Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft
File:                     Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft (raw, json)
Hash identifier:          Ph+4PEAYGil9lPzTAESEOmTTOpQ06MZevS1/yWOKOc8=
Subject key identifier:   DF:FA:E3:F7:AD:C4:83:95:CB:CF:1A:96:3D:85:70:B4:9B:27:26:41
Authority key identifier: 5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9
Certificate issuer:       /CN=A911F8BC/serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9
Certificate serial:       0643
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft
Manifest number:          0631
Signing time:             Tue 24 Mar 2026 22:27:53 +0000
Manifest this update:     Tue 24 Mar 2026 22:27:53 +0000
Manifest next update:     Tue 31 Mar 2026 22:27:53 +0000
Files and hashes:         1: Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl (hash: OqpkCozmgeCNpFB/F4bLaV6TWTnVbP2btj0elOfyvfQ=)
                          2: 5284A644D3DC11EB9FCD6135C4F9AE02.roa (hash: j5ZJEpzdtOEiGnvXhEWjzNgokm2dtSBgk89RWseZw8s=)
                          3: 99B4BAA6D3E411EBB67F2616C4F9AE02.roa (hash: e7QKn7+kdQj0gCw0LNLlb5Q7271gVnMQQic/lrYBjOA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl
                          rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:27:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1603 (0x643)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F8BC, serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9
        Validity
            Not Before: Mar 24 22:27:53 2026 GMT
            Not After : Mar 31 22:27:53 2026 GMT
        Subject: CN=69c30fe9-7303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:0e:64:de:1d:67:67:ec:36:98:d6:01:06:17:
                    35:07:38:8c:69:89:0d:1e:11:aa:74:4e:64:89:98:
                    2f:f5:10:97:9f:95:50:5e:ab:5b:77:f5:36:0f:87:
                    09:e7:3f:9a:c8:69:f4:6e:74:24:07:ad:74:53:e7:
                    e0:94:46:de:67:51:25:35:c9:a8:81:80:38:0d:b1:
                    59:99:9c:37:55:6e:a4:fd:42:99:63:39:5e:cf:54:
                    93:3b:ab:df:a9:15:e1:df:94:aa:ab:75:3d:1d:b4:
                    a3:9e:6d:27:8a:a1:74:78:2f:dd:72:d6:6d:82:c6:
                    d2:e2:b9:32:4f:9c:ea:fe:ce:24:ad:7f:d8:f5:28:
                    07:bc:23:fd:9e:b5:55:e6:55:ec:e4:7c:62:af:f8:
                    2f:2d:e1:69:09:6b:0c:5f:45:2d:c6:c0:35:9d:93:
                    ed:07:f1:69:9b:82:f8:64:35:89:4d:19:b4:5e:63:
                    1d:15:08:23:ed:99:ef:19:4d:3c:31:50:2f:67:66:
                    07:26:62:42:5d:12:c4:45:ee:28:74:a5:b0:33:e2:
                    94:1d:b0:2f:f7:7a:0d:b8:bc:1d:8f:ac:3f:50:8d:
                    1f:75:e3:13:c4:2c:24:b7:66:f4:e0:3d:c1:f2:91:
                    92:c3:26:8b:bc:bb:25:42:63:99:75:7d:e7:22:13:
                    10:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:FA:E3:F7:AD:C4:83:95:CB:CF:1A:96:3D:85:70:B4:9B:27:26:41
            X509v3 Authority Key Identifier:
                keyid:5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:9c:c3:ed:0d:d4:ab:53:33:32:14:28:65:5d:6e:97:c0:3e:
         92:17:9e:16:38:89:4b:b5:00:1d:1b:31:65:bc:c9:bd:82:43:
         25:73:cc:0c:c3:e6:db:bc:91:b0:56:50:91:0f:e9:4f:fd:92:
         99:ed:6f:2d:d7:76:0e:e2:ea:f3:5a:4c:c0:bd:55:5e:d1:30:
         6e:17:31:be:a1:c1:a9:5a:3e:38:bb:9f:f9:26:26:a1:b3:ad:
         1d:e2:e7:c3:71:e0:d9:48:96:9d:ac:1c:3d:ce:e9:9a:75:7c:
         c0:18:0c:12:56:f8:94:28:44:f3:22:ea:e8:10:d6:58:31:2c:
         90:86:ac:32:02:92:d4:6f:33:98:e5:6f:41:e8:7d:db:66:5e:
         2f:cc:c5:14:8a:14:db:1d:fd:47:29:a4:15:2e:2b:05:91:cf:
         9c:34:6a:fb:24:52:a1:5f:5a:fc:3e:2f:3f:96:38:8b:62:07:
         8c:53:30:f5:d7:4b:4a:34:79:99:e3:2e:95:01:d5:e3:f0:4a:
         41:c8:ac:b0:41:54:40:35:f3:1f:30:28:c5:d0:54:32:a3:96:
         e9:74:c4:df:eb:bc:d1:f4:cf:d9:79:8f:f3:72:fe:e3:a7:50:
         d6:09:7b:fb:86:76:5c:d2:d6:81:4b:64:95:8e:34:5f:f4:15:
         36:24:45:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:06:33 2026 by rpki-client