Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.mft
File:                     pWrnLGamTmJ5yMycDv5PNjaQJ4A.mft (raw, json)
Hash identifier:          JFXTmcEyJlAPf5p1vfnIqrHpRacgLvknZBhchqbhwWU=
Subject key identifier:   B9:34:20:4C:10:CE:44:E6:FF:81:83:7E:5F:3A:58:DA:DC:2D:6C:A3
Authority key identifier: A5:6A:E7:2C:66:A6:4E:62:79:C8:CC:9C:0E:FE:4F:36:36:90:27:80
Certificate issuer:       /CN=A912A471/serialNumber=A56AE72C66A64E6279C8CC9C0EFE4F3636902780
Certificate serial:       01BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWrnLGamTmJ5yMycDv5PNjaQJ4A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.mft
Manifest number:          01B8
Signing time:             Sun 05 Apr 2026 03:24:44 +0000
Manifest this update:     Sun 05 Apr 2026 03:24:44 +0000
Manifest next update:     Sun 12 Apr 2026 03:24:44 +0000
Files and hashes:         1: pWrnLGamTmJ5yMycDv5PNjaQJ4A.crl (hash: 2a2HCLbPkD0S1MhSaBgPc3CKRLjhu3DzPpk6OWWxgGY=)
                          2: AC21E1E8924411EE96AA9544C4F9AE02.roa (hash: zEJDvN9ybbZp1LhscTj5sdCfbt2mJ3L379v4/X6XCSM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.crl
                          rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWrnLGamTmJ5yMycDv5PNjaQJ4A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 03:24:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 446 (0x1be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A471, serialNumber=A56AE72C66A64E6279C8CC9C0EFE4F3636902780
        Validity
            Not Before: Apr  5 03:24:44 2026 GMT
            Not After : Apr 12 03:24:44 2026 GMT
        Subject: CN=69d1d5fc-faaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:1f:3d:4c:5c:70:fd:f8:e0:6a:8d:c2:89:94:
                    c1:4f:18:8f:02:ec:c7:d2:34:af:54:cd:16:87:1b:
                    14:1f:fa:e0:7d:ac:d1:35:64:61:d5:ec:5b:fb:ab:
                    25:79:ef:ca:fd:33:41:77:9c:50:12:15:d4:d9:f8:
                    71:20:d2:9b:5b:8b:15:00:85:9e:0c:a8:67:64:df:
                    dc:65:21:ee:5e:74:cf:90:40:04:2d:58:83:52:9e:
                    26:f8:4d:eb:f1:1b:12:9f:90:37:7d:67:86:4a:5a:
                    66:72:cf:4b:a0:8d:68:84:49:ff:20:61:1f:ef:c0:
                    46:79:b5:1f:4c:42:67:3d:7b:54:0b:f2:3c:59:f9:
                    ee:e2:5a:8a:57:ed:48:24:18:d3:8c:4c:31:a2:5a:
                    d8:ac:a3:12:8c:1a:ec:60:1d:ba:84:34:9a:19:31:
                    82:dd:11:2b:bf:87:04:5c:2a:5d:11:ff:d3:b5:e0:
                    e6:fc:fa:5c:d3:ca:6d:4a:c9:8a:1f:49:d9:81:1b:
                    a4:27:0d:0d:82:22:a7:2b:38:5a:da:24:8a:3e:f4:
                    6f:8c:68:38:e2:f5:78:27:e1:84:82:df:27:1b:e7:
                    dc:b5:96:93:57:7e:19:36:26:2c:b4:77:65:63:eb:
                    74:eb:0e:e3:a7:ce:40:94:af:82:55:84:f2:23:32:
                    0c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:34:20:4C:10:CE:44:E6:FF:81:83:7E:5F:3A:58:DA:DC:2D:6C:A3
            X509v3 Authority Key Identifier:
                keyid:A5:6A:E7:2C:66:A6:4E:62:79:C8:CC:9C:0E:FE:4F:36:36:90:27:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWrnLGamTmJ5yMycDv5PNjaQJ4A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:5c:48:39:e4:21:6b:36:83:48:ab:6f:e2:f1:8d:1f:f5:75:
         12:0c:a9:22:49:71:bb:8d:db:7b:64:ff:0d:7d:c8:94:2b:6a:
         d9:fa:bd:7a:52:c6:a0:ae:d1:3c:79:f2:63:9c:fc:e3:7a:85:
         7c:68:4f:e0:71:24:81:f9:bf:6c:4b:37:62:0b:67:00:ff:cd:
         d6:bf:77:b9:c1:1d:a4:72:b2:e1:53:f3:a7:d8:0e:de:5f:d6:
         84:0b:41:c6:46:bb:00:b7:6d:eb:37:ea:31:c3:d4:68:cb:84:
         78:c1:bd:e7:af:d0:6b:20:f7:b9:15:f1:55:ab:6f:64:ef:ed:
         95:1f:eb:45:d1:5f:8c:e5:83:5a:47:80:63:7e:8a:4b:ca:a4:
         c6:77:70:ca:2a:c2:a8:c8:91:e7:a4:46:99:30:fe:9f:42:fe:
         dd:3a:9d:19:20:7d:d6:6c:e6:e2:60:54:8e:f5:c5:49:74:4c:
         63:dc:b3:46:7e:0b:6a:94:5f:0e:ad:75:c8:27:9d:cf:c3:41:
         4e:ec:77:aa:34:d1:cd:e8:20:1d:a5:17:81:a6:5f:b2:4f:86:
         bd:35:0b:76:32:c9:f7:c8:fe:95:b2:f3:78:f1:29:03:80:46:
         b1:19:4b:60:82:74:61:75:49:c1:ef:d4:e9:3e:43:e9:96:13:
         1a:9c:b7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:54:20 2026 by rpki-client