Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft
File:                     WjWLSErYf-ApwQHa5tLtgo2GBVM.mft (raw, json)
Hash identifier:          VnkxR+rKhwFhzyxRRgfcpfqcRdPLiHe9hOMs58lmDR4=
Subject key identifier:   EC:1B:DD:CC:8B:2B:6D:66:B1:01:36:AB:68:4D:A4:A2:EA:7E:DB:86
Authority key identifier: 5A:35:8B:48:4A:D8:7F:E0:29:C1:01:DA:E6:D2:ED:82:8D:86:05:53
Certificate issuer:       /CN=A9125949/serialNumber=5A358B484AD87FE029C101DAE6D2ED828D860553
Certificate serial:       AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WjWLSErYf-ApwQHa5tLtgo2GBVM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft
Manifest number:          A4
Signing time:             Fri 27 Mar 2026 06:52:08 +0000
Manifest this update:     Fri 27 Mar 2026 06:52:07 +0000
Manifest next update:     Fri 03 Apr 2026 06:52:07 +0000
Files and hashes:         1: WjWLSErYf-ApwQHa5tLtgo2GBVM.crl (hash: MU28ZIEPnHwSIqYXb+icmRVIGgNjvnz+6G8g26hXaLo=)
                          2: D01462D636E611F090C5647FC4F9AE02.roa (hash: o2ClPvigt44EqHdI4QXa4+RC4H1zD8Ut65gPQzhhh7I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.crl
                          rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WjWLSErYf-ApwQHa5tLtgo2GBVM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 06:52:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171 (0xab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125949, serialNumber=5A358B484AD87FE029C101DAE6D2ED828D860553
        Validity
            Not Before: Mar 27 06:52:07 2026 GMT
            Not After : Apr  3 06:52:07 2026 GMT
        Subject: CN=69c62918-248d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:09:42:d5:24:b2:1f:66:63:47:ac:08:d3:92:
                    a3:58:b0:c2:d5:e8:ad:96:5d:85:65:a1:35:3a:84:
                    6c:bb:06:08:2e:6e:32:f6:ec:66:0d:79:2a:06:26:
                    aa:0b:c7:29:fc:0c:e6:3b:ca:6b:f4:29:5f:d5:24:
                    21:b7:c4:c0:ef:84:8c:44:00:e5:bf:7f:6e:54:26:
                    99:88:39:62:c7:33:d8:3a:d4:44:5a:19:20:a6:69:
                    51:2e:19:e1:a2:bb:58:67:31:74:82:0b:40:f9:9f:
                    27:ec:d4:bd:5e:22:e2:68:b4:85:af:fa:ca:b4:7f:
                    37:c2:df:1f:69:95:f4:24:f9:e7:c5:53:d6:28:29:
                    01:83:93:41:0c:bf:3a:3f:7d:ae:e0:63:2f:37:ab:
                    9c:1f:90:b0:6a:cd:ab:59:86:66:15:7a:1b:25:0d:
                    4b:2c:c1:57:d6:71:5c:34:3b:0f:d2:e2:79:ce:31:
                    d6:4c:34:8e:49:a7:26:5c:75:ac:40:e9:c8:e1:09:
                    8f:6f:43:81:0f:d4:7b:6b:fe:47:c0:f0:bc:ae:a5:
                    df:0a:ab:1f:4a:bb:6b:86:b6:3e:e1:ab:35:94:05:
                    ae:da:db:84:19:39:f1:2d:3c:53:a0:7e:1b:0f:4e:
                    bb:2d:c8:56:5e:b3:bb:fc:8f:46:3c:d5:51:a4:23:
