Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft
File:                     1gwwsan1nJWa1JZ_L21XKst1KZw.mft (raw, json)
Hash identifier:          STuv/FgUPp815sKxBt8HcOauI+0yGPlbAl1puRQ355g=
Subject key identifier:   EB:D0:8A:28:9F:12:00:FE:D2:A8:C1:16:53:57:3F:29:AC:1E:A0:73
Authority key identifier: D6:0C:30:B1:A9:F5:9C:95:9A:D4:96:7F:2F:6D:57:2A:CB:75:29:9C
Certificate issuer:       /CN=A91E5EEA/serialNumber=D60C30B1A9F59C959AD4967F2F6D572ACB75299C
Certificate serial:       016F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1gwwsan1nJWa1JZ_L21XKst1KZw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft
Manifest number:          0158
Signing time:             Thu 29 Oct 2026 05:58:43 +0000
Manifest this update:     Thu 29 Oct 2026 05:58:42 +0000
Manifest next update:     Thu 05 Nov 2026 05:58:42 +0000
Files and hashes:         1: 1gwwsan1nJWa1JZ_L21XKst1KZw.crl (hash: 7DyBs0iCPsEpR0i0n/ckA1PshHLRy8Sl66EK90mnBEU=)
                          2: 2B6A4C480CDC11F0BAA65183C4F9AE02.roa (hash: RIBR6Aq7qG+43hv6ewZdSAx3b9VUtHjFxXtxd32vcIM=)
                          3: 14B5D8CEC4D611F1A168CFE76811F970.roa (hash: Cwr36ZTdrXGOFgQi5Ql2vu09j7tS+37OTzos3CAJEvo=)
                          4: A7C0D96E0CDD11F0A8463D28C4F9AE02.roa (hash: tJM1vGo1elqnkueYKqo//TvJdFjq9C9IRU+57/dBaoA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.crl
                          rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1gwwsan1nJWa1JZ_L21XKst1KZw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Nov 2026 05:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 367 (0x16f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5EEA, serialNumber=D60C30B1A9F59C959AD4967F2F6D572ACB75299C
        Validity
            Not Before: Oct 29 05:58:42 2026 GMT
            Not After : Nov  5 05:58:42 2026 GMT
        Subject: CN=6ae2e093-28cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f8:96:37:2a:96:3f:36:57:71:78:f1:24:a0:
                    b6:ff:10:e9:8e:99:64:19:2e:46:78:bf:fb:35:b0:
                    bc:28:d6:99:5e:cd:36:18:44:90:85:50:15:0e:6e:
                    e1:bf:4c:d7:2b:3e:18:9d:aa:94:a7:7f:cb:71:1a:
                    56:f9:f6:1c:6a:d2:da:ca:b8:6b:ad:e3:17:65:cc:
                    69:1c:d3:72:07:93:55:43:a3:e4:6c:9a:0f:6c:82:
                    75:15:b4:5c:85:06:4a:51:9d:a5:42:12:fc:bf:ac:
                    84:f0:28:c3:51:b0:54:cb:77:4f:4d:43:5e:d7:13:
                    02:15:e9:3f:d3:d6:aa:6a:1c:77:6e:31:d3:57:3e:
                    3e:2f:cc:9e:e0:e7:4e:4e:c2:e5:e1:5d:91:96:71:
                    fc:2d:41:57:8b:d8:96:b4:dd:85:9e:c4:ee:25:0f:
                    34:de:44:d5:c7:bb:65:92:3f:a2:3c:8c:a9:49:c8:
                    bd:7b:7e:f8:9b:54:9e:b6:93:a5:a3:1b:21:a9:20:
                    1f:7a:d2:7a:b4:38:d2:15:b6:58:ca:d8:74:36:b8:
                    38:43:b8:2d:b8:4b:d4:1c:24:31:c7:c9:e7:16:08:
                    dc:c6:dd:c0:68:85:bc:33:2a:79:79:65:7a:85:e7:
                    a6:17:08:bd:30:c1:8d:61:b9:b5:f1:68:a9:11:cc:
                    f8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D0:8A:28:9F:12:00:FE:D2:A8:C1:16:53:57:3F:29:AC:1E:A0:73
            X509v3 Authority Key Identifier:
                keyid:D6:0C:30:B1:A9:F5:9C:95:9A:D4:96:7F:2F:6D:57:2A:CB:75:29:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1gwwsan1nJWa1JZ_L21XKst1KZw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:9f:31:fe:b7:f3:b9:29:0e:cf:18:9e:35:99:44:69:56:74:
         cb:3f:9f:d9:b0:ad:73:bf:0b:a7:99:5f:ba:19:7e:23:9c:db:
         85:84:ed:e9:5b:ee:6c:aa:a9:51:3e:8c:28:a1:6e:b0:bf:c9:
         d9:19:c1:1e:63:1a:7e:5f:97:15:43:1f:5f:91:0f:f6:4d:cc:
         22:8d:5a:93:6d:88:a1:65:f2:04:79:1f:e6:fa:93:c0:88:28:
         62:49:71:10:93:37:e2:ae:53:3a:13:3c:2c:10:cd:71:44:aa:
         5d:c0:ed:4c:78:a5:04:1d:49:dc:c7:70:e1:2d:e4:7b:56:61:
         cc:a1:4f:be:54:1c:1d:ca:10:ea:3b:e9:fc:fd:8d:d0:d9:54:
         60:8f:85:71:93:20:f3:51:7a:e7:f5:be:ac:d0:0a:28:3d:24:
         4c:e8:df:6f:17:6e:f3:72:58:9c:46:e6:30:91:76:f3:5a:09:
         99:cf:c3:89:05:df:8b:3a:86:00:12:21:47:ac:aa:0f:09:15:
         0d:6a:ec:47:4c:5e:5f:68:a0:bd:17:15:46:67:c6:bb:78:d6:
         e9:89:2c:28:68:ae:99:fa:36:c0:ad:84:8b:b2:ce:b0:c0:be:
         05:49:8c:63:38:33:1c:53:dc:86:55:cf:d5:1e:95:c9:2b:af:
         6c:48:0d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 13:55:57 2026 by rpki-client