT5yCYpzrYaOeNo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IWTdWaYV1fLjOT5yCYpzrYaOeNo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 05:35:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 310 (0x136)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA409, serialNumber=2164DD59A615D5F2E3393E72098A73AD868E78DA
        Validity
            Not Before: Jun 13 05:35:43 2026 GMT
            Not After : Jun 20 05:35:43 2026 GMT
        Subject: CN=6a2cec30-dd48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ec:7b:3e:16:4f:48:12:9a:66:da:5b:d2:3c:
                    1d:f3:60:53:e3:25:0d:cf:b8:9c:b1:0e:b8:01:8a:
                    cc:a1:6d:47:1a:ea:48:b0:2c:68:d8:6c:4e:64:70:
                    7b:19:91:75:ac:7a:c3:89:90:f9:5a:fb:7c:9f:d7:
                    2c:af:43:14:7f:16:ff:1b:3a:4c:3e:fd:6e:a9:4e:
                    43:9f:2b:53:cd:2a:c7:0c:b0:b2:9d:31:a7:e6:85:
                    da:2b:9a:81:89:bb:33:42:c6:a8:bf:2e:14:bf:b1:
                    2d:57:23:dd:fa:76:e6:3f:87:f6:6d:2d:c0:f2:a6:
                    fb:d2:3d:80:5c:bb:d6:37:b0:a7:1c:35:e4:d7:6b:
                    99:07:5a:52:00:45:01:8e:c9:c0:a8:48:29:b3:5d:
                    ea:3f:ad:ef:80:ee:84:25:f8:dd:a5:25:24:a6:7c:
                    65:0a:04:ae:bf:cf:72:ef:c1:ff:23:32:09:55:dd:
                    7d:f4:3d:b0:32:07:23:9b:08:16:d9:7d:d3:21:00:
                    97:71:8a:90:c8:75:cb:34:43:6d:fa:b5:22:a9:10:
                    ca:d0:8a:e4:62:8f:73:0f:c9:a9:ba:c3:9f:35:7e:
                    f8:a5:5d:3b:5a:1b:67:e8:c4:8a:96:8d:7e:e8:b8:
                    fc:d4:12:77:d6:90:36:d3:94:62:c0:fb:65:99:11:
                    44:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:66:D8:D7:AC:89:7E:F0:CE:85:D7:92:B8:EC:18:3E:F7:18:5B:4A
            X509v3 Authority Key Identifier:
                keyid:21:64:DD:59:A6:15:D5:F2:E3:39:3E:72:09:8A:73:AD:86:8E:78:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA409/F944E3CC9CAB11EFAB595516C4F9AE02/IWTdWaYV1fLjOT5yCYpzrYaOeNo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IWTdWaYV1fLjOT5yCYpzrYaOeNo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA409/F944E3CC9CAB11EFAB595516C4F9AE02/IWTdWaYV1fLjOT5yCYpzrYaOeNo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:eb:0b:cc:7d:29:7a:71:e4:87:f2:46:34:b8:33:c8:a3:29:
         ac:dd:57:8f:67:61:36:79:01:5f:f5:fd:0d:d7:4f:37:e9:d2:
         a3:0f:52:10:2d:e3:1d:89:f5:36:72:df:7d:a0:f4:54:b1:9e:
         ad:f1:9b:0d:73:2d:20:2f:a9:97:97:e4:80:f0:32:7e:4d:ed:
         76:fd:c2:3b:1b:30:c0:36:a7:2e:3a:51:88:9d:61:5d:42:9d:
         b8:ff:20:f6:f7:56:4a:8e:ee:2e:7b:91:00:05:a6:db:8d:76:
         7d:b8:7c:59:b2:dd:7b:bd:a9:f7:45:f8:5e:82:a1:91:e3:22:
         82:c4:8c:f7:8a:29:db:aa:71:00:a2:eb:85:d6:47:f4:6d:40:
         0c:29:8d:70:a0:ac:61:19:df:a1:6c:99:30:fd:48:06:c4:d2:
         2e:14:ad:1c:a0:d2:7d:07:ae:c7:a9:a4:c8:76:4e:10:eb:91:
         97:2b:51:0d:31:ee:a0:4c:0d:95:66:34:25:2d:6c:80:b1:8c:
         6f:ff:94:f8:d8:bc:1b:a3:86:b1:7a:e6:a4:89:f5:6c:68:7a:
         4d:d7:48:52:c9:66:82:63:ce:28:73:f5:cc:a4:c9:2b:1a:a1:
         bf:09:26:74:9c:09:88:e0:b3:e8:cb:b5:ac:ae:34:ae:70:3a:
         3d:db:cc:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:37:53 2026 by rpki-client