Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft
File:                     SI-waXxEaWD_2iZD5rybRLo9HKw.mft (raw, json)
Hash identifier:          HmyS8gwKrRn/yWPJ1OJVzp2R+tINXn65lfpinLH+9So=
Subject key identifier:   BF:B4:0B:6D:BE:2E:32:55:67:05:01:98:DB:BE:68:DD:D6:E5:3D:D1
Authority key identifier: 48:8F:B0:69:7C:44:69:60:FF:DA:26:43:E6:BC:9B:44:BA:3D:1C:AC
Certificate issuer:       /CN=A91CFA8E/serialNumber=488FB0697C446960FFDA2643E6BC9B44BA3D1CAC
Certificate serial:       36
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SI-waXxEaWD_2iZD5rybRLo9HKw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft
Manifest number:          34
Signing time:             Tue 03 Mar 2026 02:43:16 +0000
Manifest this update:     Tue 03 Mar 2026 02:43:16 +0000
Manifest next update:     Tue 10 Mar 2026 02:43:16 +0000
Files and hashes:         1: SI-waXxEaWD_2iZD5rybRLo9HKw.crl (hash: RGXQMnDy6YtZfFh0sT7lSqSe/qugS/uGXwcQWg0mFN0=)
                          2: 160AF8E8CE8D11F0BE6FB51EC4F9AE02.roa (hash: w2I93tWFGO9r1ycsLwYKSHur6VSKhkkXWi+U4yYabwI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.crl
                          rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SI-waXxEaWD_2iZD5rybRLo9HKw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 02:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFA8E, serialNumber=488FB0697C446960FFDA2643E6BC9B44BA3D1CAC
        Validity
            Not Before: Mar  3 02:43:16 2026 GMT
            Not After : Mar 10 02:43:16 2026 GMT
        Subject: CN=69a64ac4-b1fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ba:85:a5:30:9c:9c:7a:eb:6c:41:6c:3b:19:
                    8b:a7:a0:c1:c3:0e:da:af:0d:c7:e1:3f:16:0f:4e:
                    b6:9e:10:ce:09:e6:ff:9c:e3:06:5c:c1:5a:a3:86:
                    2e:b5:8a:78:27:fe:1e:9f:d2:06:a7:28:f6:66:61:
                    12:05:3f:09:30:e8:bc:6e:e4:a5:cb:92:86:84:6d:
                    49:89:49:af:e2:ac:59:5b:2f:ff:2c:aa:68:22:bc:
                    d8:92:a9:4a:c3:f2:09:66:ac:a4:e4:bc:1f:a6:69:
                    2c:35:82:14:39:d2:45:a0:57:81:9e:b4:8f:2f:14:
                    53:50:f6:10:30:65:76:48:b4:6b:1b:b6:91:09:f1:
                    3b:64:cf:2a:16:e8:ed:27:75:f9:bc:28:14:0d:3d:
                    b9:c5:94:c8:fe:71:75:35:24:df:c2:25:72:54:85:
                    fa:50:bd:04:f7:05:43:70:7b:51:d8:7f:00:4e:23:
                    c3:67:84:aa:a3:c3:8c:76:de:81:3b:8f:93:da:08:
                    c3:77:e9:1d:07:77:8a:ab:53:e3:d5:cb:dc:5c:67:
                    ef:f4:29:b4:a3:56:86:4d:b9:ff:4f:cd:bc:87:a7:
                    86:ee:87:d8:1d:5c:39:c2:70:e3:83:25:7d:e5:5c:
                    c7:c0:cb:bb:f8:6c:8f:af:f8:00:76:15:e8:1c:fa:
                    44:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B4:0B:6D:BE:2E:32:55:67:05:01:98:DB:BE:68:DD:D6:E5:3D:D1