                    a7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:1B:DD:CC:8B:2B:6D:66:B1:01:36:AB:68:4D:A4:A2:EA:7E:DB:86
            X509v3 Authority Key Identifier:
                keyid:5A:35:8B:48:4A:D8:7F:E0:29:C1:01:DA:E6:D2:ED:82:8D:86:05:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WjWLSErYf-ApwQHa5tLtgo2GBVM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:38:86:1d:ff:25:bb:2a:ac:1a:cf:97:8b:f2:83:80:a1:de:
         c4:83:ab:c1:12:60:8c:05:2e:3a:76:4c:03:ec:df:2f:80:f2:
         3f:c7:a6:54:bf:b4:9b:f3:a7:80:d5:c1:a0:9d:54:40:43:05:
         f8:4a:e3:f7:39:40:46:99:ce:29:54:ae:50:30:52:43:cb:08:
         70:51:12:67:2d:f6:3b:92:27:e5:64:03:fe:f1:18:ee:73:61:
         0d:ff:01:c4:b7:0d:5d:7d:ed:26:4b:63:8f:d5:a2:ec:86:99:
         7a:9f:44:d4:d5:49:5e:65:e6:a5:c0:42:3d:eb:1e:31:33:b2:
         52:d6:6b:66:b9:ac:0d:72:17:e2:b8:16:65:ab:c7:76:ac:0a:
         eb:a1:91:53:fe:5e:ff:5c:98:da:bc:6e:af:23:52:41:02:07:
         39:85:f3:ca:7d:35:cf:4c:39:69:0a:6c:e5:7e:39:a6:45:99:
         09:bb:e0:75:7e:4f:c9:dd:c6:96:58:a6:f3:51:2a:5b:a5:ff:
         8d:2b:f8:2c:43:54:4d:3c:eb:cb:b0:40:d5:6b:88:84:92:eb:
         c2:f4:ff:be:61:36:88:08:f3:36:3e:28:f1:06:a8:9f:ec:f7:
         ae:4d:47:35:f8:13:8f:34:30:d2:55:06:ba:af:8d:2d:d6:4d:
         2c:c1:47:55
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjU5NDkxMTAvBgNVBAUTKDVBMzU4QjQ4NEFEODdGRTAyOUMxMDFEQUU2RDJFRDgy
OEQ4NjA1NTMwHhcNMjYwMzI3MDY1MjA3WhcNMjYwNDAzMDY1MjA3WjAYMRYwFAYD
VQQDEw02OWM2MjkxOC0yNDhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5wlC1SSyH2ZjR6wI05KjWLDC1eitll2FZaE1OoRsuwYILm4y9uxmDXkqBiaq
C8cp/AzmO8pr9Clf1SQht8TA74SMRADlv39uVCaZiDlixzPYOtREWhkgpmlRLhnh
ortYZzF0ggtA+Z8n7NS9XiLiaLSFr/rKtH83wt8faZX0JPnnxVPWKCkBg5NBDL86
P32u4GMvN6ucH5Cwas2rWYZmFXobJQ1LLMFX1nFcNDsP0uJ5zjHWTDSOSacmXHWs
QOnI4QmPb0OBD9R7a/5HwPC8rqXfCqsfSrtrhrY+4as1lAWu2tuEGTnxLTxToH4b
D067LchWXrO7/I9GPNVRpCOnpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOwb3cyL
K21msQE2q2hNpKLqftuGMB8GA1UdIwQYMBaAFFo1i0hK2H/gKcEB2ubS7YKNhgVT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTk0OS82NjNCMjVGMjM2
RTYxMUYwOTUxRUI4N0VDNEY5QUUwMi9XaldMU0VyWWYtQXB3UUhhNXRMdGdvMkdC
Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dqV0xTRXJZZi1BcHdRSGE1dEx0Z28yR0JWTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NTk0OS82NjNCMjVGMjM2RTYxMUYwOTUxRUI4N0VDNEY5QUUwMi9XaldMU0VyWWYt
QXB3UUhhNXRMdGdvMkdCVk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGjiGHf8luyqsGs+Xi/KDgKHexIOrwRJgjAUuOnZMA+zfL4DyP8emVL+0m/On
gNXBoJ1UQEMF+Erj9zlARpnOKVSuUDBSQ8sIcFESZy32O5In5WQD/vEY7nNhDf8B
xLcNXX3tJktjj9Wi7IaZep9E1NVJXmXmpcBCPeseMTOyUtZrZrmsDXIX4rgWZavH
dqwK66GRU/5e/1yY2rxuryNSQQIHOYXzyn01z0w5aQps5X45pkWZCbvgdX5Pyd3G
llim81EqW6X/jSv4LENUTTzry7BA1WuIhJLrwvT/vmE2iAjzNj4o8Qaon+z3rk1H
NfgTjzQw0lUGuq+NLdZNLMFHVQ==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:42:23 2026 by rpki-client