Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft
File:                     shwri89IL512bSpNMlmO6Uv2Zaw.mft (raw, json)
Hash identifier:          rkoIspHJAQpXiPZ9ZIEFBOq4miS+YGDacuvTE7mrkkw=
Subject key identifier:   19:B2:A5:FB:92:52:A3:7E:FB:2B:23:73:B2:7D:52:F5:F7:0B:26:10
Authority key identifier: B2:1C:2B:8B:CF:48:2F:9D:76:6D:2A:4D:32:59:8E:E9:4B:F6:65:AC
Certificate issuer:       /CN=A911A7D2/serialNumber=B21C2B8BCF482F9D766D2A4D32598EE94BF665AC
Certificate serial:       DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/shwri89IL512bSpNMlmO6Uv2Zaw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft
Manifest number:          DC
Signing time:             Mon 11 May 2026 06:45:21 +0000
Manifest this update:     Mon 11 May 2026 06:45:21 +0000
Manifest next update:     Mon 18 May 2026 06:45:21 +0000
Files and hashes:         1: shwri89IL512bSpNMlmO6Uv2Zaw.crl (hash: P1A92zup7EFHZvy90uvrOw87zNBYa3XN390npj7+F74=)
                          2: C7FAB578FEEC11EFB40D667FC4F9AE02.roa (hash: HQl5Zh3nLn33eyl8y5su1Pqf5kEfuukUkh6VmRnjQfE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.crl
                          rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/shwri89IL512bSpNMlmO6Uv2Zaw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:45:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 223 (0xdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A7D2, serialNumber=B21C2B8BCF482F9D766D2A4D32598EE94BF665AC
        Validity
            Not Before: May 11 06:45:21 2026 GMT
            Not After : May 18 06:45:21 2026 GMT
        Subject: CN=6a017b01-843f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:dc:03:db:02:43:43:ee:b3:5b:4e:29:0f:a7:
                    08:22:c5:5a:18:e2:ce:fe:53:2a:ca:13:dc:f8:05:
                    31:c5:df:eb:8f:40:81:c1:a7:b7:05:68:0e:4c:9f:
                    88:b3:03:f6:00:9e:4d:2b:c8:26:af:e2:9a:89:94:
                    dc:94:af:7b:8a:63:f4:f3:00:68:41:b4:dd:b9:4d:
                    8b:68:4f:ff:c4:42:ac:0e:86:bc:a5:f9:6c:06:2e:
                    aa:b4:8b:6e:fd:d6:0a:c0:d7:6d:a5:10:f9:ec:a8:
                    5c:3f:d2:50:98:b2:c9:0a:f5:bb:85:98:bb:19:8a:
                    f8:01:bc:aa:a8:7f:61:7b:f7:23:16:81:4b:00:01:
                    99:24:19:75:c1:68:a5:1c:f2:ee:e2:db:b3:a3:82:
                    48:75:b5:97:5d:ce:3f:47:6e:0d:65:4e:72:c1:3b:
                    f4:9b:a9:15:be:b6:68:95:e6:9e:8c:93:58:74:d9:
                    dc:b0:6e:02:95:45:b4:c5:e4:d0:ba:bb:ce:db:44:
                    72:8e:3a:29:01:14:a3:55:6c:cd:f7:54:37:be:03:
                    43:6e:80:a0:7b:e7:6f:eb:a7:27:1f:7c:06:ae:77:
                    30:cb:a7:a5:5e:40:0f:69:1d:e3:52:04:37:52:64:
                    ea:bb:6d:8f:1c:bf:34:7e:38:50:8a:87:00:f1:4c:
                    1b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:B2:A5:FB:92:52:A3:7E:FB:2B:23:73:B2:7D:52:F5:F7:0B:26:10
            X509v3 Authority Key Identifier:
                keyid:B2:1C:2B:8B:CF:48:2F:9D:76:6D:2A:4D:32:59:8E:E9:4B:F6:65:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/shwri89IL512bSpNMlmO6Uv2Zaw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:10:79:58:4d:74:5a:c6:76:7d:bf:60:c7:8d:33:9a:b9:72:
         50:c6:10:e9:0a:01:b7:cc:9a:38:9b:e3:b2:04:bc:af:e9:0e:
         77:81:bc:17:2a:18:9d:30:43:60:87:b2:d7:73:7c:df:0a:94:
         10:5a:a7:75:8e:72:d5:80:89:35:9b:81:fb:0c:d8:ea:69:cc:
         20:e8:37:eb:6f:62:c5:ce:a7:a8:fa:dd:18:13:db:ed:db:ec:
         3a:b3:27:af:0c:82:00:14:b0:88:75:63:dc:16:dd:e8:95:d3:
         dc:8a:0d:62:46:6e:45:4d:30:16:6a:c2:f4:a7:f0:52:f9:dc:
         c9:c6:b8:3d:cc:7f:86:5c:6a:34:3c:06:7d:c2:7a:e9:a1:e0:
         d6:25:5a:a4:02:ee:77:17:42:b4:fb:45:17:21:f5:a8:e8:3f:
         cc:7f:8f:3d:dc:44:88:26:2f:5a:0a:97:82:49:1e:e4:b2:41:
         ae:d0:8e:76:36:7b:d9:2f:52:c2:82:1a:90:c3:7c:f8:58:0a:
         b6:f2:cd:de:32:38:b0:5b:5a:ef:f6:b7:69:dc:98:3f:cb:85:
         08:b3:6f:03:63:0b:78:5a:61:5b:e1:f8:75:b1:08:12:1c:25:
         24:60:91:6c:a7:9b:e2:40:75:f9:2d:8c:60:a5:b4:4b:fd:a3:
         c3:d9:fa:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:17:04 2026 by rpki-client