Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft
File:                     awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft (raw, json)
Hash identifier:          Fv8Z/dOCr8h27uoBUefteYgfJVj3FqpuO7dWET6D1QQ=
Subject key identifier:   24:C2:45:CD:7B:E2:D8:42:1D:A5:64:4C:BD:BC:37:71:A3:4E:C5:6E
Authority key identifier: 6B:0C:B5:95:03:DA:89:5F:F9:42:69:D7:A9:BC:20:26:17:04:DC:E9
Certificate issuer:       /CN=A91A45E0/serialNumber=6B0CB59503DA895FF94269D7A9BC20261704DCE9
Certificate serial:       0CE9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft
Manifest number:          0CB8
Signing time:             Mon 30 Mar 2026 18:28:41 +0000
Manifest this update:     Mon 30 Mar 2026 18:28:40 +0000
Manifest next update:     Mon 06 Apr 2026 18:28:40 +0000
Files and hashes:         1: awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl (hash: 4c7O8SZ0Q27LQamsGzx9DG9FBPXLPjEUu8bhGKPCsSM=)
                          2: 7A0359125C0E11ECA36CBF0FC4F9AE02.roa (hash: XSNUZ0r/o28q/R/sUwKxLrt1L1Gim57J92y6DiX5k8o=)
                          3: 84CFF0D6D2F311EEAFCF3273C4F9AE02.roa (hash: MNLepmkmDKIhV6gh+S8mCUAnPQoTINkDmI9IbqljxRQ=)
                          4: DF1E2FEA97D611EB8BEF8223C4F9AE02.roa (hash: Q/z2xPgEev/jp2CYBsFY4fwnHwuGTUM4Sob54bGfHrU=)
                          5: 1ECA8050696211EC8A05D115C4F9AE02.roa (hash: UNRqxb3T+0nOQ/GO8zWJElSOEcU0ZScoqyo9xYCh4+U=)
                          6: 884C5FB8E60411EFBF5A7957C4F9AE02.roa (hash: oZ5Fktk/X7IkMniZfmOwOSIMZJUooUAA4uRqYhgv5JA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl
                          rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3305 (0xce9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A45E0, serialNumber=6B0CB59503DA895FF94269D7A9BC20261704DCE9
        Validity
            Not Before: Mar 30 18:28:40 2026 GMT
            Not After : Apr  6 18:28:40 2026 GMT
        Subject: CN=69cac0d8-7244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fb:52:4d:67:81:07:54:f3:47:d5:09:7f:bc:
                    b3:42:a3:73:8a:cb:4e:f2:6c:74:0a:4d:83:69:b5:
                    b5:08:04:a8:5b:e1:58:2e:72:70:af:f5:e6:67:9a:
                    da:73:0c:b8:40:c5:0c:4d:39:33:4c:8a:a6:e7:aa:
                    8e:49:cb:65:14:a2:fc:7b:4d:70:13:9f:92:5b:89:
                    98:21:4d:96:85:10:31:14:0f:f2:0c:98:fd:b8:36:
                    d9:f7:96:13:71:e5:8b:c9:a4:6d:ef:76:e3:c2:50:
                    19:27:aa:15:07:1e:67:49:70:c3:ec:19:6c:f1:3e:
                    ea:2c:d4:74:6f:67:7b:a4:9d:54:33:df:2f:2e:aa:
                    a2:46:e4:01:b2:d8:f5:93:6e:fb:a4:6d:11:4c:4b:
                    ea:b0:5f:98:de:e5:92:50:93:d3:47:57:e8:9f:de:
                    cd:b2:1b:6c:04:67:2f:a2:f3:db:79:0b:a6:e6:90:
                    89:e9:6e:45:99:bf:bc:35:e7:b4:60:15:ec:6d:c6:
                    ed:0a:ba:24:64:9d:17:4e:f1:8a:6d:d1:9a:5d:58:
                    4b:3d:4d:24:02:09:ca:d1:14:ed:d7:bf:ee:8c:3b:
                    fa:11:a8:a2:39:2b:9c:b4:a3:fa:3a:20:44:e9:ea:
                    f3:41:8a:2a:a6:58:5c:87:a1:7c:02:7e:9f:5b:f9:
                    3e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:C2:45:CD:7B:E2:D8:42:1D:A5:64:4C:BD:BC:37:71:A3:4E:C5:6E
            X509v3 Authority Key Identifier:
                keyid:6B:0C:B5:95:03:DA:89:5F:F9:42:69:D7:A9:BC:20:26:17:04:DC:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:c2:d3:cd:2c:8a:27:e9:47:47:84:fc:c8:df:b1:40:11:a2:
         29:69:64:7f:59:b7:5c:66:4e:9d:bf:fe:2e:e5:4b:19:99:6b:
         c5:42:06:d0:a2:eb:10:60:c2:58:60:ec:83:57:9d:7a:c0:ba:
         3a:58:3e:65:b4:fb:fb:d4:84:b5:fa:e8:f5:cb:7a:52:c0:64:
         16:12:22:0c:4c:9a:07:91:c7:41:8d:ae:a4:d7:1f:97:ea:f2:
         08:82:31:1a:68:47:3d:23:25:18:d4:ac:25:80:04:4e:ac:0d:
         70:d7:67:4d:a6:df:92:fe:ef:5b:fb:9b:69:48:ae:5f:88:aa:
         8f:0a:3c:33:ff:a0:9b:1f:78:78:67:88:88:90:d1:b9:c2:5d:
         07:eb:49:04:b2:fc:0b:15:0d:5f:69:cc:af:e9:99:e7:31:57:
         14:0e:ed:cd:65:ec:c1:a2:4b:b9:82:35:44:6e:95:c9:42:56:
         26:0c:67:79:b5:33:9b:d1:66:73:1e:a4:61:28:6c:68:da:c5:
         a9:41:3d:e2:de:17:95:29:91:46:0c:d4:f4:d0:a2:31:21:c9:
         00:5c:9b:29:6d:39:5b:05:62:ff:5b:5f:67:7b:9c:81:31:82:
         ff:3d:d3:72:b2:18:56:e8:d6:3f:da:b2:cf:11:25:d7:3a:9e:
         20:15:2c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 31 01:48:31 2026 by rpki-client