Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft
File:                     1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft (raw, json)
Hash identifier:          7OSGQc3VVQkV34O+KUBuKTHNzfMnIzOHx+Qy8H/zoyE=
Subject key identifier:   FB:CF:87:41:E9:BE:B3:83:9D:95:80:20:AB:13:94:F6:68:E3:F7:ED
Authority key identifier: D7:0E:59:4B:81:A1:65:8C:2A:DD:F4:A3:26:8E:F9:CF:08:F9:65:0F
Certificate issuer:       /CN=A91CFFBE/serialNumber=D70E594B81A1658C2ADDF4A3268EF9CF08F9650F
Certificate serial:       062B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft
Manifest number:          0626
Signing time:             Mon 20 Apr 2026 22:42:40 +0000
Manifest this update:     Mon 20 Apr 2026 22:42:40 +0000
Manifest next update:     Mon 27 Apr 2026 22:42:40 +0000
Files and hashes:         1: 1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.crl (hash: Bb/DX4CSQeE66T/R81BatQZW66oyBXM4PUdVQ9zQTa4=)
                          2: 05A2A4008FE811EEACB1296AC4F9AE02.roa (hash: M5Aw+b/bHsIys2hkZbVggFi9gRiAWBXbAHIAYVqCW7o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.crl
                          rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Apr 2026 22:42:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1579 (0x62b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFFBE, serialNumber=D70E594B81A1658C2ADDF4A3268EF9CF08F9650F
        Validity
            Not Before: Apr 20 22:42:40 2026 GMT
            Not After : Apr 27 22:42:40 2026 GMT
        Subject: CN=69e6abe0-0708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:45:b2:e9:78:45:31:66:af:2b:c0:21:b5:a9:
                    2e:6d:47:d6:79:b6:83:a8:75:2f:40:03:b6:81:43:
                    9f:77:fe:3c:b4:06:ee:f3:bb:07:d8:aa:17:26:05:
                    2f:f5:cb:1e:0d:9c:61:dd:67:19:0f:2a:08:0a:06:
                    fd:37:29:80:d8:bf:70:4d:3e:21:fe:a5:36:b2:f5:
                    77:9a:2e:08:2c:32:8c:ea:a4:56:45:e0:07:eb:3d:
                    ab:75:d9:f1:01:a8:6b:35:65:b1:49:20:6b:94:fa:
                    35:3f:a5:d2:71:81:f3:91:27:e3:24:a1:f9:6c:7f:
                    fa:e9:34:17:54:80:cb:91:93:21:f4:70:a3:05:c2:
                    0b:d0:53:f6:72:0f:7e:46:8a:38:64:80:1c:3f:da:
                    80:51:a3:88:5e:81:10:78:e7:29:84:25:1e:2a:8d:
                    e8:00:f1:60:f8:39:93:24:6c:3d:94:bf:99:e3:6d:
                    0f:b7:84:2a:c9:05:a6:c8:00:f9:e8:47:f5:01:e8:
                    da:da:cf:de:b7:56:f9:c4:c5:b2:c9:8b:fe:26:d8:
                    fa:b9:a9:94:b3:15:66:c8:29:ac:6f:e6:96:85:f0:
                    0c:bb:aa:9a:fc:91:b1:51:a9:a6:3a:45:92:61:f7:
                    4c:32:f8:f7:1c:e7:1d:32:3d:71:11:58:da:9b:32:
                    bc:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:CF:87:41:E9:BE:B3:83:9D:95:80:20:AB:13:94:F6:68:E3:F7:ED
            X509v3 Authority Key Identifier:
                keyid:D7:0E:59:4B:81:A1:65:8C:2A:DD:F4:A3:26:8E:F9:CF:08:F9:65:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:12:d2:c3:f3:81:9b:9b:15:09:65:79:11:ed:f2:2c:33:fb:
         8b:ae:9f:c9:44:63:50:b5:36:61:41:60:ab:d3:fe:d8:71:d8:
         a5:2c:ff:92:bf:f7:70:52:8b:7e:ca:08:b8:1e:e1:30:b3:de:
         a1:0c:ff:70:0f:99:35:e2:4d:af:59:11:6d:bf:e0:0b:d6:00:
         7f:0b:f3:aa:f7:94:f5:7f:a7:ee:cf:f9:4f:a9:82:ee:48:34:
         73:ea:55:0b:73:61:7a:77:7e:bf:0f:9e:85:57:93:0e:a8:a4:
         bb:21:1f:73:e6:ab:09:4c:4e:5c:87:1f:70:a8:7e:ed:af:f7:
         5c:a2:e7:8b:75:06:b3:e2:3c:c9:ee:64:e5:a6:57:9c:c6:b2:
         64:9b:9a:41:f1:b7:2e:95:ad:5f:98:e9:1c:77:48:bb:ab:45:
         6f:dd:5f:91:61:6e:81:0b:5f:b6:f8:d6:e9:9b:a8:0f:40:be:
         b6:33:0b:61:9a:97:5b:4f:d1:3c:bb:f2:65:34:d6:c4:d0:34:
         72:01:70:f9:75:9b:a5:73:8e:98:dd:48:4b:d7:2f:70:6e:1b:
         93:41:b3:4a:c9:f0:6f:f3:58:0a:74:31:ff:05:53:30:86:59:
         60:3c:c1:7c:3e:1b:7e:6d:58:d2:44:e1:f8:fe:02:99:45:dc:
         e5:d1:65:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 03:36:14 2026 by rpki-client