Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft
File:                     1WeS1ZfpzdAr_BbQtJLaParggPw.mft (raw, json)
Hash identifier:          E9FtiObhSx+VedmurHpT5fywbunvn5x1UU8gFDUgjW0=
Subject key identifier:   59:02:7B:10:25:1A:50:3B:04:88:3A:9C:C5:A3:35:30:C1:61:3A:0F
Authority key identifier: D5:67:92:D5:97:E9:CD:D0:2B:FC:16:D0:B4:92:DA:3D:AA:E0:80:FC
Certificate issuer:       /CN=A91731EA/serialNumber=D56792D597E9CDD02BFC16D0B492DA3DAAE080FC
Certificate serial:       1FDB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft
Manifest number:          1FAF
Signing time:             Tue 12 May 2026 15:59:59 +0000
Manifest this update:     Tue 12 May 2026 15:59:58 +0000
Manifest next update:     Tue 19 May 2026 15:59:58 +0000
Files and hashes:         1: 1WeS1ZfpzdAr_BbQtJLaParggPw.crl (hash: DYzcsxjsyya8hw7OPSM9wHGDtUwtUcd9Clgj0zS3skY=)
                          2: 317CF2A634E811EFA8BEA738C4F9AE02.roa (hash: +mfxCLFmT0kAngWE0QR8njelgu56dCQ+gYLAva7jY7M=)
                          3: 500DFDA8578611EA8CC3B124C4F9AE02.roa (hash: 5LNSq5pdKybofu1UpxkFVG9Ohf/hU7Yt5u2ontP0MD0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.crl
                          rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:59:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8155 (0x1fdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91731EA, serialNumber=D56792D597E9CDD02BFC16D0B492DA3DAAE080FC
        Validity
            Not Before: May 12 15:59:58 2026 GMT
            Not After : May 19 15:59:58 2026 GMT
        Subject: CN=6a034e7f-625b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8a:23:f2:31:dd:43:ed:86:21:39:20:fa:ac:
                    a5:85:7d:6c:7b:b7:f5:fb:a0:db:f3:b5:9d:b5:57:
                    6a:56:94:fa:4e:2a:9a:5c:bc:67:46:87:5b:01:c6:
                    9d:ec:32:08:04:9b:f1:e1:7b:8e:d7:f3:13:fd:a7:
                    7a:98:9a:0a:cb:35:bc:05:66:6b:23:5a:95:39:89:
                    79:3f:36:8c:9f:4d:67:62:26:82:87:3b:21:96:c0:
                    c0:2d:6d:d7:38:f9:5a:84:60:07:a7:23:e6:fe:1a:
                    b4:72:46:54:d9:2f:c9:a1:a3:b0:3a:9f:5e:ce:c0:
                    a6:f0:35:17:17:75:79:b5:d2:a1:2c:fa:00:cd:1f:
                    c5:c4:74:fc:43:87:20:63:e8:b3:66:43:ca:d7:38:
                    8d:7c:ba:e0:c7:85:72:38:1c:28:16:b2:7f:95:a3:
                    f6:98:a1:92:11:81:6d:30:43:27:18:25:c3:df:f4:
                    c6:74:55:63:f2:8f:48:27:d5:1f:90:62:c8:77:df:
                    ff:00:e8:90:14:ae:e4:af:98:07:58:a1:b2:6d:06:
                    38:a8:08:66:74:3e:09:32:be:53:ef:2a:e6:1a:bb:
                    05:d2:d0:e8:80:62:37:2d:4b:4b:ae:5a:c1:df:e5:
                    07:39:58:09:37:df:c1:22:64:eb:ac:0f:1b:2c:3d:
                    35:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:02:7B:10:25:1A:50:3B:04:88:3A:9C:C5:A3:35:30:C1:61:3A:0F
