Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft
File:                     FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft (raw, json)
Hash identifier:          svguCivBpB6+bX+Phj0/mWEm6sYudmSARa6sDcoTM1U=
Subject key identifier:   CE:AA:06:63:3D:0A:C9:DA:18:22:D9:92:1B:32:5E:F3:E5:A5:AE:77
Authority key identifier: 15:6D:4A:9C:6F:15:EB:2B:4B:3F:36:7D:69:FA:A2:51:01:28:07:88
Certificate issuer:       /CN=A91A5EBA/serialNumber=156D4A9C6F15EB2B4B3F367D69FAA25101280788
Certificate serial:       015D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW1KnG8V6ytLPzZ9afqiUQEoB4g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft
Manifest number:          0154
Signing time:             Sun 05 Apr 2026 04:29:17 +0000
Manifest this update:     Sun 05 Apr 2026 04:29:16 +0000
Manifest next update:     Sun 12 Apr 2026 04:29:16 +0000
Files and hashes:         1: FW1KnG8V6ytLPzZ9afqiUQEoB4g.crl (hash: PO940rjKu5kjuu/ODoldj+SW4Az5CpqoZjfSu8IuO8k=)
                          2: 80F32E7C2C5511EF83ECC535C4F9AE02.roa (hash: jwNqpqTZXno1DyXY2sIyAh2YiWEDOdSFaYY50G2wOTA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.crl
                          rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW1KnG8V6ytLPzZ9afqiUQEoB4g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 04:29:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 349 (0x15d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5EBA, serialNumber=156D4A9C6F15EB2B4B3F367D69FAA25101280788
        Validity
            Not Before: Apr  5 04:29:16 2026 GMT
            Not After : Apr 12 04:29:16 2026 GMT
        Subject: CN=69d1e51d-752e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:42:16:67:5d:c6:77:c9:ed:0d:f6:bc:21:4b:
                    49:f9:a4:73:47:13:92:a3:26:1f:72:21:8d:1a:41:
                    6a:b9:0f:15:ef:01:58:59:a4:45:90:b7:82:4b:04:
                    a2:8d:78:b2:89:e5:f9:da:58:88:f6:39:a6:04:62:
                    47:00:92:47:23:70:29:4f:78:8c:cc:e4:aa:eb:db:
                    c4:b5:e5:71:4d:14:e0:43:d0:64:63:19:44:60:4e:
                    cb:59:9e:9f:59:1f:dc:30:0c:07:2a:65:65:08:c8:
                    8b:b5:8b:bb:a5:e3:78:c4:5d:ff:f2:5e:d4:fa:09:
                    3b:bf:90:a1:ad:1b:f9:0f:e0:bf:4e:3c:0e:cf:c6:
                    b2:ac:97:2f:1c:8f:01:65:e2:9a:74:6e:30:01:23:
                    89:35:dc:dc:8c:39:91:62:32:d3:1b:a5:2d:59:95:
                    91:0a:67:40:2e:08:d4:6a:19:c7:dc:a6:26:30:8c:
                    cb:86:3c:0d:04:ad:d3:dd:c9:96:fc:98:4f:52:32:
                    34:7b:1a:0b:83:22:50:e7:96:a6:97:99:9d:9c:2e:
                    6c:bc:6d:56:58:a5:47:eb:7b:be:b5:39:03:82:12:
                    56:60:bb:2a:a7:97:d6:36:8b:c3:88:57:f4:91:88:
                    18:b1:39:2b:5b:ac:b6:3a:39:77:4a:29:4b:a0:be:
                    d4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:AA:06:63:3D:0A:C9:DA:18:22:D9:92:1B:32:5E:F3:E5:A5:AE:77
            X509v3 Authority Key Identifier:
                keyid:15:6D:4A:9C:6F:15:EB:2B:4B:3F:36:7D:69:FA:A2:51:01:28:07:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW1KnG8V6ytLPzZ9afqiUQEoB4g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:31:cf:28:cb:dc:71:2f:cb:13:a9:ca:83:05:29:b8:62:bd:
         a0:74:31:01:96:6c:96:fb:d2:83:9b:df:1d:08:c5:87:f8:c8:
         d5:ca:89:c0:f7:d5:cc:c1:b9:68:4f:03:f8:b9:14:81:06:63:
         cb:b5:5f:b1:ca:6e:f9:b0:5d:91:ad:bf:de:61:19:b2:af:f7:
         6c:bc:18:09:6e:80:16:eb:9f:29:bd:4a:99:42:53:18:ee:68:
         63:ab:23:37:a6:ef:e7:83:c9:31:62:93:46:8a:e3:a8:bb:bf:
         21:b6:82:82:52:bf:fe:33:e6:55:4f:c3:71:92:f2:2a:8d:95:
         39:a5:93:b0:9b:82:30:85:cf:8e:9e:3b:bc:b9:e2:5e:c7:9f:
         3b:58:4b:95:12:e0:26:70:a2:1b:61:03:8e:6b:ba:b5:ef:27:
         a0:e9:1a:e6:3b:c6:65:b6:14:17:0b:4e:1b:d0:ab:e6:87:32:
         b6:c1:99:14:5c:7e:36:51:64:be:3a:e3:e2:04:e1:cb:cb:43:
         f2:50:f5:1e:35:7b:1c:f8:78:c2:b9:a6:4e:71:fa:b0:d3:8f:
         7d:87:fa:41:3c:2b:e3:65:8d:1e:cd:84:f7:44:44:a4:40:46:
         4e:82:bc:5f:4e:21:df:0e:57:c9:83:49:dc:23:8e:9e:36:f4:
         5f:f3:98:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:25 2026 by rpki-client