Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft
File:                     RWr15WZ94kipzwzrkMbRs9Ptb6g.mft (raw, json)
Hash identifier:          IefZE9RaamgzPJXRfEoE9DJbogVH8Zd3mb+643klzoQ=
Subject key identifier:   D5:25:FF:C7:85:85:5B:9F:A0:E0:21:95:68:FA:06:89:F0:A0:5E:B5
Authority key identifier: 45:6A:F5:E5:66:7D:E2:48:A9:CF:0C:EB:90:C6:D1:B3:D3:ED:6F:A8
Certificate issuer:       /CN=A91E8903/serialNumber=456AF5E5667DE248A9CF0CEB90C6D1B3D3ED6FA8
Certificate serial:       02B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft
Manifest number:          029D
Signing time:             Thu 11 Jun 2026 04:00:21 +0000
Manifest this update:     Thu 11 Jun 2026 04:00:20 +0000
Manifest next update:     Thu 18 Jun 2026 04:00:20 +0000
Files and hashes:         1: RWr15WZ94kipzwzrkMbRs9Ptb6g.crl (hash: C3fwcrkGgWhuYhzin0y5d5+px7k3pNtKbx1zeQQCuDg=)
                          2: 5AFFB9E48C2211EDAE44DD87C4F9AE02.roa (hash: bV8Oy6pvWhzdI41vVzxNxINTpeT1m1NJnvYB3no4MKo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.crl
                          rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 04:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 694 (0x2b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8903, serialNumber=456AF5E5667DE248A9CF0CEB90C6D1B3D3ED6FA8
        Validity
            Not Before: Jun 11 04:00:20 2026 GMT
            Not After : Jun 18 04:00:20 2026 GMT
        Subject: CN=6a2a32d4-653d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:3f:66:12:67:c7:33:05:08:74:a5:25:31:95:
                    f9:df:27:f2:af:f8:a6:ab:fc:e2:eb:9f:ed:2a:46:
                    b6:fb:11:55:f8:4d:49:0d:ac:2d:43:1f:e4:4a:8c:
                    95:17:43:f3:41:72:e6:1b:aa:11:6a:19:ad:dd:7c:
                    2e:95:61:6a:ec:59:4e:f8:6f:08:c3:dd:9c:32:1b:
                    18:81:f4:7d:86:7f:6f:09:b2:77:dd:fa:cc:c6:41:
                    4c:31:69:07:1c:8f:e5:c7:8c:e6:3c:fb:66:3d:e8:
                    5e:3a:71:c1:f6:c8:8a:13:ee:d3:fe:69:ee:ad:e8:
                    48:c6:91:20:c6:e8:0e:b3:6b:01:56:64:fc:b5:c2:
                    1d:12:41:fe:e8:3e:b6:ec:40:dc:4e:eb:14:68:65:
                    12:c6:20:90:47:d7:fe:93:70:12:6e:fc:4e:5b:d2:
                    11:ba:2e:87:a8:c7:d3:cb:cb:5d:f7:d3:e5:ee:a0:
                    f0:6c:c7:d1:94:a5:1f:2b:07:d2:ef:91:9c:fd:c6:
                    73:4d:61:c6:8a:93:2c:0c:8d:7a:47:b4:61:e4:22:
                    c0:11:fa:49:65:f5:92:28:12:9b:cc:e9:c5:92:2e:
                    c3:c0:5c:92:51:38:21:c4:cf:d7:eb:f8:29:58:91:
                    2a:a1:d9:cc:14:3c:99:11:f7:28:77:29:25:4e:f0:
                    6f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:25:FF:C7:85:85:5B:9F:A0:E0:21:95:68:FA:06:89:F0:A0:5E:B5
            X509v3 Authority Key Identifier:
                keyid:45:6A:F5:E5:66:7D:E2:48:A9:CF:0C:EB:90:C6:D1:B3:D3:ED:6F:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:63:3d:61:7d:e2:ca:20:db:2d:8f:34:cb:6f:e3:02:ce:37:
         08:0b:71:d9:f1:7c:f7:c2:f9:7a:73:54:ff:36:d6:fc:0d:66:
         ed:48:51:53:e4:50:e3:a6:5d:dd:31:6f:a7:22:10:8a:26:0a:
         62:a1:ab:50:49:20:8d:8c:7c:f4:5a:b8:d5:6a:a6:ab:52:9c:
         75:70:c9:41:98:fa:28:7a:37:c1:bf:c3:8d:22:54:18:c4:60:
         7e:2a:10:ca:67:cd:6f:58:90:58:ea:96:c6:ac:e4:03:ed:7f:
         01:f9:38:55:39:1f:39:77:6c:7c:92:6a:8c:f2:ed:f3:06:99:
         ea:e6:5a:1e:15:e3:bf:89:f0:98:94:df:db:bf:34:61:d3:7e:
         4c:a4:4b:ed:5a:4e:f9:fb:de:4d:10:0a:a6:f1:59:1f:e0:0b:
         15:97:08:b0:57:34:53:54:d4:47:af:8c:65:9c:8e:a4:5d:5a:
         38:67:f4:27:d0:f9:0e:5c:62:c5:32:bd:10:63:3d:6d:89:af:
         22:67:6e:69:3d:50:5c:52:f6:6c:96:9c:23:42:8a:25:3e:86:
         5c:49:df:ad:45:b4:b9:60:68:37:08:8b:21:d1:28:2a:71:cf:
         cb:ca:17:eb:be:91:3c:40:ec:17:64:82:c3:b6:3d:26:2b:d6:
         10:cf:bd:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 16:07:36 2026 by rpki-client