            X509v3 Authority Key Identifier:
                keyid:48:8F:B0:69:7C:44:69:60:FF:DA:26:43:E6:BC:9B:44:BA:3D:1C:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SI-waXxEaWD_2iZD5rybRLo9HKw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:87:20:53:a0:ff:4a:fc:e3:0e:ce:df:49:28:fa:29:c3:d9:
         50:42:91:01:4e:94:0c:29:22:a4:39:c0:c6:7f:3b:e1:0e:e3:
         5f:d8:0b:e2:23:d6:95:28:2b:b1:3b:ff:39:0b:7a:17:4f:81:
         0f:4f:7a:cc:8e:9c:95:d0:12:13:52:de:9b:0b:79:80:37:3f:
         c3:32:f2:e8:89:c8:92:11:45:54:b0:c7:d9:f9:ab:6a:ba:8b:
         25:6a:87:20:95:e5:e4:da:31:04:31:23:05:5c:5b:d0:9a:56:
         91:d7:f4:d5:dd:b4:b9:f8:81:93:9c:be:6c:a3:26:a9:d7:66:
         51:00:84:a4:ce:14:23:27:ce:01:1c:d6:c5:d7:4c:60:50:a4:
         cf:69:00:53:de:94:4f:aa:87:a6:37:82:e1:17:c9:26:2f:62:
         7d:d8:20:87:f6:ab:e2:df:45:ec:86:8f:88:13:f2:ab:a5:db:
         bc:6a:43:7d:c6:dd:36:99:fa:7b:0f:0f:51:d9:b7:09:3f:60:
         bf:ce:7c:64:6e:a6:1e:d5:5a:dd:28:09:86:3c:e1:af:b5:ce:
         44:29:09:8c:92:1b:c7:69:d2:b5:df:a9:68:4d:91:1b:df:2c:
         1f:dd:a5:cf:d4:c9:d9:22:9d:de:f4:0b:43:90:93:f9:44:a9:
         f0:2a:5a:6d
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
RkE4RTExMC8GA1UEBRMoNDg4RkIwNjk3QzQ0Njk2MEZGREEyNjQzRTZCQzlCNDRC
QTNEMUNBQzAeFw0yNjAzMDMwMjQzMTZaFw0yNjAzMTAwMjQzMTZaMBgxFjAUBgNV
BAMTDTY5YTY0YWM0LWIxZmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDMuoWlMJyceutsQWw7GYunoMHDDtqvDcfhPxYPTraeEM4J5v+c4wZcwVqjhi61
ingn/h6f0ganKPZmYRIFPwkw6Lxu5KXLkoaEbUmJSa/irFlbL/8sqmgivNiSqUrD
8glmrKTkvB+maSw1ghQ50kWgV4GetI8vFFNQ9hAwZXZItGsbtpEJ8TtkzyoW6O0n
dfm8KBQNPbnFlMj+cXU1JN/CJXJUhfpQvQT3BUNwe1HYfwBOI8NnhKqjw4x23oE7
j5PaCMN36R0Hd4qrU+PVy9xcZ+/0KbSjVoZNuf9PzbyHp4buh9gdXDnCcOODJX3l
XMfAy7v4bI+v+AB2Fegc+kRVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUv7QLbb4u
MlVnBQGY275o3dblPdEwHwYDVR0jBBgwFoAUSI+waXxEaWD/2iZD5rybRLo9HKww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNGQThFLzZCOUEyMzM4Q0U2
RjExRjBBMzIzREY1NUM0RjlBRTAyL1NJLXdhWHhFYVdEXzJpWkQ1cnliUkxvOUhL
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvU0ktd2FYeEVhV0RfMmlaRDVyeWJSTG85SEt3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNG
QThFLzZCOUEyMzM4Q0U2RjExRjBBMzIzREY1NUM0RjlBRTAyL1NJLXdhWHhFYVdE
XzJpWkQ1cnliUkxvOUhLdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBLhyBToP9K/OMOzt9JKPopw9lQQpEBTpQMKSKkOcDGfzvhDuNf2AviI9aVKCux
O/85C3oXT4EPT3rMjpyV0BITUt6bC3mANz/DMvLoiciSEUVUsMfZ+atquoslaocg
leXk2jEEMSMFXFvQmlaR1/TV3bS5+IGTnL5soyap12ZRAISkzhQjJ84BHNbF10xg
UKTPaQBT3pRPqoemN4LhF8kmL2J92CCH9qvi30Xsho+IE/Krpdu8akN9xt02mfp7
Dw9R2bcJP2C/znxkbqYe1VrdKAmGPOGvtc5EKQmMkhvHadK136loTZEb3ywf3aXP
1MnZIp3e9AtDkJP5RKnwKlpt
-----END CERTIFICATE-----
Generated at Wed Mar 4 08:28:30 2026 by rpki-client