Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft
File:                     tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft (raw, json)
Hash identifier:          lCTh9sy3UWbnOlSDcpDMya2a8ysGS/hewWVgFqplpuI=
Subject key identifier:   73:2E:AB:54:CF:EA:63:AF:1E:8E:70:BC:D1:59:BD:21:EC:AD:B0:F1
Authority key identifier: B6:CC:02:A7:DB:8A:4D:B5:30:F1:12:B6:22:4F:19:08:08:68:FB:D9
Certificate issuer:       /CN=A91A4849/serialNumber=B6CC02A7DB8A4DB530F112B6224F19080868FBD9
Certificate serial:       01AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft
Manifest number:          0195
Signing time:             Wed 25 Mar 2026 03:54:26 +0000
Manifest this update:     Wed 25 Mar 2026 03:54:26 +0000
Manifest next update:     Wed 01 Apr 2026 03:54:26 +0000
Files and hashes:         1: tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl (hash: IO3DYrLDv3D2OIy2PgkXimTvF6HrekBYvpJeCNYWaIM=)
                          2: 657EDAC0003D11F187167F2F4B6F56BC.roa (hash: weYMUmUD1ARPw1SwwWxeCqTkxxR1HXaS9FBc7fRBcGo=)
                          3: 6D85335A58BC11F0983EE987C4F9AE02.roa (hash: MThr+gzKKGYuV0BMg8mTFAcI/8CCUv1CBgataxg2Fo0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl
                          rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:54:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 426 (0x1aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4849, serialNumber=B6CC02A7DB8A4DB530F112B6224F19080868FBD9
        Validity
            Not Before: Mar 25 03:54:26 2026 GMT
            Not After : Apr  1 03:54:26 2026 GMT
        Subject: CN=69c35c72-a2d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:08:6f:2d:bb:55:3c:52:70:6e:5f:20:16:4c:
                    6a:94:53:6b:a2:f3:73:e5:e7:a8:05:e8:2e:55:2c:
                    5b:c9:70:7b:4b:ef:2f:28:31:11:2d:e6:cc:c0:a7:
                    80:28:e7:dc:43:42:6d:a7:a0:11:ca:50:ab:ca:e2:
                    71:0e:27:03:96:85:25:50:b7:5b:22:6e:be:81:b4:
                    73:4d:f9:59:8e:4e:d5:16:fd:eb:87:8e:c4:fb:02:
                    90:fd:80:91:ae:4c:03:f1:a2:42:53:20:56:d1:1c:
                    b0:37:0f:67:1a:cc:5b:41:8a:76:93:2d:43:42:f8:
                    40:4b:b6:57:d4:ca:ec:5b:51:5e:38:e9:bd:e5:ef:
                    08:ec:4e:a2:10:2e:f8:bf:dd:ca:ad:fd:fd:ed:c0:
                    24:d7:34:d5:a7:75:b1:8f:df:46:13:1b:cd:96:fc:
                    21:ff:ef:b9:30:34:59:44:e0:d8:6b:63:3e:80:32:
                    a1:96:7d:3a:a6:41:b9:d9:5c:ce:76:6e:1d:f0:a6:
                    16:94:4f:3a:6a:2b:72:30:30:4b:30:fe:e1:48:4e:
                    3f:6c:f8:ff:2c:48:6a:ec:da:8e:e6:2f:a3:fb:8f:
                    cf:1c:6a:da:85:a2:06:4a:89:99:73:ed:91:8a:90:
                    3b:23:d5:0a:75:b6:30:9a:59:43:67:5b:10:07:dd:
                    16:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:2E:AB:54:CF:EA:63:AF:1E:8E:70:BC:D1:59:BD:21:EC:AD:B0:F1
            X509v3 Authority Key Identifier:
                keyid:B6:CC:02:A7:DB:8A:4D:B5:30:F1:12:B6:22:4F:19:08:08:68:FB:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:22:4a:69:c6:5f:97:25:e1:65:9e:39:d9:01:6d:36:54:c3:
         41:2f:f4:57:6e:3b:5c:85:c4:96:42:08:d0:3f:17:09:52:fa:
         86:42:93:ad:d2:af:5f:1e:6c:7a:51:71:a5:bd:13:2f:f0:a2:
         f3:f6:05:2d:9d:d2:1a:68:51:b0:4c:60:42:83:ae:a4:26:63:
         7c:66:82:ee:89:08:13:c5:22:96:a3:2f:42:d5:64:89:a3:7b:
         34:0a:9d:89:32:58:c3:74:af:c4:6c:33:34:78:88:83:15:16:
         e2:ff:09:14:2d:e0:aa:f2:69:2f:46:fe:07:b5:15:f3:34:26:
         f3:48:fb:61:84:56:c1:6c:c8:b7:77:ba:de:b5:57:a5:9a:28:
         26:56:09:56:5d:88:f6:fd:e1:6d:59:d0:15:65:b0:96:97:08:
         50:33:74:00:96:61:ce:4c:30:dc:ca:38:9d:b6:4c:9f:dc:51:
         4a:69:67:02:c8:6f:1a:47:f6:14:6e:6a:7a:94:7b:41:59:d7:
         57:3e:91:f3:4b:9c:16:5f:01:43:f2:96:60:5d:8a:2f:a8:4e:
         dd:fc:9f:50:14:c8:01:d7:db:1b:a1:8b:46:45:a0:ae:9f:88:
         dd:77:ed:95:bc:24:18:40:3a:4c:54:96:d7:ba:70:87:4d:15:
         78:29:20:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:13:58 2026 by rpki-client