Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft
File:                     dwOm1WxxgCG9nInrPEvtgX7VauU.mft (raw, json)
Hash identifier:          cod8fVkQ5d+79wQv5CcxUl8VG4IUvKy3N5irppMXQ3o=
Subject key identifier:   55:74:5F:F4:16:76:E3:2C:85:BC:02:D6:EB:D7:FE:08:54:C2:3D:E3
Authority key identifier: 77:03:A6:D5:6C:71:80:21:BD:9C:89:EB:3C:4B:ED:81:7E:D5:6A:E5
Certificate issuer:       /CN=A918F20B/serialNumber=7703A6D56C718021BD9C89EB3C4BED817ED56AE5
Certificate serial:       0478
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft
Manifest number:          0462
Signing time:             Fri 15 May 2026 00:16:32 +0000
Manifest this update:     Fri 15 May 2026 00:16:31 +0000
Manifest next update:     Fri 22 May 2026 00:16:31 +0000
Files and hashes:         1: dwOm1WxxgCG9nInrPEvtgX7VauU.crl (hash: g7bQJoj2PLKX92rZi+tkbizQZ+RmWukAs0Buk0g+2AA=)
                          2: FC5AFF000BE011ED9E3AA135C4F9AE02.roa (hash: DYt1uh7mPGDQjto9yPvu3WUF/A198ZNwxi2I+7nO8Bw=)
                          3: B56F2E9697B811ECA8AA4230C4F9AE02.roa (hash: 6ti6FbVvSqGTcr5Mk4sW/mWtZDVZBoCM8zsoDPjRWXs=)
                          4: D9AD698C961211ECB515C474C4F9AE02.roa (hash: HY8jx42KdkySd2cMF5R0KcyeEkXfACP7f6ppIrDm7WM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.crl
                          rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 May 2026 00:16:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1144 (0x478)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F20B, serialNumber=7703A6D56C718021BD9C89EB3C4BED817ED56AE5
        Validity
            Not Before: May 15 00:16:31 2026 GMT
            Not After : May 22 00:16:31 2026 GMT
        Subject: CN=6a0665e0-dda2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ea:07:1b:41:e4:25:97:c4:71:be:96:60:b9:
                    21:09:21:ad:cf:27:77:32:69:39:c7:3a:e2:f4:93:
                    86:83:14:a5:59:a6:3c:80:61:7c:50:0b:f9:3f:a7:
                    9b:84:20:01:e0:54:a6:58:aa:90:d9:2d:8e:b9:3c:
                    67:d5:6c:87:4d:eb:64:3b:38:f0:f5:96:45:cc:3b:
                    c1:9f:aa:89:94:6c:11:6c:8d:45:3e:8d:69:5b:52:
                    b5:46:17:21:15:dc:a5:08:a7:d0:f2:00:79:7a:0a:
                    a8:a7:a6:6b:6c:87:94:6b:b7:c9:5c:02:d5:8c:2c:
                    76:e3:f5:59:54:11:76:21:98:f9:c6:d1:2f:27:c1:
                    ad:a6:9f:58:d7:c5:53:7f:d0:76:ca:d3:2e:1a:4d:
                    6c:1d:c4:2d:58:76:80:b1:fb:45:96:41:e0:06:e6:
                    6c:ed:76:69:38:72:8c:18:38:49:6f:2e:76:e7:30:
                    10:46:20:ff:86:e0:fe:d7:b1:e0:f6:6c:de:98:3a:
                    ae:43:95:31:bb:d7:26:ec:fd:ef:ca:3e:31:8e:73:
                    56:86:6c:67:94:3c:dc:6f:09:23:75:ab:20:56:a6:
                    43:40:fd:70:f6:31:58:00:71:e4:26:a0:d8:b1:b6:
                    03:a2:04:fa:55:42:bc:bb:f0:5d:a8:05:9a:89:d9:
                    40:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:74:5F:F4:16:76:E3:2C:85:BC:02:D6:EB:D7:FE:08:54:C2:3D:E3
            X509v3 Authority Key Identifier:
                keyid:77:03:A6:D5:6C:71:80:21:BD:9C:89:EB:3C:4B:ED:81:7E:D5:6A:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:ae:d7:72:38:39:db:cd:a4:bf:6b:9e:4f:5f:76:9a:6c:cb:
         88:17:4b:0b:27:73:06:7d:68:4a:f3:ce:8e:fd:f0:70:9a:69:
         01:79:4e:7c:3c:ad:43:9b:d7:35:df:88:03:04:6e:e2:8d:3a:
         8d:fb:3e:b5:07:9a:c3:59:e5:0d:9b:9c:8e:8e:68:f2:f5:5d:
         49:d1:d2:0d:17:86:9d:b8:b5:00:e1:b1:5e:61:62:64:8c:ee:
         ff:fd:02:a0:61:f1:45:88:14:79:20:d7:a1:24:09:35:65:e1:
         fa:70:27:54:4a:ef:59:f8:62:eb:cf:71:c4:39:96:20:bd:84:
         08:28:d4:49:b1:20:81:0a:90:58:97:40:88:61:9e:1b:ab:35:
         1d:ee:2d:cc:98:61:ff:c7:00:d3:9a:d2:bd:ac:58:88:5e:f8:
         ce:93:1e:14:df:98:40:df:22:a4:cb:93:95:d9:c7:9e:e7:75:
         6a:d1:ea:6d:c6:01:69:1f:c4:29:d2:d0:c7:1d:c9:65:82:c8:
         1a:2d:c4:29:49:c4:55:4e:d0:ce:bd:aa:5c:c8:5a:65:2e:29:
         cc:37:e2:88:c6:99:c8:ba:44:e3:f8:75:2c:23:d9:d8:35:04:
         c2:3e:2a:86:29:08:1f:73:b7:75:29:ec:8b:a7:f5:1a:dd:43:
         18:e0:a4:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 20:21:29 2026 by rpki-client