Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft
File:                     CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft (raw, json)
Hash identifier:          s+HEXcrKrRLZLBS6VGnZhiyuvTEbiHgrv/gwH0Zd4sg=
Subject key identifier:   22:B8:71:81:7E:AD:78:62:4A:63:5C:23:58:9A:88:47:EC:49:85:84
Authority key identifier: 0B:09:52:36:23:4E:69:35:BA:A3:41:E3:23:5A:3D:B4:73:AC:C6:7F
Certificate issuer:       /CN=A91FFE9F/serialNumber=0B095236234E6935BAA341E3235A3DB473ACC67F
Certificate serial:       1015
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft
Manifest number:          0FDD
Signing time:             Wed 10 Jun 2026 17:30:22 +0000
Manifest this update:     Wed 10 Jun 2026 17:30:22 +0000
Manifest next update:     Wed 17 Jun 2026 17:30:22 +0000
Files and hashes:         1: CwlSNiNOaTW6o0HjI1o9tHOsxn8.crl (hash: N5c8roXQ2di7vdx4IzyUWXHXGBgDjb8DhwEe8ZgkNwY=)
                          2: 6153EE40A64911EEA2F9C24AC4F9AE02.roa (hash: xxh6NZnNYpflyBEdhUUFw/SOYfLeyMddymrrtghmKYo=)
                          3: D927A2DAA64A11EE8316D651C4F9AE02.roa (hash: LdvKEMxHF6LRdf8uDUGPZDjjr7RNd+qCPf5qkED55LI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.crl
                          rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 17:30:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4117 (0x1015)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FFE9F, serialNumber=0B095236234E6935BAA341E3235A3DB473ACC67F
        Validity
            Not Before: Jun 10 17:30:22 2026 GMT
            Not After : Jun 17 17:30:22 2026 GMT
        Subject: CN=6a299f2e-0e26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2c:db:d1:1e:29:6b:c3:30:c3:f8:1c:c3:4c:
                    72:4a:69:b1:d6:64:23:d4:a4:0d:02:46:2c:a2:17:
                    be:63:e1:bd:e5:a7:10:c2:4d:ee:a8:2e:a8:90:22:
                    7d:10:90:fe:89:e9:db:b6:8e:cd:14:ff:b9:f0:39:
                    8d:5d:f5:f9:4d:8f:71:a9:83:09:6d:bd:21:76:6f:
                    e0:21:68:30:88:03:90:d0:2b:00:a6:e9:ca:05:00:
                    b1:88:c0:c9:f0:2e:6f:9a:46:44:eb:aa:f1:d8:30:
                    fa:8e:14:d4:e1:d7:9c:cc:d1:47:9e:62:92:9c:65:
                    38:c6:4c:bc:10:07:47:eb:16:2b:fc:dc:a1:cf:f2:
                    b6:ce:bf:f1:3c:ab:d5:cf:f7:94:25:92:ae:a3:c7:
                    26:77:4c:29:37:e4:c7:61:dc:e0:97:a3:2c:c9:c9:
                    23:85:d0:b9:99:85:62:8a:7b:6d:ee:3e:bd:44:a9:
                    87:a7:8c:cf:7e:a8:b9:54:74:b5:38:92:14:19:64:
                    91:9b:3c:7c:98:9b:08:06:c6:b7:22:06:20:09:8e:
                    2e:9f:01:24:34:93:ce:31:cd:fb:c1:b5:53:45:2d:
                    85:6a:8b:dc:c2:f6:81:b0:1f:ae:84:99:a3:5e:f6:
                    d8:06:00:c4:79:ca:3e:9f:6d:4a:96:13:ea:fb:1a:
                    9f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B8:71:81:7E:AD:78:62:4A:63:5C:23:58:9A:88:47:EC:49:85:84
            X509v3 Authority Key Identifier:
                keyid:0B:09:52:36:23:4E:69:35:BA:A3:41:E3:23:5A:3D:B4:73:AC:C6:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:bd:c4:26:da:f0:d3:4a:d6:35:12:98:ff:54:24:b5:f3:7c:
         99:95:b4:d3:19:e8:bd:ad:ed:10:72:c6:15:cf:f6:dd:f4:76:
         72:19:d4:17:86:48:01:b8:38:79:45:9c:53:be:0a:34:8b:8c:
         f4:05:b5:a3:a7:c0:29:dd:35:e2:75:3b:b5:da:d1:8b:b4:3d:
         07:0a:4f:33:1f:9c:3b:f8:0e:96:a3:8b:d5:69:f8:81:07:a3:
         a5:e8:f6:b8:6e:b6:bc:cc:29:57:ac:a4:3c:f4:20:03:2a:0a:
         92:33:60:e9:36:02:bd:e4:e7:65:51:f4:b3:60:11:7a:7e:ed:
         51:a4:94:91:2b:ab:36:1d:10:d6:d4:d6:2b:5d:b2:49:a4:ff:
         9d:36:b0:e8:78:c2:29:17:6b:ac:4b:d4:8d:9f:91:9b:50:97:
         01:8e:76:3a:07:9e:53:a0:1d:a5:ae:90:57:25:e2:67:52:d5:
         5f:bd:cf:b6:c2:f8:df:cb:46:b9:da:d8:7a:94:ee:ba:89:4b:
         a1:88:73:68:56:e4:59:25:ce:db:21:6a:32:69:7a:22:17:1c:
         02:6b:04:58:da:bd:b3:cf:90:3f:4b:1f:2c:94:71:bb:d3:c1:
         4a:67:8e:28:ac:78:d4:41:57:0b:1d:1e:9a:2b:af:dd:ee:39:
         1f:84:23:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 17:43:08 2026 by rpki-client