Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft
File:                     CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft (raw, json)
Hash identifier:          in0VCi0Fy8oZ5Pxl+Eu/+/uOm3JDxE/9TFvyvUduHPo=
Subject key identifier:   BA:F0:D5:C3:91:44:74:23:E4:27:85:4C:3F:1F:EA:1D:EF:DE:76:B7
Authority key identifier: 0B:09:52:36:23:4E:69:35:BA:A3:41:E3:23:5A:3D:B4:73:AC:C6:7F
Certificate issuer:       /CN=A91FFE9F/serialNumber=0B095236234E6935BAA341E3235A3DB473ACC67F
Certificate serial:       0FF9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft
Manifest number:          0FC1
Signing time:             Thu 16 Apr 2026 17:26:54 +0000
Manifest this update:     Thu 16 Apr 2026 17:26:53 +0000
Manifest next update:     Thu 23 Apr 2026 17:26:53 +0000
Files and hashes:         1: CwlSNiNOaTW6o0HjI1o9tHOsxn8.crl (hash: vHCwE0Gz3ov08MPRHW8uVL/Eb6sEjZNLN9BSqgNKmnU=)
                          2: D927A2DAA64A11EE8316D651C4F9AE02.roa (hash: LdvKEMxHF6LRdf8uDUGPZDjjr7RNd+qCPf5qkED55LI=)
                          3: 6153EE40A64911EEA2F9C24AC4F9AE02.roa (hash: xxh6NZnNYpflyBEdhUUFw/SOYfLeyMddymrrtghmKYo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.crl
                          rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 17:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4089 (0xff9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FFE9F, serialNumber=0B095236234E6935BAA341E3235A3DB473ACC67F
        Validity
            Not Before: Apr 16 17:26:53 2026 GMT
            Not After : Apr 23 17:26:53 2026 GMT
        Subject: CN=69e11bde-0e09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ec:b7:52:71:ad:ac:87:de:8a:ad:d8:5d:c4:
                    c7:b7:aa:8f:7b:fd:a5:78:46:12:6b:b4:94:10:74:
                    a5:35:99:50:47:f7:34:0f:37:85:a3:dd:ea:51:e8:
                    d6:7c:c3:eb:5a:ea:72:05:19:00:1a:a6:f9:9c:12:
                    ed:d6:92:99:78:a5:3a:34:3e:d1:bb:fe:3b:56:f2:
                    59:25:64:59:e1:fd:81:01:5c:f4:98:9c:2b:cb:0a:
                    1f:8d:c1:e5:58:26:0b:70:6e:ae:82:57:94:a3:e9:
                    7d:db:f4:f3:74:9e:bb:c7:f9:df:c8:ff:4b:35:5f:
                    38:32:90:46:59:84:bb:f7:36:00:2b:92:55:68:3e:
                    f1:6e:34:e0:39:dc:6e:f7:1b:ec:28:65:87:f4:56:
                    e6:91:3e:d4:13:a6:9c:d2:7d:ee:4c:69:62:38:01:
                    ae:21:4a:00:45:09:ba:e2:47:41:9e:47:fd:b6:3a:
                    5c:7f:04:51:7f:9c:60:34:2b:44:a2:33:52:b3:ab:
                    c5:cc:b7:a8:9b:84:24:79:86:ae:77:c5:32:11:90:
                    93:94:34:ef:82:cb:14:e7:23:0b:66:30:32:61:54:
                    a0:7f:41:06:57:04:79:4b:8c:cc:7c:a9:18:ce:0b:
                    ab:e6:77:3d:0f:99:b4:63:dd:f1:9e:04:3e:5f:87:
                    74:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F0:D5:C3:91:44:74:23:E4:27:85:4C:3F:1F:EA:1D:EF:DE:76:B7
            X509v3 Authority Key Identifier:
                keyid:0B:09:52:36:23:4E:69:35:BA:A3:41:E3:23:5A:3D:B4:73:AC:C6:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e3:3b:4d:d8:73:1f:53:f1:f3:69:2f:68:a6:98:00:55:0f:90:
         13:5d:9a:60:c6:cb:a7:7f:50:66:21:41:02:61:e3:e8:11:a4:
         44:99:e9:9a:54:6f:fd:80:99:fc:5d:98:1b:94:66:0e:a0:67:
         1b:8d:10:aa:e3:61:b2:4f:53:4f:5d:0c:6f:68:24:c6:ce:2f:
         30:53:fe:88:cf:e5:b6:42:fa:9e:f4:9a:e2:f1:68:59:2c:73:
         1e:bd:a9:1e:54:26:99:c7:c3:a8:35:2d:f6:98:b4:5f:2e:49:
         5a:9b:42:7e:cc:b4:e2:35:36:f9:6d:25:60:69:b8:12:ee:64:
         30:7c:67:40:80:17:0b:e7:aa:a8:66:be:c5:c4:23:5e:fe:ee:
         4b:a7:28:6f:c1:b9:02:ad:13:2e:83:a6:ba:af:7f:d2:28:b7:
         55:3a:c3:ab:29:a6:f9:69:ce:4c:5f:9d:af:f6:a5:d7:67:1a:
         42:a4:d3:23:ae:fa:ad:07:90:5d:30:75:f5:6e:cf:c2:e8:a2:
         32:5a:9e:4c:97:2b:b9:60:9e:42:f8:97:4b:3c:cb:c7:fe:a8:
         0d:27:2f:1e:ee:67:de:5e:92:b1:6d:57:a8:15:6b:d1:76:ec:
         c6:64:36:e9:60:e2:4e:67:5c:21:c8:c6:4e:87:d6:62:d6:e6:
         eb:36:eb:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:32:36 2026 by rpki-client