Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.mft
File:                     PShwiOOGgqTkudgoRQszZr3q1d0.mft (raw, json)
Hash identifier:          2SzpLvY4cKkGv7tc7QQVKLkKBvu6SLKSn+RcdcgIDh0=
Subject key identifier:   4B:F6:E5:2D:3D:44:96:8F:6B:91:D9:77:A5:AA:DD:B9:B3:C6:16:3A
Authority key identifier: 3D:28:70:88:E3:86:82:A4:E4:B9:D8:28:45:0B:33:66:BD:EA:D5:DD
Certificate issuer:       /CN=A91F02EA/serialNumber=3D287088E38682A4E4B9D828450B3366BDEAD5DD
Certificate serial:       0CC8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PShwiOOGgqTkudgoRQszZr3q1d0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.mft
Manifest number:          0CB5
Signing time:             Thu 16 Apr 2026 18:25:20 +0000
Manifest this update:     Thu 16 Apr 2026 18:25:19 +0000
Manifest next update:     Thu 23 Apr 2026 18:25:19 +0000
Files and hashes:         1: PShwiOOGgqTkudgoRQszZr3q1d0.crl (hash: CGA5zHT81ra7ZyFiL37CuDZQPg2MHOPGD56SWgl3n/Q=)
                          2: 7716938A416211EB9B0F3C54C4F9AE02.roa (hash: JsMxuAz2clvL8td5dPv4MoycNcApjVpvYRYlrs8BPh4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.crl
                          rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PShwiOOGgqTkudgoRQszZr3q1d0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:25:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3272 (0xcc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F02EA, serialNumber=3D287088E38682A4E4B9D828450B3366BDEAD5DD
        Validity
            Not Before: Apr 16 18:25:19 2026 GMT
            Not After : Apr 23 18:25:19 2026 GMT
        Subject: CN=69e12990-b2ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:47:ba:b3:88:dd:5f:1c:2f:10:97:29:2c:5f:
                    5e:98:85:e3:9f:76:22:40:0e:62:db:a5:88:35:00:
                    3b:60:50:83:84:46:56:4d:1c:9c:40:47:1f:b2:e7:
                    bf:6e:26:81:8a:49:5e:1d:62:20:49:6a:cc:06:ff:
                    14:a0:f5:60:4e:08:da:c2:ca:b4:76:09:2f:93:57:
                    15:61:5b:c6:5a:11:33:16:f7:82:b5:c6:fd:fe:54:
                    9c:a6:e5:01:f7:96:99:ea:43:a1:ca:34:7e:f0:15:
                    68:2a:a5:c2:e6:b3:0e:75:05:7c:a4:c7:1a:5c:f0:
                    13:24:ee:9e:7c:73:41:0c:41:1a:51:cd:f6:44:89:
                    8a:8a:f9:c9:2f:75:49:c4:c9:ac:fb:12:0b:61:33:
                    94:d9:00:2b:93:f3:1c:3a:51:cf:20:6d:2a:18:56:
                    13:87:6f:5e:17:70:c9:7f:de:e0:70:4d:f8:5d:cf:
                    80:4f:35:fa:27:b5:a3:52:09:94:67:7b:65:b2:56:
                    15:29:88:8f:82:31:22:33:01:38:fa:78:97:48:f0:
                    f8:3b:b9:5b:2b:10:20:a8:d6:be:11:ff:7e:f3:ac:
                    6d:96:7a:68:20:47:e5:b9:fe:26:2a:36:af:28:47:
                    7b:bf:38:6e:48:8d:78:4f:f9:7c:99:68:63:d5:4b:
                    0a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F6:E5:2D:3D:44:96:8F:6B:91:D9:77:A5:AA:DD:B9:B3:C6:16:3A
            X509v3 Authority Key Identifier:
                keyid:3D:28:70:88:E3:86:82:A4:E4:B9:D8:28:45:0B:33:66:BD:EA:D5:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PShwiOOGgqTkudgoRQszZr3q1d0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:7d:b1:16:5f:94:dd:43:97:d0:05:69:1e:c5:bc:c5:69:3e:
         fe:4a:b5:29:2a:de:c1:e8:a8:55:8d:4a:1f:0a:98:34:35:a0:
         18:9c:19:23:72:1a:c1:a7:5d:59:44:e9:3b:eb:c7:c5:d4:32:
         5d:b9:a7:6e:a3:f7:10:c9:fc:b1:f3:f4:a4:58:3b:e1:c9:88:
         ca:f0:83:0b:b2:9c:6f:6a:f7:48:de:51:5e:57:a5:9f:c1:44:
         9a:d4:12:8c:a8:b9:a0:b7:6d:53:47:75:62:15:96:11:6b:20:
         0a:29:9b:a9:69:93:6e:06:d8:93:ce:6d:39:d1:8d:b7:ee:20:
         03:24:c9:26:f3:44:9e:d1:c6:24:fd:21:7a:3d:ca:28:d0:f9:
         df:37:09:42:96:b3:c0:d0:84:90:23:01:85:6b:4e:79:fb:c6:
         26:ab:b9:d1:ec:da:c9:0d:13:f7:94:77:93:aa:73:a6:43:02:
         a5:b4:71:4d:8f:1f:41:3f:88:38:df:a5:99:c2:78:3c:72:70:
         30:ef:3c:80:3c:3a:2e:a7:05:f5:d5:3e:cb:24:17:a1:31:8f:
         30:ba:99:31:af:fe:81:6a:7b:29:60:1f:3c:51:c0:dd:7f:a9:
         ce:bd:72:f3:fc:93:20:e7:aa:e5:b9:71:aa:77:73:1f:a5:80:
         f4:7f:da:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:35:03 2026 by rpki-client