Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft
File:                     shwri89IL512bSpNMlmO6Uv2Zaw.mft (raw, json)
Hash identifier:          UEOvUW+UwJGUoAzRL6VqBV4o5b0KbXW4WuQR/iZICKU=
Subject key identifier:   05:D4:02:47:38:28:03:4A:E4:8A:75:BA:1E:FD:33:67:89:78:C5:45
Authority key identifier: B2:1C:2B:8B:CF:48:2F:9D:76:6D:2A:4D:32:59:8E:E9:4B:F6:65:AC
Certificate issuer:       /CN=A911A7D2/serialNumber=B21C2B8BCF482F9D766D2A4D32598EE94BF665AC
Certificate serial:       FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/shwri89IL512bSpNMlmO6Uv2Zaw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft
Manifest number:          FA
Signing time:             Tue 07 Jul 2026 07:23:52 +0000
Manifest this update:     Tue 07 Jul 2026 07:23:51 +0000
Manifest next update:     Tue 14 Jul 2026 07:23:51 +0000
Files and hashes:         1: shwri89IL512bSpNMlmO6Uv2Zaw.crl (hash: jtO1d/lQ4ArRu1SatkCbRwsgWLeN2Y6Bk3SB7YEiPuQ=)
                          2: C7FAB578FEEC11EFB40D667FC4F9AE02.roa (hash: KytT7CwlQe11jWfAsLPRMxvbGLLkhLmlX/I5QLbz6lk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.crl
                          rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/shwri89IL512bSpNMlmO6Uv2Zaw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 07:23:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 254 (0xfe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A7D2, serialNumber=B21C2B8BCF482F9D766D2A4D32598EE94BF665AC
        Validity
            Not Before: Jul  7 07:23:51 2026 GMT
            Not After : Jul 14 07:23:51 2026 GMT
        Subject: CN=6a4ca988-511c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:95:9d:c6:24:b3:f3:1d:ea:51:63:8c:20:ef:
                    d5:c8:72:5b:3e:c9:32:18:c1:d8:dd:18:97:3b:23:
                    f0:9f:94:3c:9e:0f:d8:92:21:87:7b:22:2b:11:61:
                    ed:81:fc:1d:f9:70:14:3b:aa:82:64:87:57:34:17:
                    20:7b:b5:76:65:28:3e:e0:d7:33:1d:5d:06:83:71:
                    a3:d4:12:37:79:2f:cf:ee:49:b8:7e:4d:df:8c:15:
                    1f:f9:7f:0a:6b:e1:55:fe:4a:0f:d4:4c:c6:7d:24:
                    2f:80:56:d0:ea:dd:57:a2:cb:50:fc:63:98:88:91:
                    be:2a:79:ee:b2:1c:58:9b:9b:4f:7f:4b:9b:76:9a:
                    58:39:25:14:ef:32:ad:15:92:15:aa:91:04:9f:47:
                    56:7e:44:6e:2e:57:ac:13:99:a8:75:79:79:8a:7b:
                    03:4e:99:eb:ba:ba:8e:be:c1:b7:9f:eb:2f:77:22:
                    ba:60:cb:1a:59:93:73:b2:0f:a3:53:eb:40:e0:26:
                    ae:b1:c1:5d:05:80:48:bf:11:c1:60:16:1f:3a:b9:
                    45:42:2e:61:58:eb:fc:b6:89:b2:5a:ee:af:12:0e:
                    3d:98:09:50:1b:f9:f0:d7:50:dc:6e:ff:89:51:de:
                    e2:e0:44:d4:8a:ed:4e:f9:17:1e:9a:2e:85:bb:73:
                    f1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:D4:02:47:38:28:03:4A:E4:8A:75:BA:1E:FD:33:67:89:78:C5:45
            X509v3 Authority Key Identifier:
                keyid:B2:1C:2B:8B:CF:48:2F:9D:76:6D:2A:4D:32:59:8E:E9:4B:F6:65:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/shwri89IL512bSpNMlmO6Uv2Zaw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:4b:9c:64:e1:91:47:9d:4b:13:b9:86:a1:5c:8f:e7:c3:f3:
         2e:ab:66:fc:13:10:22:8e:ea:bf:0e:13:c4:96:ea:81:f8:d5:
         37:ce:57:e1:3b:2b:b5:04:0b:d8:2b:55:a8:d8:5b:f1:d8:fb:
         9f:dc:44:b4:7d:3a:af:29:1f:b3:af:ab:2a:a1:14:09:c9:66:
         44:35:24:1a:b3:ba:20:76:c2:63:77:e0:3a:74:b3:b9:03:f2:
         9d:ba:84:c5:fc:c5:8f:35:48:0f:d2:2f:7e:ac:ac:2d:e1:af:
         1a:40:8a:9c:28:95:88:1f:45:ff:18:f5:47:46:57:16:0d:5d:
         9b:6d:cd:c7:31:f3:f7:e4:d8:22:ff:e1:29:05:cc:8e:a3:63:
         08:df:00:a3:ba:aa:17:7e:26:89:07:67:1a:d1:19:25:6c:9b:
         76:87:2e:b4:a7:50:24:fb:d2:77:e6:02:ac:1f:ec:ad:f0:06:
         1c:63:60:5f:03:6a:a5:82:95:b6:d6:1e:34:16:d5:ee:dd:2f:
         78:dd:f5:5a:2e:f3:fe:4e:bd:0d:8e:2d:e1:1f:8d:85:0b:fe:
         8a:42:7d:22:d4:34:63:d2:17:00:6e:d8:c4:ae:d2:6d:70:26:
         44:5f:e1:96:1d:c2:92:04:7a:dd:29:d5:3f:04:d6:b7:5b:6f:
         cf:41:7d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 21:03:23 2026 by rpki-client