            X509v3 Authority Key Identifier:
                keyid:D5:67:92:D5:97:E9:CD:D0:2B:FC:16:D0:B4:92:DA:3D:AA:E0:80:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:5b:ac:8d:43:47:55:dd:b5:67:b4:f0:6d:4d:db:ff:47:d7:
         9b:b0:c6:84:43:31:e4:6c:4e:49:a6:de:3b:c0:bf:85:89:f3:
         04:c9:01:b5:55:d5:30:87:c8:1e:63:12:0c:96:cd:fa:ef:48:
         09:61:54:b8:2b:0d:15:0d:cc:e2:ba:96:86:b1:16:fc:b6:27:
         0a:fe:eb:9a:85:98:14:02:70:e3:ef:76:76:d4:c1:09:0c:f1:
         dd:d3:28:06:d5:ed:3a:ac:e6:f9:ef:d0:80:c7:ea:aa:86:f9:
         ba:2c:8f:99:c9:79:89:03:49:92:c3:6b:42:f1:d2:3a:a8:75:
         01:3d:31:4c:a2:29:0b:46:a1:60:fb:67:8c:6e:04:a6:be:3a:
         79:80:ed:df:df:e8:8b:6d:b8:50:98:fb:d7:50:76:7b:fa:06:
         8e:bd:42:87:c8:e2:3b:5a:44:ca:1c:2f:a7:c4:f6:ff:b4:c7:
         57:39:7e:26:5e:9c:1b:35:ad:f7:57:f5:90:a7:6d:0a:69:b7:
         7a:c0:fb:0f:66:7d:fa:24:35:cd:bd:74:1d:33:b3:ab:83:3a:
         e7:37:59:db:4a:f0:8e:b4:1c:f2:7c:f2:77:2a:98:33:43:3b:
         5c:ba:98:cb:5b:25:4d:1e:71:a5:11:4c:c9:d4:b3:06:06:29:
         20:f3:db:53
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICH9swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzMxRUExMTAvBgNVBAUTKEQ1Njc5MkQ1OTdFOUNERDAyQkZDMTZEMEI0OTJEQTNE
QUFFMDgwRkMwHhcNMjYwNTEyMTU1OTU4WhcNMjYwNTE5MTU1OTU4WjAYMRYwFAYD
VQQDEw02YTAzNGU3Zi02MjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyIoj8jHdQ+2GITkg+qylhX1se7f1+6Db87WdtVdqVpT6TiqaXLxnRodbAcad
7DIIBJvx4XuO1/MT/ad6mJoKyzW8BWZrI1qVOYl5PzaMn01nYiaChzshlsDALW3X
OPlahGAHpyPm/hq0ckZU2S/JoaOwOp9ezsCm8DUXF3V5tdKhLPoAzR/FxHT8Q4cg
Y+izZkPK1ziNfLrgx4VyOBwoFrJ/laP2mKGSEYFtMEMnGCXD3/TGdFVj8o9IJ9Uf
kGLId9//AOiQFK7kr5gHWKGybQY4qAhmdD4JMr5T7yrmGrsF0tDogGI3LUtLrlrB
3+UHOVgJN9/BImTrrA8bLD01UwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFkCexAl
GlA7BIg6nMWjNTDBYToPMB8GA1UdIwQYMBaAFNVnktWX6c3QK/wW0LSS2j2q4ID8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzFFQS85QUYzRUQyODVF
RUMxMUU2ODg2RUM1MUJDNEY5QUUwMi8xV2VTMVpmcHpkQXJfQmJRdEpMYVBhcmdn
UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFXZVMxWmZwemRBcl9CYlF0SkxhUGFyZ2dQdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MzFFQS85QUYzRUQyODVFRUMxMUU2ODg2RUM1MUJDNEY5QUUwMi8xV2VTMVpmcHpk
QXJfQmJRdEpMYVBhcmdnUHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARlusjUNHVd21Z7TwbU3b/0fXm7DGhEMx5GxOSabeO8C/hYnzBMkBtVXVMIfI
HmMSDJbN+u9ICWFUuCsNFQ3M4rqWhrEW/LYnCv7rmoWYFAJw4+92dtTBCQzx3dMo
BtXtOqzm+e/QgMfqqob5uiyPmcl5iQNJksNrQvHSOqh1AT0xTKIpC0ahYPtnjG4E
pr46eYDt39/oi224UJj711B2e/oGjr1Ch8jiO1pEyhwvp8T2/7THVzl+Jl6cGzWt
91f1kKdtCmm3esD7D2Z9+iQ1zb10HTOzq4M65zdZ20rwjrQc8nzydyqYM0M7XLqY
y1slTR5xpRFMydSzBgYpIPPbUw==
-----END CERTIFICATE-----
Generated at Wed May 13 03:29:10 2026 by rpki-client