Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/awKSxgJwici6idjGWhozDUiLCiw.mft
File:                     awKSxgJwici6idjGWhozDUiLCiw.mft (raw, json)
Hash identifier:          5uFYVVi45iMRbQlm7Y72RV1sS7PkSj1RFKvfVI6w+DU=
Subject key identifier:   B5:8F:1B:66:E0:66:95:E0:58:79:A5:2D:87:3E:AB:2E:73:39:9B:55
Authority key identifier: 6B:02:92:C6:02:70:89:C8:BA:89:D8:C6:5A:1A:33:0D:48:8B:0A:2C
Certificate issuer:       /CN=A91D0B0E/serialNumber=6B0292C6027089C8BA89D8C65A1A330D488B0A2C
Certificate serial:       013F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/awKSxgJwici6idjGWhozDUiLCiw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/awKSxgJwici6idjGWhozDUiLCiw.mft
Manifest number:          0135
Signing time:             Wed 13 May 2026 05:36:53 +0000
Manifest this update:     Wed 13 May 2026 05:36:52 +0000
Manifest next update:     Wed 20 May 2026 05:36:52 +0000
Files and hashes:         1: awKSxgJwici6idjGWhozDUiLCiw.crl (hash: lW5+I/U2H7UHmhFoIz80eV1GCyPH9GkdX3FZufyO4MU=)
                          2: 17782970808311EFBB9C2A46C4F9AE02.roa (hash: 7TZMrJ7cU5AnQKT56JZoo3GclFGMSMDdP1Hrz561DNM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/awKSxgJwici6idjGWhozDUiLCiw.crl
                          rsync://rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/awKSxgJwici6idjGWhozDUiLCiw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/awKSxgJwici6idjGWhozDUiLCiw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 05:36:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 319 (0x13f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0B0E, serialNumber=6B0292C6027089C8BA89D8C65A1A330D488B0A2C
        Validity
            Not Before: May 13 05:36:52 2026 GMT
            Not After : May 20 05:36:52 2026 GMT
        Subject: CN=6a040df4-95f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ff:eb:8b:1a:c8:b4:08:22:6d:26:88:75:e8:
                    9f:df:34:26:e9:98:3c:c0:84:7e:e4:1e:31:8d:ba:
                    fd:1d:8f:c3:ab:e3:32:3d:fb:6b:f8:75:5e:cd:4c:
                    2b:a1:b6:d5:b1:1d:8b:92:00:eb:3d:99:49:bb:0e:
                    c3:e3:a0:07:63:bf:e6:d5:b4:df:8c:12:b7:3d:ad:
                    06:48:13:6a:d6:6f:cf:9b:3f:ac:b3:35:a5:2e:07:
                    18:a4:de:6e:0d:c1:8f:72:ab:6e:e0:a1:99:eb:92:
                    6c:74:40:d3:b7:3a:45:b8:eb:9e:e3:1b:91:4e:12:
                    0e:d0:6d:0d:30:15:6e:f9:fd:63:7f:b0:ec:cc:e6:
                    47:2a:87:9e:df:6e:9b:e0:df:a2:ce:a3:3d:24:f7:
                    05:de:20:50:a2:46:ab:de:6f:96:18:fc:06:f2:fc:
                    20:03:a6:3b:e1:50:9f:c1:ab:c0:43:20:10:06:2b:
                    7a:8a:cd:a9:43:e7:61:2c:75:b6:84:32:ef:34:2b:
                    af:0b:70:02:36:f7:8a:89:37:4e:c8:55:05:05:3b:
                    7e:29:46:a6:d5:0d:9b:0c:c5:9a:83:91:14:76:5a:
                    43:54:c7:0e:19:b8:33:45:88:9c:f5:c4:00:20:c8:
                    7e:8c:95:da:7b:64:b7:90:43:98:81:31:2e:cf:56:
                    76:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:8F:1B:66:E0:66:95:E0:58:79:A5:2D:87:3E:AB:2E:73:39:9B:55
            X509v3 Authority Key Identifier:
                keyid:6B:02:92:C6:02:70:89:C8:BA:89:D8:C6:5A:1A:33:0D:48:8B:0A:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/awKSxgJwici6idjGWhozDUiLCiw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/awKSxgJwici6idjGWhozDUiLCiw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/awKSxgJwici6idjGWhozDUiLCiw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:a4:05:bf:38:f9:2a:95:3d:54:e6:bc:a2:31:5b:7b:9c:f0:
         a3:ba:c5:c3:89:d2:c5:22:63:c4:b0:6c:ae:23:3a:d2:e6:ce:
         cb:65:c7:c4:46:e6:b3:a0:78:5e:a7:69:55:f1:c5:92:e5:b0:
         b7:9c:06:e3:99:1e:b3:64:d0:19:f5:4d:3e:7c:f4:69:fa:51:
         56:37:ae:d8:6f:c2:5d:3b:af:8a:fb:02:ae:b4:b6:df:f4:18:
         68:ce:76:28:b9:01:aa:c3:d3:1a:9f:43:d6:74:90:02:b6:5c:
         23:12:51:60:8a:9f:f5:3d:b1:cc:f6:78:73:87:fa:c0:38:94:
         55:aa:42:43:37:c6:21:6c:bc:dd:93:19:9b:70:3d:02:c0:92:
         94:33:53:cc:ff:d0:50:bc:7c:6a:b0:5c:da:fb:39:d0:f1:5a:
         60:f4:0d:d7:a8:99:0e:2c:0d:b4:e6:c0:cb:66:49:e7:d6:e5:
         fd:3c:ba:ba:6d:d8:c1:4b:0b:4c:2f:df:2f:22:cb:d7:11:6d:
         20:e1:73:aa:08:06:be:5b:d6:5e:85:e5:6d:3c:37:1d:b4:9d:
         71:bd:af:46:81:9d:b8:a1:2d:cd:82:2e:cd:c7:69:bc:3a:64:
         b9:f1:55:1e:64:9a:90:71:3c:c6:5c:d8:d9:f1:d1:10:cd:0f:
         59:ad:8b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:29:52 2026 by rpki-client