Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.mft
File:                     WXbvXQvxZojiXsXi3Iyp9a-uG1M.mft (raw, json)
Hash identifier:          Leeext8YToa5wVsLkhInTjRzXO5NP/Ih235D/3Em7H0=
Subject key identifier:   69:94:17:23:71:3E:B1:E5:A5:8B:97:D0:3C:55:03:96:B1:86:86:BB
Authority key identifier: 59:76:EF:5D:0B:F1:66:88:E2:5E:C5:E2:DC:8C:A9:F5:AF:AE:1B:53
Certificate issuer:       /CN=A91172C6/serialNumber=5976EF5D0BF16688E25EC5E2DC8CA9F5AFAE1B53
Certificate serial:       0FFB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WXbvXQvxZojiXsXi3Iyp9a-uG1M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.mft
Manifest number:          0FF0
Signing time:             Thu 26 Mar 2026 17:24:55 +0000
Manifest this update:     Thu 26 Mar 2026 17:24:54 +0000
Manifest next update:     Thu 02 Apr 2026 17:24:54 +0000
Files and hashes:         1: WXbvXQvxZojiXsXi3Iyp9a-uG1M.crl (hash: bvYyfHAl94cyjtg6QghytCGVM4OqhIM4yy1SoWC9AVk=)
                          2: 16FA72386A4E11E992F4832FC4F9AE02.roa (hash: Ykj40ormnAUlRAe7KIN8u1r15zhPJnYR8nOujDciFYc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.crl
                          rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WXbvXQvxZojiXsXi3Iyp9a-uG1M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 17:24:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4091 (0xffb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91172C6, serialNumber=5976EF5D0BF16688E25EC5E2DC8CA9F5AFAE1B53
        Validity
            Not Before: Mar 26 17:24:54 2026 GMT
            Not After : Apr  2 17:24:54 2026 GMT
        Subject: CN=69c56be7-6e55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:92:d4:73:36:6e:65:96:4b:eb:89:37:95:ca:
                    d1:c0:2b:e0:85:84:f5:66:bc:09:fb:4a:ae:06:cc:
                    d2:61:05:5b:3a:41:ae:d5:55:83:f1:de:c7:96:4c:
                    0a:b6:64:13:04:85:72:2f:4b:2b:ee:40:e5:97:5e:
                    ae:83:fb:d6:e4:ca:3f:d2:6e:37:d6:e7:fd:d8:2c:
                    66:a2:51:df:c2:4d:e6:d7:eb:a3:26:2a:0d:7c:0a:
                    02:68:db:08:92:72:22:7a:b4:3a:c9:07:4f:06:41:
                    0b:56:e4:aa:49:63:57:bf:62:70:66:e8:d8:42:ba:
                    0f:fc:61:cb:ba:4a:06:69:1b:62:cd:4e:5a:b9:ca:
                    a0:4d:0a:d9:5c:90:1a:b8:83:59:eb:7f:22:bd:f2:
                    91:52:78:35:ae:df:43:1c:81:19:b9:c5:4e:20:b8:
                    3f:0d:0f:ad:0f:f1:8d:45:bc:c2:96:be:5c:c8:3d:
                    45:32:5e:13:56:f4:3a:76:f7:32:89:bf:7e:c8:82:
                    2a:c5:7b:d7:7c:55:81:2d:bc:96:7d:99:a3:64:f7:
                    f9:02:1d:9b:60:78:9b:58:92:d1:e9:2b:f0:fd:8e:
                    e1:04:63:c9:19:94:ad:5a:4a:a5:43:44:be:cb:40:
                    f0:50:f5:62:51:00:67:f4:dd:8e:cc:3c:32:da:74:
                    f7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:94:17:23:71:3E:B1:E5:A5:8B:97:D0:3C:55:03:96:B1:86:86:BB
            X509v3 Authority Key Identifier:
                keyid:59:76:EF:5D:0B:F1:66:88:E2:5E:C5:E2:DC:8C:A9:F5:AF:AE:1B:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WXbvXQvxZojiXsXi3Iyp9a-uG1M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:68:ac:20:1b:6f:37:22:df:82:9b:75:14:fa:be:10:e8:d6:
         1c:82:21:5a:ea:c1:76:ab:53:17:fd:3e:1e:01:eb:3c:cf:e9:
         b1:4c:0a:38:5d:cf:c8:72:e2:45:d9:4e:96:8f:e1:c4:91:c1:
         57:de:b3:42:f1:8f:a7:ca:b2:9c:34:d0:8a:bc:b4:26:72:d2:
         b1:3f:7a:02:17:6d:74:ef:e1:7d:d0:2c:6d:40:cd:a3:e4:4b:
         bd:2c:e2:37:11:63:f0:c5:38:95:e0:3d:cc:9c:4b:ad:87:74:
         63:89:a4:6e:d8:67:1d:81:81:1f:bd:6c:10:e3:77:60:d0:98:
         73:ae:d9:1b:1b:4e:6a:c9:88:e5:79:22:67:e9:e1:04:45:c5:
         26:a2:b1:43:d9:63:23:90:85:9c:9e:34:2a:34:50:22:ba:33:
         6e:33:e6:1d:ab:54:b1:65:a8:77:ef:61:56:09:c9:d1:48:44:
         a1:0a:39:0c:50:12:31:cf:07:29:6d:f9:21:eb:91:dd:ca:53:
         70:9b:02:59:e7:d1:27:b5:28:25:dd:34:e9:e3:7e:91:46:68:
         05:d5:8d:cb:2e:ee:68:80:2d:91:21:91:78:a7:47:0f:bc:b2:
         37:01:b3:5c:fd:5b:4e:cd:25:d0:96:66:03:bb:4e:58:37:57:
         6d:a1:32:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:18:50 2026 by rpki-client