Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft
File:                     WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft (raw, json)
Hash identifier:          NNbiy/moOBC3eDH/w4ydGI25uQLAsvJRpbn1UaWARhc=
Subject key identifier:   3C:B0:23:0A:BD:8F:F1:91:A9:A2:9C:AE:1F:A8:51:9C:2A:D4:33:45
Authority key identifier: 59:56:65:FF:85:E4:E4:77:37:1F:75:41:F7:20:9D:C2:44:E6:0C:A5
Certificate issuer:       /CN=A91274A4/serialNumber=595665FF85E4E477371F7541F7209DC244E60CA5
Certificate serial:       0C7D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft
Manifest number:          0C3A
Signing time:             Tue 24 Mar 2026 18:39:46 +0000
Manifest this update:     Tue 24 Mar 2026 18:39:45 +0000
Manifest next update:     Tue 31 Mar 2026 18:39:45 +0000
Files and hashes:         1: WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.crl (hash: NMwohQBUGk8AMwUaSZLUgGFOAzDr611n8vJ6C9Jifc0=)
                          2: 140D52F2854B11EAACB2FE39C4F9AE02.roa (hash: NJ/7oIBGXC/PxDjKoZF+pd55TEkTum40/RwHEfCwL4Y=)
                          3: 474DC6748C2B11EA90152018C4F9AE02.roa (hash: TiR/THxTv+8Q4xjFCU9Crz8ZRBbuW10DJLAKMkvQPtc=)
                          4: 21A731506C9B11ED93A7513AC4F9AE02.roa (hash: +MbypgVzLHUTjgMkgZKJV+5xplqp/2u1VVeYBMIe3Jw=)
                          5: 1495D7EE854B11EAACB2FE39C4F9AE02.roa (hash: 86i08HrYhIHd5/tlQfJiPI8WTmudehhqB9JwGxyXYX8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.crl
                          rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:39:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3197 (0xc7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91274A4, serialNumber=595665FF85E4E477371F7541F7209DC244E60CA5
        Validity
            Not Before: Mar 24 18:39:45 2026 GMT
            Not After : Mar 31 18:39:45 2026 GMT
        Subject: CN=69c2da71-8c9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4d:89:bb:96:27:7d:25:9c:8f:77:8b:7b:60:
                    bf:da:e2:17:32:71:a7:5b:36:14:bc:0b:da:7f:49:
                    13:c9:c0:2e:ac:36:cf:e0:02:73:2a:1d:8f:a8:5e:
                    5a:79:78:fe:c4:53:b7:f2:93:97:c0:23:43:43:64:
                    71:35:31:b7:3d:de:66:13:e8:85:f5:f7:77:73:73:
                    ea:50:a4:31:08:6e:af:b0:48:3a:f2:5a:54:d7:07:
                    c5:f6:2a:bb:db:81:d2:58:a6:ce:b1:29:06:46:34:
                    b5:5b:69:3f:0b:f9:cb:f5:5d:e5:37:af:49:b2:60:
                    4c:21:3b:22:db:0c:be:c0:fc:56:6a:1a:b2:c2:5f:
                    de:e9:f0:99:93:cc:7b:32:3f:7c:1a:5f:92:01:b8:
                    b8:ef:de:f9:f2:12:10:2e:98:49:05:b7:6d:6e:9e:
                    07:16:ba:78:e5:8c:7b:67:09:77:b7:98:67:f8:25:
                    e1:4b:bf:9a:39:cd:36:d8:52:8e:2d:64:3e:81:28:
                    23:f6:37:04:fa:ac:08:86:71:9b:4f:fb:3a:a1:30:
                    8c:2e:72:8e:d5:7d:7d:8b:bd:c3:ac:6a:02:e5:7f:
                    fa:99:92:76:ef:01:66:9b:41:99:27:51:e9:08:42:
                    d2:be:a4:92:4a:47:7b:91:50:92:da:64:b3:67:62:
                    3c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:B0:23:0A:BD:8F:F1:91:A9:A2:9C:AE:1F:A8:51:9C:2A:D4:33:45
            X509v3 Authority Key Identifier:
                keyid:59:56:65:FF:85:E4:E4:77:37:1F:75:41:F7:20:9D:C2:44:E6:0C:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:43:71:b3:2e:6b:1e:b5:dd:1a:a0:aa:91:9d:9b:ac:23:21:
         d8:04:70:78:0f:f5:7a:b0:6e:bb:cf:64:07:44:57:61:ae:62:
         f3:b1:ea:4b:9d:7b:45:ec:63:a4:f5:b4:82:79:48:15:78:be:
         0e:4e:11:77:a6:32:50:5b:7c:a1:5d:5a:67:28:6f:0d:82:ea:
         8a:48:02:43:bf:90:0f:80:8b:c2:6f:e9:74:4b:2e:cf:88:d9:
         1c:ce:bd:48:78:3c:8b:be:df:07:c0:83:13:bb:1b:19:0e:ad:
         83:80:a9:b4:7b:af:3f:97:fe:62:6d:6c:a4:ff:01:b9:14:fc:
         36:6b:37:dd:da:31:3a:63:f7:bf:d0:3e:50:23:9d:6e:9e:a1:
         be:e1:01:f1:75:9a:0b:a9:74:06:e6:67:be:2e:9c:82:d0:fe:
         9d:3c:96:6c:fb:ba:3a:ca:71:36:b8:2e:13:a8:9a:bb:9d:f1:
         23:a0:36:4a:4e:5f:b0:19:77:e7:60:20:75:0d:3e:47:13:18:
         8e:f4:dd:fa:a5:a8:cc:a5:73:29:62:b0:91:63:c3:55:7d:70:
         a0:75:7a:73:73:30:26:74:94:27:c5:a7:05:9a:cd:f7:c0:78:
         6b:b3:55:15:25:1b:c3:1c:4a:99:2f:5d:9c:ac:28:65:ca:6b:
         46:06:dd:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:28:25 2026 by rpki-client