Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft
File:                     W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft (raw, json)
Hash identifier:          HEp9Q6madYN0Fn4TN8Z2KqgyAkxSfqz6ckuXPRi0nI0=
Subject key identifier:   18:74:96:B4:F7:5D:2B:DF:12:76:10:98:4C:95:6C:51:D1:49:EE:DB
Authority key identifier: 5B:43:00:FE:49:AE:E0:E4:15:CC:61:97:6C:02:B5:B9:C0:20:4A:AD
Certificate issuer:       /CN=A9122DC4/serialNumber=5B4300FE49AEE0E415CC61976C02B5B9C0204AAD
Certificate serial:       01C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W0MA_kmu4OQVzGGXbAK1ucAgSq0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft
Manifest number:          01B6
Signing time:             Wed 25 Mar 2026 03:30:51 +0000
Manifest this update:     Wed 25 Mar 2026 03:30:51 +0000
Manifest next update:     Wed 01 Apr 2026 03:30:51 +0000
Files and hashes:         1: W0MA_kmu4OQVzGGXbAK1ucAgSq0.crl (hash: FxbZ0hqGYkqwibADs4MMgTmBpt2xk24Bc8odJOM804g=)
                          2: 2D55C84C25CE11F0A36ACB18C4F9AE02.roa (hash: ubJqUF2IGrFRV6LySQWZVQd1AO/BSkWfNqfrHnBZLZc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.crl
                          rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W0MA_kmu4OQVzGGXbAK1ucAgSq0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:30:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 456 (0x1c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122DC4, serialNumber=5B4300FE49AEE0E415CC61976C02B5B9C0204AAD
        Validity
            Not Before: Mar 25 03:30:51 2026 GMT
            Not After : Apr  1 03:30:51 2026 GMT
        Subject: CN=69c356eb-91b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bc:a4:61:5b:aa:3a:29:68:ae:0e:b4:01:0d:
                    08:e1:91:f9:c0:b4:f0:b7:ef:59:bf:ba:d3:42:4c:
                    51:f5:b8:e9:1c:b2:6d:ba:7b:3e:ba:8c:6b:43:32:
                    03:94:41:08:ea:ee:5d:29:15:53:2c:c3:9b:d4:18:
                    28:01:11:d6:f4:24:02:fc:a5:eb:70:0b:1b:6e:8d:
                    55:4a:79:85:23:2e:57:50:ef:78:de:e2:d0:25:04:
                    71:d8:cc:33:ab:91:ac:cc:52:b4:08:d5:38:04:58:
                    1b:fe:86:c1:c7:ef:e5:06:53:5a:f6:87:ff:e0:26:
                    dd:8c:1b:a6:6e:69:6f:79:20:65:3a:a6:cb:76:d0:
                    cf:ad:0c:f4:b9:c0:c4:d7:65:1f:38:61:db:5e:99:
                    9b:74:44:df:e5:97:a6:cd:91:d1:91:16:bd:2a:3d:
                    cc:8f:47:54:1f:1a:82:b3:2a:95:a1:a9:d8:39:7e:
                    75:92:51:cf:35:e7:34:fb:52:89:a4:da:af:4e:d4:
                    3b:ba:a8:21:0f:4c:c3:84:61:a2:c6:67:1b:d5:73:
                    95:db:9f:6a:e0:07:00:23:ce:16:16:c2:c5:fe:7e:
                    62:c2:a5:02:a2:c5:c2:54:c2:4d:48:36:26:e4:87:
                    df:4c:ff:22:cd:3f:8f:05:97:72:66:7e:6a:03:81:
                    95:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:74:96:B4:F7:5D:2B:DF:12:76:10:98:4C:95:6C:51:D1:49:EE:DB
            X509v3 Authority Key Identifier:
                keyid:5B:43:00:FE:49:AE:E0:E4:15:CC:61:97:6C:02:B5:B9:C0:20:4A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W0MA_kmu4OQVzGGXbAK1ucAgSq0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:99:a7:e7:38:68:bf:95:6a:26:a2:40:b0:3f:7d:5f:bf:79:
         25:71:82:9b:c6:29:22:9f:69:80:2c:1a:d1:02:70:eb:a7:fc:
         5b:08:50:f2:b4:f8:72:04:54:5f:9f:65:51:f9:bb:53:66:4f:
         f5:e5:66:2e:dd:10:9e:37:83:aa:82:d6:9c:9a:0e:89:bb:d8:
         84:2a:8d:fc:00:ef:45:ba:aa:3b:6f:9f:1b:bb:ca:07:06:74:
         63:8f:a6:17:f7:d3:fc:70:64:6d:96:46:cd:07:8b:e6:19:56:
         e3:7e:a5:7f:73:38:e3:85:de:05:1b:06:fd:ac:6f:b9:f7:82:
         f4:fe:17:bb:9e:0e:cb:1c:bc:47:b1:8e:09:f5:73:fa:f1:7e:
         44:23:2f:c4:1b:d5:8b:45:02:ff:fa:51:54:c3:11:95:1c:08:
         db:c7:51:66:38:98:75:d1:df:8b:1c:d7:02:63:3a:87:b5:f6:
         45:ba:bf:13:16:bf:47:ad:dc:0d:7a:e1:41:47:0d:a2:b7:9a:
         7b:0a:2e:e6:56:69:63:28:af:e9:97:9b:5f:64:96:6d:ca:5c:
         5c:91:c9:8e:db:89:f2:68:3e:dc:65:8a:b0:7f:7c:1d:d9:ab:
         40:a6:bf:5a:31:cc:a6:07:e9:f6:a8:bc:f4:fd:93:ce:c2:22:
         1c:86:ed:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:35:32 2026 by rpki-client