Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft
File:                     2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft (raw, json)
Hash identifier:          PQ1e4i1coUGyEWZz5PLtx5NtCr9LPz6pfiPuL5KCugs=
Subject key identifier:   16:AE:1E:36:E2:15:81:2B:53:29:53:AB:02:E5:9B:8D:0A:2E:8E:2B
Authority key identifier: DB:03:27:14:43:E7:5D:6D:19:50:50:ED:C8:B6:13:ED:5F:FB:D8:38
Certificate issuer:       /CN=A91889B6/serialNumber=DB03271443E75D6D195050EDC8B613ED5FFBD838
Certificate serial:       3545
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft
Manifest number:          353F
Signing time:             Tue 12 May 2026 14:50:49 +0000
Manifest this update:     Tue 12 May 2026 14:50:48 +0000
Manifest next update:     Tue 19 May 2026 14:50:48 +0000
Files and hashes:         1: 2wMnFEPnXW0ZUFDtyLYT7V_72Dg.crl (hash: 7kBksnVLCoihT2YuhAd0Bmz6hkcGkr5cbdaTOpDI8ME=)
                          2: 10E0F1884D0C11EE81002274C4F9AE02.roa (hash: RTpAZwruc7NuoT/Wh4GeFBLqLMrhtkNDUYMQpCl+t8M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.crl
                          rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:50:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13637 (0x3545)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91889B6, serialNumber=DB03271443E75D6D195050EDC8B613ED5FFBD838
        Validity
            Not Before: May 12 14:50:48 2026 GMT
            Not After : May 19 14:50:48 2026 GMT
        Subject: CN=6a033e49-ff79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:cd:d5:3a:d3:d7:28:22:34:72:1f:20:9f:07:
                    6b:5b:19:f0:00:28:66:d7:dc:a2:21:02:bc:99:07:
                    38:53:84:90:ec:62:c0:da:26:f0:ac:bc:1a:4d:98:
                    de:3e:fc:95:82:22:7a:f5:1e:f6:94:84:34:cf:d6:
                    28:9b:42:06:79:3f:ad:e9:be:17:4c:b9:a5:2f:96:
                    e5:e6:90:11:a1:be:20:01:41:e8:10:aa:18:29:a4:
                    5f:05:ff:3e:56:e2:1e:02:36:fb:de:75:86:19:8c:
                    cf:a1:9c:90:f2:4a:d0:f1:bd:b7:85:a1:f2:7d:92:
                    95:e5:21:a5:5a:05:dd:21:f4:61:83:33:aa:3e:f3:
                    0c:b2:7b:7a:08:e6:7b:fe:5a:37:ff:6c:1f:43:bf:
                    db:32:66:b2:0f:f0:cc:8a:93:f3:8d:5e:c3:43:0b:
                    65:c4:e5:92:eb:0b:9a:79:d7:5b:83:a6:6c:65:17:
                    1a:87:06:e1:28:a6:8f:ef:76:d6:b4:7b:71:77:fe:
                    b7:4a:8e:8a:87:64:1b:e0:10:04:59:40:44:f7:27:
                    e5:3f:f8:5f:2a:91:01:dd:4d:b8:a6:eb:08:4a:c3:
                    94:e9:ae:d7:8f:64:96:4c:6f:b0:6d:30:c7:f7:dc:
                    eb:d4:96:f2:b5:df:6a:ad:8a:7d:fb:c2:34:04:d6:
                    13:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:AE:1E:36:E2:15:81:2B:53:29:53:AB:02:E5:9B:8D:0A:2E:8E:2B
            X509v3 Authority Key Identifier:
                keyid:DB:03:27:14:43:E7:5D:6D:19:50:50:ED:C8:B6:13:ED:5F:FB:D8:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:ce:c9:22:71:bd:f5:d8:04:02:4a:a3:9e:29:a3:41:9c:03:
         c9:88:50:67:59:91:f6:a5:62:47:84:39:d0:5c:5f:a2:0d:c8:
         b6:b6:24:29:2a:3e:bc:28:ff:84:99:62:f6:40:a8:21:44:76:
         b0:31:e1:72:e5:32:9c:81:3e:6e:f4:07:15:f9:68:96:31:2c:
         f7:35:68:b5:ae:ca:2c:5f:ac:08:f6:c5:00:c8:56:31:2b:12:
         a4:72:f9:ea:ef:d8:eb:d9:5f:3c:20:a1:8b:5f:31:79:a2:f7:
         03:1e:86:88:90:e1:59:06:ac:5a:3e:81:09:93:3c:cd:68:5b:
         fc:c1:d0:a7:36:9a:67:e1:ca:35:f7:3b:33:82:cf:47:eb:a9:
         54:50:3f:6a:28:02:2e:e8:a6:26:06:ef:90:04:a8:d5:9e:70:
         87:31:84:f4:64:b9:05:7e:b5:e4:e0:27:1c:c5:5e:b2:9e:41:
         60:2a:74:6c:49:65:d5:ef:36:cc:f3:3a:dd:c3:dc:91:62:9f:
         a5:9e:98:05:7a:f8:a8:f2:23:ec:6b:87:d4:43:8e:12:c2:27:
         96:de:fa:a8:b8:04:d3:13:78:f0:93:34:3f:c8:56:69:f2:97:
         2d:59:47:ff:2f:de:df:3e:8d:59:68:96:a4:37:bd:6d:03:a4:
         0f:d4:46:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:27:36 2026 by rpki-client