Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft
File:                     wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft (raw, json)
Hash identifier:          ENWULz1i0nGp+3xto1Qu7/2+CgWvb1lD3te69+6UmsI=
Subject key identifier:   BE:FA:A4:A2:00:90:8D:4B:1D:65:39:69:61:B8:68:8C:CD:2C:0F:F1
Authority key identifier: C0:AE:F6:25:AF:9D:50:4A:E8:47:F6:92:3D:A8:91:06:9C:90:03:F4
Certificate issuer:       /CN=A9111D36/serialNumber=C0AEF625AF9D504AE847F6923DA891069C9003F4
Certificate serial:       0282
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK72Ja-dUEroR_aSPaiRBpyQA_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft
Manifest number:          0279
Signing time:             Mon 11 May 2026 02:04:22 +0000
Manifest this update:     Mon 11 May 2026 02:04:21 +0000
Manifest next update:     Mon 18 May 2026 02:04:21 +0000
Files and hashes:         1: wK72Ja-dUEroR_aSPaiRBpyQA_Q.crl (hash: 83pthF0xBGW+NGMBUXYwQ9rblcv1XO6MMif8b9V+BSs=)
                          2: 949A543291B011EDA9CB747CC4F9AE02.roa (hash: PkOsF2hTQSh3buTiKCZldxs2u/9datFbcXQ9jZ+jT/0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.crl
                          rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK72Ja-dUEroR_aSPaiRBpyQA_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 02:04:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 642 (0x282)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111D36, serialNumber=C0AEF625AF9D504AE847F6923DA891069C9003F4
        Validity
            Not Before: May 11 02:04:21 2026 GMT
            Not After : May 18 02:04:21 2026 GMT
        Subject: CN=6a013926-b6ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e5:86:6c:66:70:a6:70:f6:30:ad:58:62:6f:
                    e5:2c:ea:1a:49:67:02:37:c2:7c:a9:a1:55:68:04:
                    7c:f8:e2:ea:25:20:e9:88:a9:9a:32:f9:81:46:bc:
                    a3:ac:d9:e9:14:93:1b:d1:46:e1:6d:60:b8:6f:cf:
                    59:fe:45:0b:22:a3:04:5e:a1:ab:86:65:60:bf:4a:
                    b0:ac:c9:de:9f:93:fb:70:fe:63:75:98:f4:a3:69:
                    9d:5a:e3:d8:a8:f8:08:1f:a8:bd:49:0c:6b:84:0b:
                    b5:b9:9c:a9:bc:e8:09:6a:b2:19:e2:7a:e0:ff:0e:
                    32:dd:cf:f6:e9:d3:e7:5d:5b:5a:09:ba:64:c9:4f:
                    f1:4e:0a:9a:01:ba:03:0f:45:15:09:2c:a3:43:78:
                    58:10:e4:c6:b1:16:fe:c1:a2:f1:56:3d:63:45:bd:
                    57:b0:66:25:f4:ae:7e:02:ed:46:0f:53:f1:89:0e:
                    38:81:35:d9:fe:06:8c:b0:96:70:fd:e7:de:b4:7f:
                    dd:a2:e2:c6:40:61:39:03:bd:21:fa:e3:bf:5d:f2:
                    30:5f:e4:49:3e:47:bc:bb:a8:df:5c:27:67:d4:5b:
                    25:33:65:f6:89:8a:88:7c:5a:9a:5d:07:ee:6c:ef:
                    56:5b:78:34:fa:41:a0:a6:29:ec:4e:3e:67:2a:79:
                    94:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:FA:A4:A2:00:90:8D:4B:1D:65:39:69:61:B8:68:8C:CD:2C:0F:F1
            X509v3 Authority Key Identifier:
                keyid:C0:AE:F6:25:AF:9D:50:4A:E8:47:F6:92:3D:A8:91:06:9C:90:03:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK72Ja-dUEroR_aSPaiRBpyQA_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:fa:23:53:51:0e:93:7c:13:42:97:e9:b5:d7:69:6a:ec:8a:
         16:13:c1:5b:e4:98:62:05:32:75:a5:bb:e4:65:23:36:f7:56:
         50:06:6a:83:ac:ca:8a:65:e8:8c:1b:89:97:84:d2:d8:d9:ba:
         dd:9c:a1:54:f4:80:81:e7:b1:48:b7:91:50:d5:22:62:f1:43:
         4b:75:7e:46:53:87:af:ba:6a:a7:37:64:d0:7e:1b:c8:92:3a:
         d5:8a:48:5f:35:02:02:4a:bd:06:76:68:93:d3:ca:6a:e7:0b:
         c6:17:0a:a8:db:73:b5:6f:ad:81:b3:bc:81:fc:42:62:cc:aa:
         c2:4c:d2:c8:2d:1e:c8:53:15:61:ed:c7:6d:72:4a:fa:ec:8d:
         a8:8f:61:f2:76:1b:c9:c7:36:bf:0c:f2:ec:e3:87:4e:1b:e3:
         09:fa:75:54:1d:ba:8c:2b:cd:7c:db:e8:c4:7d:79:5f:96:34:
         33:41:aa:61:8f:a1:d0:2e:11:9e:4c:43:44:63:d2:92:0c:0d:
         81:87:69:e0:5f:56:80:ce:bc:a9:b7:1c:c3:75:4e:67:1b:66:
         7c:d4:ae:07:1a:18:37:60:69:0d:ce:36:c2:11:12:71:fa:c8:
         8f:9d:86:78:1b:14:34:cf:f2:43:d2:3e:d8:cd:8c:15:7d:86:
         ec:8c:d7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:10:59 2026 by rpki-client