Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft
File:                     CHspwfvXREICrgAqSXEn_WbyStk.mft (raw, json)
Hash identifier:          yGSK5QjWJ8+pyiEWA7zF2wLBm9RVPH1qm0042OeYSzk=
Subject key identifier:   73:D1:11:64:63:63:52:3B:F3:B7:5C:E7:AC:ED:FD:2B:5B:92:28:33
Authority key identifier: 08:7B:29:C1:FB:D7:44:42:02:AE:00:2A:49:71:27:FD:66:F2:4A:D9
Certificate issuer:       /CN=A91FAED9/serialNumber=087B29C1FBD7444202AE002A497127FD66F24AD9
Certificate serial:       0538
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHspwfvXREICrgAqSXEn_WbyStk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft
Manifest number:          052E
Signing time:             Tue 12 May 2026 23:38:49 +0000
Manifest this update:     Tue 12 May 2026 23:38:49 +0000
Manifest next update:     Tue 19 May 2026 23:38:49 +0000
Files and hashes:         1: CHspwfvXREICrgAqSXEn_WbyStk.crl (hash: 7kZqKMMAWS8SJTHWFKfRN/zGK3wsUuP7r/vHbIMJLbA=)
                          2: D3C965FA45F611EC9FB3BB49C4F9AE02.roa (hash: ux98ZA0wQgB4FkaCCMLS/K2q+Dgh8iXTzVCbgOOhli4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.crl
                          rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHspwfvXREICrgAqSXEn_WbyStk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 23:31:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1336 (0x538)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FAED9, serialNumber=087B29C1FBD7444202AE002A497127FD66F24AD9
        Validity
            Not Before: May 12 23:38:49 2026 GMT
            Not After : May 19 23:38:49 2026 GMT
        Subject: CN=6a03ba09-6432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:19:c0:d5:6a:b5:2c:72:63:16:6c:96:5a:8f:
                    76:65:35:09:b1:bd:95:6e:c2:1e:c8:1f:02:ea:15:
                    77:23:94:b8:7b:2b:35:00:71:81:c2:fd:7b:a9:d7:
                    ec:4e:ac:e7:3d:97:d3:d4:99:2a:fc:6a:2d:26:20:
                    13:25:31:fd:eb:33:d3:8a:c0:fe:ce:f6:e6:44:f7:
                    91:7b:79:66:aa:04:0c:ab:aa:ad:db:7c:6b:c8:35:
                    30:3c:3b:e3:01:cd:9b:35:e3:47:99:8d:d7:5f:21:
                    05:97:2c:c4:50:74:59:19:04:fd:a7:dc:c0:65:fd:
                    28:2e:71:ed:04:53:c1:b8:86:d6:46:fb:43:b8:39:
                    bb:f4:25:be:cc:43:21:19:89:c4:2f:b2:23:bf:4b:
                    79:04:ff:ba:f9:fb:50:d5:03:3f:a7:2a:af:72:4a:
                    60:92:4e:e0:c3:ff:ac:f1:51:7c:b5:2d:14:ce:fd:
                    24:79:53:31:53:a0:88:33:5c:30:ca:65:7e:15:13:
                    0f:d1:bd:f8:37:48:04:73:cf:0b:a5:5a:90:c8:16:
                    c0:d9:5f:a9:93:e6:d3:23:9f:31:b3:04:e2:14:93:
                    b7:a3:2f:64:39:e0:8d:bc:63:d0:f8:a1:b3:37:27:
                    88:fc:4d:b1:e3:a0:c5:31:ca:2f:dc:17:7b:a7:0b:
                    08:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:D1:11:64:63:63:52:3B:F3:B7:5C:E7:AC:ED:FD:2B:5B:92:28:33
            X509v3 Authority Key Identifier:
                keyid:08:7B:29:C1:FB:D7:44:42:02:AE:00:2A:49:71:27:FD:66:F2:4A:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHspwfvXREICrgAqSXEn_WbyStk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:9c:7d:d5:34:eb:60:93:9c:f2:a2:66:e8:b4:46:00:3b:13:
         7c:45:f5:47:ce:0b:65:a0:a2:4e:8e:6b:51:f5:8e:c8:9b:b8:
         fb:50:78:ae:99:0f:52:94:e3:97:6c:14:3f:d5:8c:76:50:6e:
         7f:d7:c0:85:7b:a7:36:55:4f:ed:83:2f:b0:1f:c7:75:3c:2d:
         22:43:5d:ab:2c:14:22:18:07:45:53:89:d6:30:6a:d0:08:ec:
         03:72:f3:e0:32:15:80:f1:ab:9b:02:83:ff:9d:c2:d7:3c:89:
         12:ae:8e:25:77:95:05:9e:60:84:0b:b1:cf:56:2e:ca:04:87:
         b7:4b:e0:ea:35:d0:dc:9f:92:f6:c5:a3:ad:37:25:ec:81:f7:
         a9:c9:16:11:db:ce:91:30:41:88:f5:1b:9d:1e:00:fd:7b:ae:
         7e:2a:32:9a:0d:dc:b1:80:64:62:a5:67:1f:61:f5:00:2f:e4:
         30:26:ae:ef:66:93:a4:18:da:7d:1e:89:4e:b0:17:dd:64:78:
         9c:62:76:c3:e3:33:ff:a0:50:1a:d8:3c:94:4a:64:dc:4c:08:
         84:18:de:93:f7:39:ec:a9:3b:9d:4c:37:42:e8:5f:42:80:92:
         18:c0:e6:e8:01:6f:52:19:84:cb:a7:2d:34:9b:91:c4:5a:63:
         0d:77:6a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:07:38 2026 by rpki-client