Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft
File:                     cwR3XBzjhaykBAWGTqm5q_7ekbM.mft (raw, json)
Hash identifier:          PZE1GEcRMoG0K3Fouh7m+6yTrwh517Fs2nw3LTDlVGU=
Subject key identifier:   12:BF:B5:C7:D1:3A:5E:6F:D0:B5:79:06:81:BC:60:8D:CC:28:FD:01
Authority key identifier: 73:04:77:5C:1C:E3:85:AC:A4:04:05:86:4E:A9:B9:AB:FE:DE:91:B3
Certificate issuer:       /CN=A911580A/serialNumber=7304775C1CE385ACA40405864EA9B9ABFEDE91B3
Certificate serial:       041B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft
Manifest number:          0413
Signing time:             Thu 29 Oct 2026 00:33:09 +0000
Manifest this update:     Thu 29 Oct 2026 00:33:08 +0000
Manifest next update:     Thu 05 Nov 2026 00:33:08 +0000
Files and hashes:         1: cwR3XBzjhaykBAWGTqm5q_7ekbM.crl (hash: 12YxsTMQ3k5nltsp/0dHhUky49vec1twjpzLEHM3v7M=)
                          2: BC6E83E0D4E411EC976A7E55C4F9AE02.roa (hash: fEkscTOPczLjdNokDvAYNFJrvZePwXKN3ANl82TsKZk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.crl
                          rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Nov 2026 00:33:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1051 (0x41b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911580A, serialNumber=7304775C1CE385ACA40405864EA9B9ABFEDE91B3
        Validity
            Not Before: Oct 29 00:33:08 2026 GMT
            Not After : Nov  5 00:33:08 2026 GMT
        Subject: CN=6ae29445-7a32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1c:b5:6d:52:c9:83:94:98:7e:0b:8a:ff:e2:
                    33:b0:db:fc:16:22:61:be:e5:72:58:67:9e:a1:d6:
                    5c:8c:a6:f1:16:55:76:f9:69:b6:22:7e:57:df:ff:
                    9d:1a:bd:1a:f5:55:e5:92:5d:77:99:3f:c8:6d:39:
                    e6:bc:53:1c:f0:9f:9b:a3:ba:8e:0e:bb:f5:63:1c:
                    2b:2f:e1:f4:52:b6:75:36:06:b4:a1:8e:c9:35:94:
                    36:7d:8a:5c:89:72:69:06:a4:8b:c5:9b:81:b6:20:
                    86:59:07:a4:df:fe:1d:0b:71:92:e1:94:86:f8:6f:
                    39:fc:79:2b:9f:07:0c:9b:b9:bf:7f:7a:f3:1f:ff:
                    15:5c:ef:65:91:5f:82:d1:b7:e4:cf:b4:eb:5f:b6:
                    46:e1:c7:d0:90:64:23:65:9c:46:96:f1:c0:d2:da:
                    6a:67:6d:f3:2b:66:85:66:d7:b0:92:c0:d3:05:9f:
                    f3:31:2a:7e:7f:af:6a:8a:7a:18:ed:0c:48:36:d9:
                    65:d5:53:ac:ae:b1:5c:85:a9:44:f7:bf:a6:92:50:
                    c7:a7:c4:5b:d6:3e:a2:dc:16:0b:f6:0b:2c:75:17:
                    8c:5d:bd:1f:04:40:57:da:40:2b:13:9e:84:27:6a:
                    73:01:74:6d:4a:48:98:c5:f4:bf:96:84:dd:e3:cb:
                    e0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:BF:B5:C7:D1:3A:5E:6F:D0:B5:79:06:81:BC:60:8D:CC:28:FD:01
            X509v3 Authority Key Identifier:
                keyid:73:04:77:5C:1C:E3:85:AC:A4:04:05:86:4E:A9:B9:AB:FE:DE:91:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:6b:91:fe:7b:37:1b:ef:ad:78:0d:16:13:a3:dc:a8:30:e5:
         43:3a:6b:8e:97:52:1e:88:0d:3b:f1:fc:35:58:21:56:c5:d1:
         b1:fb:f8:4f:d7:27:bb:5e:4d:65:99:52:2a:5d:a1:fc:2c:a6:
         3b:eb:2d:d8:0f:2f:c5:0c:03:fe:d6:55:d2:a4:ec:98:72:3c:
         67:62:ad:66:20:df:25:cd:e0:d9:e5:c6:04:63:77:ab:49:9e:
         b7:1b:20:72:e5:5d:ed:5c:f4:fe:64:b9:73:83:3b:84:53:89:
         3c:df:cd:02:d0:6a:d5:55:c5:be:3c:b6:db:75:9a:7f:95:76:
         2b:b8:82:c3:e1:3f:2f:83:ee:49:74:c8:e4:9c:b8:1c:6f:e5:
         fd:08:ad:06:53:c5:a9:50:fe:76:c6:4b:87:30:12:c4:3e:1e:
         79:92:45:8b:d6:90:0a:17:3e:e5:aa:72:a8:e6:7a:ed:4d:b8:
         ae:d8:2c:5c:f0:10:62:b5:fa:0f:dd:02:15:a8:10:e4:83:f7:
         92:3b:27:6d:e8:a2:1c:c6:af:3e:94:db:e5:c2:8c:6c:48:e9:
         0c:65:2c:d6:b7:bf:6d:0e:4f:12:ee:dd:fb:2e:0b:a9:3f:98:
         73:a6:0a:c5:f8:f6:9f:a5:60:3f:00:fe:ff:0b:19:1d:f7:fc:
         9d:6e:4a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 20:33:31 2026 by rpki-client