Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft
File:                     wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft (raw, json)
Hash identifier:          8yiNp6BOsSNM54vd+bthWuh3WvT/Nb51I84L5fNI5wc=
Subject key identifier:   0B:77:97:E5:21:CF:11:75:E2:0C:DE:70:C1:48:82:05:DF:0A:7F:AC
Authority key identifier: C0:AE:F6:25:AF:9D:50:4A:E8:47:F6:92:3D:A8:91:06:9C:90:03:F4
Certificate issuer:       /CN=A9111D36/serialNumber=C0AEF625AF9D504AE847F6923DA891069C9003F4
Certificate serial:       026A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK72Ja-dUEroR_aSPaiRBpyQA_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft
Manifest number:          0261
Signing time:             Wed 25 Mar 2026 01:40:22 +0000
Manifest this update:     Wed 25 Mar 2026 01:40:22 +0000
Manifest next update:     Wed 01 Apr 2026 01:40:22 +0000
Files and hashes:         1: wK72Ja-dUEroR_aSPaiRBpyQA_Q.crl (hash: adIfG8hxd+zuWt5awK+2tuynfuCS7+1hGZ5V40NYEDU=)
                          2: 949A543291B011EDA9CB747CC4F9AE02.roa (hash: PkOsF2hTQSh3buTiKCZldxs2u/9datFbcXQ9jZ+jT/0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.crl
                          rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK72Ja-dUEroR_aSPaiRBpyQA_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:40:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 618 (0x26a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111D36, serialNumber=C0AEF625AF9D504AE847F6923DA891069C9003F4
        Validity
            Not Before: Mar 25 01:40:22 2026 GMT
            Not After : Apr  1 01:40:22 2026 GMT
        Subject: CN=69c33d06-8f98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e9:35:19:e9:b2:fd:84:fd:b6:1b:ed:b1:60:
                    25:4e:74:26:17:6f:27:6c:60:31:b1:24:42:49:68:
                    4e:d1:85:62:5e:bf:55:f2:c6:c6:c0:cd:9c:ad:36:
                    d2:74:7b:4c:3d:f2:a0:25:7c:46:67:66:c0:60:cb:
                    79:30:a0:8a:d3:6e:cd:b9:ac:6c:ee:a8:de:3f:f4:
                    e8:a4:2a:84:72:74:7b:b6:36:be:55:98:0f:f4:82:
                    af:45:e9:02:6f:ad:73:4f:42:ac:b4:3e:df:86:7c:
                    ba:4d:b9:65:76:21:d8:51:d3:59:d2:07:32:1c:c4:
                    53:b6:11:90:05:7b:87:01:9f:39:31:ff:e6:78:4a:
                    6b:85:8a:3f:7a:87:ad:91:2e:03:1a:13:a8:0a:e0:
                    ce:be:13:73:dc:3b:f1:a8:cf:c5:0e:b4:d2:72:17:
                    96:85:91:b8:83:8d:d6:a6:61:c1:a4:dd:83:dc:02:
                    9e:cd:53:21:07:60:84:d6:39:88:08:59:35:b6:a6:
                    bf:d6:47:95:7f:0d:a0:51:05:57:7a:c9:5d:af:7d:
                    c1:49:c4:0e:08:7d:fc:4b:16:f4:22:ec:08:ea:97:
                    40:14:9a:88:54:36:1e:cc:87:85:46:58:4a:00:ad:
                    84:80:7b:8a:92:56:91:17:de:98:9f:fa:9d:56:69:
                    28:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:77:97:E5:21:CF:11:75:E2:0C:DE:70:C1:48:82:05:DF:0A:7F:AC
            X509v3 Authority Key Identifier:
                keyid:C0:AE:F6:25:AF:9D:50:4A:E8:47:F6:92:3D:A8:91:06:9C:90:03:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK72Ja-dUEroR_aSPaiRBpyQA_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:ef:89:67:a8:89:69:29:85:67:66:93:f6:11:19:d4:c3:fd:
         fe:be:50:2b:1c:4e:17:51:dc:8c:17:fb:fa:e5:4a:57:95:5e:
         4a:a8:a7:3a:7e:64:b5:c4:a6:8c:b7:79:3f:f7:24:d9:4c:61:
         44:1e:bc:ed:b9:0f:5b:fb:8d:0f:57:5c:9d:42:e1:4e:6b:1f:
         56:87:14:fb:3c:f4:3a:f9:db:f9:e7:e4:d4:d4:20:85:41:5d:
         8e:a6:6d:92:3b:62:ff:7b:d8:1c:a4:a6:4c:33:3a:2f:ab:ce:
         64:30:e1:74:64:90:81:ed:ea:f3:c1:7d:7a:8f:0b:b6:38:25:
         90:14:cd:2f:90:cb:c2:37:fb:96:0c:9c:85:9c:41:7e:6e:8d:
         6b:6f:04:eb:61:5e:f2:97:69:9a:bd:22:4c:7d:2d:76:f1:f4:
         9e:cf:86:60:90:c6:7b:c3:d4:47:85:35:9a:c6:bc:85:ef:48:
         fc:e6:00:24:1a:a4:24:d7:fb:e1:77:ea:e0:a8:77:98:a1:85:
         a4:97:6c:0c:25:d4:37:d9:45:97:ca:1f:d3:49:68:2f:1a:cc:
         53:18:f9:9c:9b:d3:7b:9d:5a:fc:82:37:00:5b:6a:a6:db:16:
         58:13:dc:88:13:4a:a9:73:d9:f9:e2:41:d3:33:32:4c:48:2e:
         a1:fe:a6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:37:57 2026 by rpki-client