Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft
File:                     2fwVW2_aEGxpmlabEgOEkJWKoy8.mft (raw, json)
Hash identifier:          KWIsmeRE91KUNM0HFVOg278fCjn3TCkQ5dvjZQUJNs4=
Subject key identifier:   24:B7:5C:F3:DC:6E:4E:3D:43:F9:D4:0D:76:D9:C7:EB:BD:6D:48:0F
Authority key identifier: D9:FC:15:5B:6F:DA:10:6C:69:9A:56:9B:12:03:84:90:95:8A:A3:2F
Certificate issuer:       /CN=A91B53A5/serialNumber=D9FC155B6FDA106C699A569B12038490958AA32F
Certificate serial:       1B0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft
Manifest number:          1AEA
Signing time:             Tue 12 May 2026 16:18:43 +0000
Manifest this update:     Tue 12 May 2026 16:18:43 +0000
Manifest next update:     Tue 19 May 2026 16:18:43 +0000
Files and hashes:         1: 2fwVW2_aEGxpmlabEgOEkJWKoy8.crl (hash: Yv72gqJuB97jRInZChvah45dl1Wr82AMEyGCP3J5ers=)
                          2: A9286C0E6D4411E7AF539270C4F9AE02.roa (hash: 6XEd0uCxQtA9wBbV+Q7/BBTxLNihLCwNHh1QPcQVifo=)
                          3: C443D86A55A311E7896BED09C4F9AE02.roa (hash: fUG/ZYYnzDR6Zz8MPXkWB3U7KRWzJ6ve4ty+0m9uSLY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.crl
                          rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 16:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6922 (0x1b0a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B53A5, serialNumber=D9FC155B6FDA106C699A569B12038490958AA32F
        Validity
            Not Before: May 12 16:18:43 2026 GMT
            Not After : May 19 16:18:43 2026 GMT
        Subject: CN=6a0352e3-895f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6e:10:b8:d0:08:64:d4:01:62:a0:05:d2:61:
                    19:39:b9:03:0c:5b:70:bb:56:1f:72:86:07:27:f0:
                    1e:8f:14:73:e9:43:4c:aa:c9:43:b2:f8:ed:ab:ff:
                    eb:06:03:8d:3d:49:9a:33:60:94:18:2d:af:fd:4d:
                    ee:3b:8f:d0:6d:1f:23:a7:f7:3e:ce:20:8b:1b:48:
                    9f:bc:cb:62:c1:2d:67:11:d1:ca:31:89:da:d0:d8:
                    a3:03:99:30:23:a9:2e:7e:47:9f:c0:29:14:65:fe:
                    8a:27:87:ce:ca:78:ad:24:3c:e4:96:d6:28:bc:9a:
                    c0:27:9f:e9:af:5f:bb:36:a3:d4:36:49:97:aa:86:
                    7e:88:6d:66:cb:c2:b6:6c:09:a9:22:32:e2:bf:11:
                    04:2d:1e:1e:36:ee:0b:da:1a:82:42:a3:57:42:0d:
                    64:82:9a:60:7d:98:e2:f1:1e:c6:57:82:c4:89:af:
                    00:8d:91:4c:17:c7:25:b3:92:a2:53:c2:f7:a8:d1:
                    9d:a0:24:40:1c:8e:31:fa:95:21:30:f8:db:2d:96:
                    71:25:77:70:d2:91:98:32:78:e2:ed:f0:c6:35:88:
                    04:5b:eb:3c:98:12:ac:b0:00:a5:d3:c7:55:55:a0:
                    17:b5:e0:04:20:19:11:07:40:76:5e:53:19:44:56:
                    74:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B7:5C:F3:DC:6E:4E:3D:43:F9:D4:0D:76:D9:C7:EB:BD:6D:48:0F
            X509v3 Authority Key Identifier:
                keyid:D9:FC:15:5B:6F:DA:10:6C:69:9A:56:9B:12:03:84:90:95:8A:A3:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:24:98:94:6e:d8:49:a5:45:60:eb:22:cd:b8:09:c7:8a:37:
         1a:83:32:22:db:fd:64:0c:7f:66:a6:76:b1:0d:68:e7:41:2c:
         27:50:a2:18:27:e3:84:a9:65:91:b8:3f:6a:7d:05:5a:65:f6:
         31:61:50:32:43:52:96:ab:e3:7c:a0:11:40:6a:7d:13:64:92:
         6a:60:aa:2c:54:ad:1c:a5:1a:b6:46:c2:db:c9:37:07:8c:93:
         3b:bb:f5:0e:c6:91:ae:ce:4b:e5:64:ba:84:bb:fa:40:bb:a5:
         63:aa:3d:62:74:d8:65:09:00:1b:26:85:9b:0d:64:f8:65:35:
         62:45:3d:49:67:70:57:de:b6:15:b2:bd:99:03:e6:8e:da:8f:
         9a:0b:17:92:71:7d:e2:89:ac:5b:93:b6:5e:11:b0:b2:19:26:
         af:32:76:fd:6f:97:10:3d:9f:3e:6c:1e:76:e5:01:97:65:49:
         e9:6b:ef:0e:7d:14:fe:a9:f0:af:e5:77:79:87:2b:79:6a:6f:
         32:4d:91:65:1c:55:ce:8f:c5:9f:39:5e:ac:12:8d:e0:23:aa:
         f6:3d:64:39:e3:57:1a:c6:15:5f:81:2b:df:3d:1e:2c:00:eb:
         36:c8:a6:d8:0c:72:23:49:14:86:cc:0b:d3:5b:69:19:e8:1d:
         93:2e:5b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:26:11 2026 by rpki-client