Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft
File:                     mKWpVZLATr7Thxa8Hc41F7exLQg.mft (raw, json)
Hash identifier:          0ws5CamJCYMiYaJ0SgqJN2t42raKpFDdcQFQelTdw5I=
Subject key identifier:   5D:2C:2E:FA:CB:CA:F0:23:6C:4C:0C:9E:B3:07:33:66:67:C3:AF:FC
Authority key identifier: 98:A5:A9:55:92:C0:4E:BE:D3:87:16:BC:1D:CE:35:17:B7:B1:2D:08
Certificate issuer:       /CN=A917B647/serialNumber=98A5A95592C04EBED38716BC1DCE3517B7B12D08
Certificate serial:       064F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mKWpVZLATr7Thxa8Hc41F7exLQg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft
Manifest number:          0646
Signing time:             Sun 26 Apr 2026 22:38:52 +0000
Manifest this update:     Sun 26 Apr 2026 22:38:51 +0000
Manifest next update:     Sun 03 May 2026 22:38:51 +0000
Files and hashes:         1: mKWpVZLATr7Thxa8Hc41F7exLQg.crl (hash: 3P5BjAVik9NbutVMQUgvJuFGKOEWt241hu3GwN47j5E=)
                          2: BF8F70C67B8211ED9C4EDD3BC4F9AE02.roa (hash: 0NaFUot0pXR7DvCrYe8iswpOneCs4skyX98hr8n2MVo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.crl
                          rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mKWpVZLATr7Thxa8Hc41F7exLQg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 03 May 2026 22:38:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1615 (0x64f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B647, serialNumber=98A5A95592C04EBED38716BC1DCE3517B7B12D08
        Validity
            Not Before: Apr 26 22:38:51 2026 GMT
            Not After : May  3 22:38:51 2026 GMT
        Subject: CN=69ee93fc-49ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f9:eb:e6:c2:0e:8c:82:4e:ef:16:38:6b:2b:
                    77:64:d7:23:06:03:e7:05:96:e9:3b:ed:8c:c1:ee:
                    f1:d0:db:54:70:56:60:66:92:31:a1:49:bf:15:44:
                    cf:87:2c:a0:c3:ea:01:e1:0b:ec:1d:a4:6c:39:bf:
                    ad:78:0a:34:e9:e1:47:3b:80:99:b9:2c:ca:0b:c6:
                    20:fa:c9:fb:43:7c:b8:99:00:bf:e8:22:f8:e9:ef:
                    85:ff:95:3a:ea:f5:4d:28:74:47:cd:4d:c3:c9:bb:
                    b5:21:05:28:49:da:51:c7:3c:74:67:c0:1b:1f:ca:
                    80:cc:9c:c9:8b:d4:31:e1:23:98:14:72:92:a5:d2:
                    f7:92:99:6e:27:8e:c5:64:b7:91:a0:77:b2:f5:47:
                    3a:01:b2:ae:2c:ed:13:f7:74:88:db:53:16:0d:b6:
                    d1:9e:ab:9c:bf:fb:8c:1a:b9:43:ac:80:4e:ca:e0:
                    6a:09:48:2a:aa:4f:da:72:89:b7:db:db:84:17:a4:
                    af:70:a5:76:74:16:3b:84:c6:0f:b2:d1:b6:82:f2:
                    60:bc:3f:68:d7:80:6a:ac:14:3f:7d:2a:69:c3:99:
                    bf:53:4d:ad:35:6b:88:0c:2a:a9:3d:69:6a:ad:4e:
                    e2:73:49:cd:a2:b1:94:24:4e:1a:4e:d7:b5:73:5d:
                    96:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:2C:2E:FA:CB:CA:F0:23:6C:4C:0C:9E:B3:07:33:66:67:C3:AF:FC
            X509v3 Authority Key Identifier:
                keyid:98:A5:A9:55:92:C0:4E:BE:D3:87:16:BC:1D:CE:35:17:B7:B1:2D:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mKWpVZLATr7Thxa8Hc41F7exLQg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:50:22:1a:af:46:85:24:9f:b3:fd:8f:d1:03:a4:5f:d2:5a:
         7e:3b:cd:93:cc:ad:42:70:d7:25:f3:bb:af:70:92:c2:58:61:
         3a:82:7c:3a:de:ec:c1:23:95:40:cd:34:e7:75:1c:62:f3:7f:
         0c:46:49:60:de:8e:dd:f5:ec:7e:0d:cc:a4:d6:8e:6d:6d:d5:
         15:f5:18:ca:12:78:9f:e3:4c:58:fd:9a:34:13:dc:c6:d0:c2:
         8c:cd:f3:f8:c1:a2:15:9a:60:ec:ea:d5:e0:18:22:9c:4b:e7:
         d3:53:e6:95:fe:4b:5d:82:05:0d:0e:21:c6:27:ad:47:cd:65:
         1f:01:27:97:2e:da:27:e9:e3:c5:16:ac:d7:be:92:1d:c4:d1:
         7f:f8:a9:93:dd:a6:57:52:59:f4:0c:53:14:ed:73:1b:99:05:
         dc:45:43:bd:f8:90:91:f7:66:8f:a4:c2:d5:f5:cb:42:3a:b2:
         77:3b:8d:07:cf:a2:68:9e:3a:cd:b2:2a:4e:47:1f:65:d9:f2:
         91:85:ad:d0:57:42:69:86:62:d5:ef:a5:f7:18:d2:06:99:fb:
         bf:6f:7b:bf:57:b4:d7:db:a2:6c:02:30:b6:cf:b9:fe:26:c8:
         1c:4b:1f:8f:aa:4a:a2:82:0f:4e:7d:23:33:80:b0:6b:e2:89:
         17:c7:a4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 21:05:05 2026 by rpki-client