Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft
File:                     bw3LHOJgwKE4iU38RIrdySQTaYE.mft (raw, json)
Hash identifier:          kATaPyNBIJGslaRPJq7MxmJAbLmkK8eHleLO2yRwLFk=
Subject key identifier:   9F:B4:62:05:20:54:E7:76:6F:8A:76:28:8F:3B:CF:EF:A7:AF:D7:D6
Authority key identifier: 6F:0D:CB:1C:E2:60:C0:A1:38:89:4D:FC:44:8A:DD:C9:24:13:69:81
Certificate issuer:       /CN=A9142747/serialNumber=6F0DCB1CE260C0A138894DFC448ADDC924136981
Certificate serial:       08C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft
Manifest number:          08B5
Signing time:             Tue 12 May 2026 20:33:10 +0000
Manifest this update:     Tue 12 May 2026 20:33:09 +0000
Manifest next update:     Tue 19 May 2026 20:33:09 +0000
Files and hashes:         1: bw3LHOJgwKE4iU38RIrdySQTaYE.crl (hash: TtRH+eI0Eyd9Xev0wxezZQUAh9/fu7MZO5gx2ND2C2s=)
                          2: A15F9276E2A911EAADD4CF7AC4F9AE02.roa (hash: DuimfMM6Nd+7rzuoSGk/U4fJnXKvq7EhcZ9WZtUqy1I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.crl
                          rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:33:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2240 (0x8c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142747, serialNumber=6F0DCB1CE260C0A138894DFC448ADDC924136981
        Validity
            Not Before: May 12 20:33:09 2026 GMT
            Not After : May 19 20:33:09 2026 GMT
        Subject: CN=6a038e86-f6ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:13:7d:67:de:23:63:6f:26:93:43:6c:17:bf:
                    aa:cf:ca:79:44:85:41:d9:9c:49:d8:85:ca:3d:0b:
                    33:57:77:40:44:76:2d:33:56:e5:67:a4:a3:3f:5a:
                    9a:25:e9:38:03:93:a8:78:38:38:66:23:f9:70:26:
                    66:8e:c0:5d:b4:8b:1e:56:1d:de:a2:df:1f:70:1d:
                    06:46:54:43:6d:93:82:2b:71:21:8c:f4:d9:18:89:
                    b9:1f:1e:05:7f:e7:0a:d2:01:70:5b:d5:83:1c:58:
                    b8:98:29:f9:6f:b5:fa:22:b4:a2:04:7f:46:67:25:
                    cb:5d:96:a1:67:3b:4b:50:97:09:2b:3e:68:2f:35:
                    0d:e2:bd:4b:48:06:cb:fb:7c:47:fc:0c:b8:60:9a:
                    c3:f6:64:99:9e:8c:e7:e8:56:d4:ba:06:81:2e:10:
                    37:a5:69:36:d5:ee:fe:6e:6f:ee:0f:7c:44:97:33:
                    c2:8a:0f:cd:26:08:71:4d:29:bf:c7:e1:63:78:9e:
                    e2:a0:82:10:b5:e4:97:e1:d0:3a:2d:56:a4:a2:e2:
                    3d:9d:11:62:79:49:32:4c:23:50:db:61:e7:17:3e:
                    23:91:15:a1:e7:89:e3:91:f7:29:44:65:63:d3:4b:
                    7d:7a:4d:ea:fc:64:2e:97:4e:a8:6e:7f:f4:2d:67:
                    2d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B4:62:05:20:54:E7:76:6F:8A:76:28:8F:3B:CF:EF:A7:AF:D7:D6
            X509v3 Authority Key Identifier:
                keyid:6F:0D:CB:1C:E2:60:C0:A1:38:89:4D:FC:44:8A:DD:C9:24:13:69:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:77:22:bb:c5:ac:5b:0c:2d:85:6c:2a:20:04:93:d9:d4:b7:
         38:1a:79:8d:29:d4:2f:55:e8:d4:bf:64:d0:cc:f8:ae:5c:6c:
         e3:3e:51:28:87:ed:0c:28:58:cc:ad:c1:20:7c:0d:13:50:ae:
         ec:bc:28:8e:0b:44:f2:4e:a8:5f:24:3a:fa:6b:77:d2:ae:83:
         d6:db:cf:8b:fe:66:f9:64:01:1b:89:c3:83:7d:62:bc:9f:7d:
         46:17:6f:5c:ba:cd:e8:0b:3c:1d:a2:86:7a:1a:2a:73:1b:16:
         67:e8:36:f4:3f:89:d6:4d:b7:c9:a3:52:e5:b3:a3:21:d8:8f:
         39:73:23:ad:57:22:b5:db:65:74:df:26:92:c4:98:14:f4:8b:
         f9:df:db:b4:83:84:df:bd:e7:8c:ef:50:f3:e8:85:ef:9e:14:
         77:b6:73:27:3a:c7:3e:9c:56:18:1c:f8:9a:ba:48:a8:c7:74:
         c0:7d:72:67:f4:6e:5e:6b:d9:a3:11:b4:6b:07:05:e2:30:f0:
         a1:49:c7:e6:4a:31:df:6d:fb:44:bc:50:08:7d:c8:f5:f5:4f:
         37:46:0a:68:81:4e:dc:70:ed:4d:7e:57:83:af:12:0d:35:56:
         ee:57:22:b5:d5:c0:bf:a3:b2:33:77:22:1e:d0:9b:b5:f3:f8:
         f2:b0:e0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:51:22 2026 by rpki-client