Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.mft
File:                     wDouaJYDIEoCs4vve5CDsQJ2JpE.mft (raw, json)
Hash identifier:          /N+eM2khHG8CVOQ6MoHCaU3lDIlcJ/LIdFWvqr3jzbc=
Subject key identifier:   76:61:3A:4F:40:5B:A3:5D:34:34:BD:15:C0:28:82:22:55:60:03:C4
Authority key identifier: C0:3A:2E:68:96:03:20:4A:02:B3:8B:EF:7B:90:83:B1:02:76:26:91
Certificate issuer:       /CN=A919C7B8/serialNumber=C03A2E689603204A02B38BEF7B9083B102762691
Certificate serial:       0695
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDouaJYDIEoCs4vve5CDsQJ2JpE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.mft
Manifest number:          068E
Signing time:             Tue 12 May 2026 22:32:55 +0000
Manifest this update:     Tue 12 May 2026 22:32:55 +0000
Manifest next update:     Tue 19 May 2026 22:32:55 +0000
Files and hashes:         1: wDouaJYDIEoCs4vve5CDsQJ2JpE.crl (hash: jpWiz5xpKf6GbrzCb1eucgDy3hGSTvJ8qkWLYg5RYTU=)
                          2: F8A90D48B7EA11EB91C5D25EC4F9AE02.roa (hash: LXgbs7yf9MHcvHQmCBnHTchcuYtaIQ40NiICo6uoaZw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.crl
                          rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDouaJYDIEoCs4vve5CDsQJ2JpE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1685 (0x695)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C7B8, serialNumber=C03A2E689603204A02B38BEF7B9083B102762691
        Validity
            Not Before: May 12 22:32:55 2026 GMT
            Not After : May 19 22:32:55 2026 GMT
        Subject: CN=6a03aa97-d225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fa:1f:cf:39:f7:0a:04:d0:b2:50:3d:fe:d8:
                    43:75:10:4d:76:0b:1b:f2:7d:0e:42:6a:be:b5:4c:
                    32:fe:38:a7:2a:fd:b6:10:43:f6:b0:a0:ff:ed:cc:
                    8f:6b:ec:de:4f:bb:31:c6:d6:5d:81:aa:c8:74:7d:
                    d5:c7:22:7e:fd:99:79:7a:4f:73:4c:5c:f3:15:a0:
                    2a:6c:55:6f:01:17:e1:50:74:89:b2:d8:ab:f3:5a:
                    57:47:06:9d:fe:cc:59:e2:fd:0d:7a:a5:58:e3:1c:
                    0d:aa:09:64:35:9f:e4:53:94:9c:89:9c:d3:31:66:
                    ba:fd:a3:a1:57:70:7d:b3:25:37:95:40:fc:22:80:
                    05:a2:44:06:eb:a9:71:3d:ef:7c:5a:83:21:13:19:
                    6e:26:22:b8:e1:35:db:41:2c:5e:fb:ad:3b:d2:24:
                    06:49:f6:c3:87:ab:f1:68:16:c4:66:11:3e:b8:68:
                    13:e4:d8:6a:4f:9e:b3:0e:a8:75:36:3a:c2:b3:3b:
                    45:b5:6d:4b:b4:58:a6:bc:23:db:8d:ee:aa:7f:b9:
                    21:61:3e:ab:0c:26:88:12:db:1c:46:08:21:fc:e9:
                    0d:3e:b5:6c:c9:f6:0c:5e:d9:e7:78:d9:cd:36:58:
                    44:2b:59:84:a1:5e:3f:36:20:41:b2:e4:ea:01:37:
                    22:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:61:3A:4F:40:5B:A3:5D:34:34:BD:15:C0:28:82:22:55:60:03:C4
            X509v3 Authority Key Identifier:
                keyid:C0:3A:2E:68:96:03:20:4A:02:B3:8B:EF:7B:90:83:B1:02:76:26:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDouaJYDIEoCs4vve5CDsQJ2JpE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:d9:4b:4e:88:09:f4:50:fe:db:85:fe:36:c1:a9:36:aa:c7:
         46:f4:e8:43:aa:1f:35:9a:5f:dc:3a:19:d4:2e:fe:8f:7e:e3:
         bd:0f:99:b5:a8:e1:4c:e2:7f:d6:e1:2b:e8:cf:66:6b:ae:4e:
         f2:fd:e7:a4:62:2f:14:23:3b:59:57:14:e0:7a:cd:2e:1e:73:
         07:12:29:f7:0d:af:e3:11:0a:c8:ad:10:98:99:7d:e7:43:2f:
         1b:50:e6:9e:fd:db:3d:93:40:c0:b0:55:79:2e:1e:f8:c7:89:
         93:07:60:39:61:25:99:27:08:4f:9f:0b:46:49:0a:4d:45:f8:
         8a:7f:a9:10:e7:23:b5:03:23:1a:bb:dc:c4:02:f8:8b:f7:86:
         7c:f1:ce:4a:1c:32:ca:50:fc:a2:f5:d2:58:5f:d3:05:7d:40:
         0b:3e:e3:de:eb:07:f9:24:b0:18:9a:cc:c6:9c:77:54:65:46:
         cb:4f:5c:36:e9:bd:aa:09:07:2d:42:d6:9d:9f:35:fb:05:fa:
         e8:f7:5e:5a:d9:13:eb:5a:37:ff:1e:31:bd:52:6d:76:2d:97:
         03:43:72:99:aa:bb:cd:a7:3a:6b:de:bb:43:4c:d6:a2:54:d8:
         d5:72:c8:51:1f:20:3f:e4:4f:79:e0:08:c8:3d:67:31:8d:76:
         b1:a9:16:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:29:58 2026 by rpki-client