Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft
File:                     Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft (raw, json)
Hash identifier:          39lJVf1qgH8GWecMzF738/wyVX36iC7/kCPW+aZ+0s8=
Subject key identifier:   07:05:9B:7E:7F:25:7E:71:42:02:00:3D:A3:7E:60:38:EF:68:A7:DA
Authority key identifier: 5B:2C:F0:FB:62:F1:60:F1:83:8A:EE:3E:6C:DE:07:54:4D:FF:8B:FF
Certificate issuer:       /CN=A9123D9C/serialNumber=5B2CF0FB62F160F1838AEE3E6CDE07544DFF8BFF
Certificate serial:       1121
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft
Manifest number:          10A5
Signing time:             Tue 24 Mar 2026 17:15:43 +0000
Manifest this update:     Tue 24 Mar 2026 17:15:42 +0000
Manifest next update:     Tue 31 Mar 2026 17:15:42 +0000
Files and hashes:         1: Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl (hash: vT46zZ/bWc9VHup5jQCtWbp2+lW7s79na8wQ9H0xlHM=)
                          2: ED4C74EC5B2911EDAC608856C4F9AE02.roa (hash: c4KIZ7sVtzVDPX25+FzQ/O+y1BOxGSAb3CkDDL2gT68=)
                          3: F34FF6B69C3B11EABC59DA11C4F9AE02.roa (hash: OLxb4szEa42sVAsVtahDW9OACGax9w0AvXegNjux5TA=)
                          4: B7D67B4ECC3011EA9B54C679C4F9AE02.roa (hash: EE7xiFt8zHUSdbXxMdyXG6Wpd6uFiY1gYTraSn4pB98=)
                          5: F47561669C3B11EABC59DA11C4F9AE02.roa (hash: x8RxxSceiWsll8aKdp4onnVgfhxxvJp6geOEYhZHJgc=)
                          6: 884A03F4447111EC83674068C4F9AE02.roa (hash: MesMGQxH0Xw4s7Fn2Idh7Qa7VWkhHaWaah+Jq/emd28=)
                          7: 9D164714168511EAB282BB44C4F9AE02.roa (hash: DSZNEJ4bi4o5CgyqC1+84x7Rm378M2iKs/nwItolD0A=)
                          8: 727F33429FAD11EAAD1A6744C4F9AE02.roa (hash: juU4sbQRoi0FHuryZbA2eU5v383vXepIosrtYBH3gtg=)
                          9: 9DE197A2168511EAB282BB44C4F9AE02.roa (hash: okPNLIYHqUe2+LRXDuE5SiF4zzmmje5rGzctyXR1y8I=)
                          10: 04C5DE76FF2711EAB7D5F235C4F9AE02.roa (hash: eb3+tHV1wRLLEmC3kj0RQw3MnpJ2PGa07z+N4EUcBA8=)
                          11: CC320712ACE011EAB535D034C4F9AE02.roa (hash: ATSoIcgvhIoB1w29pbN50AH77sAvyF3PhL5dixTk+JA=)
                          12: A8DA1B1E9EE511EA890A7220C4F9AE02.roa (hash: wWSjcw2Ok0AjX38Jalp5jeYRBwKOimHHIAdxglDe+3Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl
                          rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 17:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4385 (0x1121)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123D9C, serialNumber=5B2CF0FB62F160F1838AEE3E6CDE07544DFF8BFF
        Validity
            Not Before: Mar 24 17:15:42 2026 GMT
            Not After : Mar 31 17:15:42 2026 GMT
        Subject: CN=69c2c6bf-2a73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:97:83:39:e3:9a:3e:b3:2d:6a:55:a3:a3:78:
                    ec:d4:e4:7c:d0:7a:7d:5a:c4:71:1f:90:b4:c6:cf:
                    fe:96:2b:7a:07:00:73:2a:53:01:9d:b8:e7:b2:59:
                    81:08:79:95:6c:61:35:36:61:b2:92:39:61:ca:fd:
                    a1:9e:82:17:91:bd:44:70:86:19:65:6f:f9:a1:d9:
                    80:a6:30:7f:f5:c0:aa:d9:4a:74:32:53:46:2c:82:
                    01:82:72:03:f5:9d:65:b5:48:d6:fb:c2:b9:70:44:
                    65:a6:45:1a:d8:72:5e:de:11:f9:cd:6f:3d:67:aa:
                    34:2e:a4:d7:40:f4:0b:52:39:18:47:fe:e1:25:cb:
                    1e:2c:9c:b8:55:68:98:f3:37:82:3d:25:11:bf:e3:
                    7a:d5:df:4a:9a:52:78:52:b4:16:2f:78:d3:fd:ef:
                    56:0a:d0:f2:08:d5:8f:64:8a:72:ab:f0:95:43:88:
                    1c:7a:14:69:5f:eb:2b:d3:01:76:72:6b:bf:bc:de:
                    ca:ec:a2:05:a7:4b:8e:45:2a:a2:83:22:03:d7:3f:
                    a1:e2:6d:90:fd:40:96:8c:7d:07:7a:b9:ba:79:1b:
                    3a:58:b3:a0:ef:37:6b:b4:01:14:73:19:48:82:55:
                    9d:d4:18:1a:ef:19:dd:b7:48:cf:cd:9d:f9:a6:10:
                    13:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:05:9B:7E:7F:25:7E:71:42:02:00:3D:A3:7E:60:38:EF:68:A7:DA
            X509v3 Authority Key Identifier:
                keyid:5B:2C:F0:FB:62:F1:60:F1:83:8A:EE:3E:6C:DE:07:54:4D:FF:8B:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:ae:85:d9:13:5d:cc:4f:2d:b5:15:ea:21:b3:19:26:c2:d5:
         d1:63:7f:4b:03:2f:a6:67:f7:93:de:ce:8b:ac:e5:f1:d5:28:
         cd:f2:ef:b5:56:bb:7f:e9:54:aa:70:ce:ab:51:e5:ae:a9:98:
         54:de:1f:b6:01:73:f1:86:50:22:85:dc:75:54:84:6d:6d:84:
         20:f1:7f:a3:12:65:de:dd:fc:15:41:f1:ce:1a:81:bc:0e:16:
         63:52:fd:4f:b2:99:df:ae:9a:30:eb:55:8c:e9:92:75:ca:b0:
         57:60:38:f5:22:ff:13:e1:6b:2a:c7:13:b6:0b:ec:52:99:aa:
         5d:b8:1b:3a:f6:9d:ee:ca:54:eb:bb:98:3b:75:ad:92:07:54:
         29:f0:60:3a:5c:52:10:6d:e1:3c:b2:9c:94:30:bf:fe:08:b7:
         ba:50:61:23:a8:0f:78:b5:bc:b5:53:b2:1b:b6:43:d7:20:fe:
         69:61:9b:4d:c9:d4:69:22:73:74:70:39:0c:7a:ae:32:9f:65:
         d8:ae:60:ac:53:ca:40:b7:b1:0a:2a:03:76:b4:86:eb:9c:5f:
         cd:11:d1:4b:df:6a:92:a9:91:20:94:b9:47:97:a2:10:a6:f0:
         2b:75:71:2f:ce:c2:7d:57:6c:4b:c6:c4:d2:dd:53:9c:24:08:
         91:17:ca:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:34:25 2026 by rpki-client