Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.mft
File:                     2wVNT_SDuJTYCF4P43hs4um1MGI.mft (raw, json)
Hash identifier:          +Xi6V02qn6HxwD4z4O4u4Fz4x0Qv5B9HVr9hXoCiudc=
Subject key identifier:   89:64:81:96:7C:D4:D9:9C:2C:C4:0C:7F:9D:F0:29:53:AB:A2:04:86
Authority key identifier: DB:05:4D:4F:F4:83:B8:94:D8:08:5E:0F:E3:78:6C:E2:E9:B5:30:62
Certificate issuer:       /CN=A91758DF/serialNumber=DB054D4FF483B894D8085E0FE3786CE2E9B53062
Certificate serial:       27
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/2wVNT_SDuJTYCF4P43hs4um1MGI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.mft
Manifest number:          25
Signing time:             Wed 10 Jun 2026 20:26:01 +0000
Manifest this update:     Wed 10 Jun 2026 20:26:01 +0000
Manifest next update:     Wed 17 Jun 2026 20:26:01 +0000
Files and hashes:         1: 2wVNT_SDuJTYCF4P43hs4um1MGI.crl (hash: mnnWg9haa9c5g8zylqjSSOOsFBtUiKWWwxAdGMdfhdU=)
                          2: 031A6E544E9311F19004C0C7A2EE528E.roa (hash: w/4wlpVVsUwM2QVkvZtJ7suuuKCdp4EEZYeS6K8GgLc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.crl
                          rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/2wVNT_SDuJTYCF4P43hs4um1MGI.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 20:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91758DF, serialNumber=DB054D4FF483B894D8085E0FE3786CE2E9B53062
        Validity
            Not Before: Jun 10 20:26:01 2026 GMT
            Not After : Jun 17 20:26:01 2026 GMT
        Subject: CN=6a29c859-7662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5b:f1:9a:8b:d5:57:1c:bc:bc:3d:50:73:1e:
                    ac:c2:04:15:26:c6:93:f1:a4:26:ec:db:17:d5:15:
                    28:27:6e:aa:19:57:9f:92:af:83:6c:09:f6:b9:40:
                    7e:16:87:f1:11:92:70:7d:51:5f:09:5c:9f:4f:7a:
                    a3:d5:98:5a:70:bb:14:68:b8:86:1a:65:3d:8f:20:
                    9f:d2:35:a6:1d:4b:8b:7e:69:df:e2:da:bd:ec:50:
                    09:ce:c8:e0:c2:80:2d:1f:af:68:9a:bb:9b:90:de:
                    5f:76:13:e7:2f:4a:be:37:a3:ee:92:73:c9:b0:b7:
                    ed:f8:bb:df:fc:fd:16:b8:95:74:a8:16:43:a5:0f:
                    3a:fd:a3:f2:d8:f2:0c:1b:c0:af:62:2b:75:d2:7b:
                    86:55:b7:65:1f:88:d7:89:09:2e:0f:38:b1:89:9f:
                    6f:e2:9f:ee:ca:2b:5b:0c:fa:5c:1d:9d:52:24:86:
                    d7:29:4a:f8:46:e3:fd:97:66:fe:c6:cf:bd:51:47:
                    bd:78:2d:cc:f0:3e:16:0e:88:51:cb:0b:13:92:d2:
                    12:f2:25:c7:63:9f:af:09:0f:c4:a1:c1:e7:ea:98:
                    84:e7:fa:cb:41:32:a0:80:80:e9:6b:9b:26:b7:19:
                    7a:89:05:56:cc:5e:d1:d8:03:2d:08:0b:09:6b:59:
                    aa:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:64:81:96:7C:D4:D9:9C:2C:C4:0C:7F:9D:F0:29:53:AB:A2:04:86
            X509v3 Authority Key Identifier:
                keyid:DB:05:4D:4F:F4:83:B8:94:D8:08:5E:0F:E3:78:6C:E2:E9:B5:30:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/2wVNT_SDuJTYCF4P43hs4um1MGI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:81:d7:aa:0d:46:c4:bb:4d:57:82:89:8f:49:ed:b5:35:dc:
         a8:92:31:27:4b:d3:5e:b7:c1:79:ea:40:f2:e2:f0:e9:7b:78:
         84:93:e1:af:6f:43:c1:65:af:5b:fb:81:dd:27:f5:77:28:e7:
         aa:b8:73:cd:cf:77:0f:e7:df:9c:1d:c8:d6:6f:a4:00:4d:bb:
         87:e7:24:26:32:da:fb:1d:db:67:bb:e0:4b:aa:10:c7:82:c3:
         f1:2c:67:3b:fa:8e:58:71:8f:2c:89:36:2f:5f:32:ff:42:ef:
         3f:2b:ae:93:2f:e6:0a:89:69:d8:c7:68:f6:82:bd:96:90:b8:
         99:53:04:da:9d:9e:1a:eb:e8:a3:28:19:41:f6:22:4b:41:81:
         f3:04:72:29:8a:bc:71:8a:6a:a0:cb:45:75:68:d0:b6:5e:2a:
         8d:53:c4:70:ef:54:99:45:22:9c:43:8b:ea:25:15:62:6d:e3:
         58:56:52:b0:5e:b8:77:06:94:ae:be:43:ff:52:bd:94:4c:43:
         af:3f:73:db:63:65:f0:0c:4f:2c:61:38:1a:77:af:7c:34:17:
         2e:56:47:fd:02:fc:a3:31:fe:ee:a1:bb:57:9b:9e:b5:e5:49:
         d9:30:50:1c:85:ea:74:6e:af:9f:4e:8a:b2:a2:8e:f6:18:e2:
         f5:94:03:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:28:45 2026 by rpki-client