Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft
File:                     Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft (raw, json)
Hash identifier:          QhXs2WmDa4qF3eLAkBr+2F9MtqTkc00wOwvphpRovwk=
Subject key identifier:   4E:17:E1:6A:B0:B5:95:26:53:74:C9:17:BC:EB:25:6A:65:66:6E:74
Authority key identifier: 17:0E:9C:76:76:43:C3:C1:F6:05:79:40:86:48:A3:F0:DA:84:04:5A
Certificate issuer:       /CN=A917EFB8/serialNumber=170E9C767643C3C1F60579408648A3F0DA84045A
Certificate serial:       354D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft
Manifest number:          3544
Signing time:             Wed 20 May 2026 14:50:12 +0000
Manifest this update:     Wed 20 May 2026 14:50:12 +0000
Manifest next update:     Wed 27 May 2026 14:50:12 +0000
Files and hashes:         1: Fw6cdnZDw8H2BXlAhkij8NqEBFo.crl (hash: Y2wawekwlGURH3HJZ7A75M9VsrAf1DEN5L70HmlUMVA=)
                          2: E68E0FD4077B11EB98CA5D1CC4F9AE02.roa (hash: rIwXuVAKzTQeQgdJujiwbvj/r919Ii7m2oS5MI0eTgQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.crl
                          rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 14:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13645 (0x354d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917EFB8, serialNumber=170E9C767643C3C1F60579408648A3F0DA84045A
        Validity
            Not Before: May 20 14:50:12 2026 GMT
            Not After : May 27 14:50:12 2026 GMT
        Subject: CN=6a0dca24-675a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2c:34:4c:23:79:a5:b9:a3:b9:63:4d:44:29:
                    f6:fe:69:42:02:7c:6e:85:51:82:24:85:0a:9a:ae:
                    fe:a0:e8:99:e5:0a:77:ae:38:a1:80:98:51:a1:8c:
                    28:be:6c:de:d0:80:92:35:68:19:87:56:3a:19:ea:
                    2b:45:d2:0f:89:2f:b2:5e:9c:ab:ca:d3:9c:fe:29:
                    97:bd:83:b0:9c:6a:fc:97:eb:f8:05:b5:6d:ca:82:
                    98:80:7b:8c:90:2b:d3:a5:7a:76:85:7c:33:81:1d:
                    5d:2d:d8:5f:06:a7:b7:50:6c:6b:a3:b8:f4:7e:49:
                    ac:9f:9b:5e:7a:a0:b3:db:42:e6:89:33:af:e6:6d:
                    f6:cf:39:8a:2c:27:72:fd:4e:46:c8:a0:dd:f7:15:
                    49:84:16:1f:f4:00:93:73:02:4f:10:6a:df:1a:90:
                    c8:26:83:15:40:45:b1:cc:09:f2:28:6d:3c:bc:05:
                    71:91:b0:4a:f1:48:d9:59:21:53:1b:56:9a:36:61:
                    5c:de:da:80:68:b6:f5:98:51:7f:de:27:85:f3:ba:
                    19:7e:e9:bc:70:dd:c6:cc:44:9d:4d:6c:6a:2f:b3:
                    1a:e4:47:03:77:d3:42:1b:7d:d3:8b:f3:8f:9b:ff:
                    72:96:1a:46:c7:2e:7a:c3:c7:30:81:ba:b6:2a:a3:
                    a3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:17:E1:6A:B0:B5:95:26:53:74:C9:17:BC:EB:25:6A:65:66:6E:74
            X509v3 Authority Key Identifier:
                keyid:17:0E:9C:76:76:43:C3:C1:F6:05:79:40:86:48:A3:F0:DA:84:04:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:79:10:2c:3f:6e:76:6b:4b:ff:22:83:52:44:8a:a4:9d:94:
         9e:43:02:03:cc:f8:1e:26:e0:6a:f6:5c:26:71:a1:b5:a3:4f:
         d8:19:68:51:87:3f:80:eb:84:0a:b3:22:b8:fd:91:c8:c7:61:
         88:1e:84:1d:0d:7e:2f:00:7f:8f:4b:1b:0e:05:7c:08:72:94:
         7d:11:e8:b8:2f:5c:10:3c:a3:15:1b:41:aa:f4:bf:af:d1:95:
         e5:b8:5d:0e:62:bb:4b:d0:5b:ff:1f:1a:63:3b:ae:e9:3a:a9:
         71:9f:c8:c5:2e:6e:05:ce:61:fe:5e:5b:93:36:25:9e:a9:37:
         9b:5e:1b:9e:2a:d8:84:4f:e8:45:5a:00:02:34:b6:01:3b:1a:
         fe:a7:4a:1d:59:46:94:1e:01:e6:92:67:eb:31:fc:aa:c0:9c:
         db:f5:35:5e:b2:b0:48:90:ba:20:26:25:dc:8a:dd:73:36:6e:
         ec:dc:20:e7:33:08:b3:29:d6:06:e3:38:5b:94:e7:0b:d7:4d:
         f0:27:a4:28:15:7b:a3:e1:a9:61:38:62:f0:c9:9f:12:d1:5f:
         1b:1b:b3:d8:96:ab:d5:2c:e7:68:27:a8:78:43:c1:eb:d6:8e:
         0b:3f:72:af:a3:54:9c:4f:a4:af:e4:d2:2f:3b:0c:43:f4:b0:
         8e:49:51:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:39:30 2026 by rpki-client