Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913731F/81711ED89D6F11EEBBBC9180C4F9AE02/W3UJDp6gQpi0e6-C-qIoDl42pL8.mft
File:                     W3UJDp6gQpi0e6-C-qIoDl42pL8.mft (raw, json)
Hash identifier:          XkwcWWG6XlISZximpFY5mC9k5BRidedLrDK3/bm7cqg=
Subject key identifier:   30:D1:14:2D:DE:F7:25:58:E0:A1:44:7E:EF:31:75:01:C3:32:71:17
Authority key identifier: 5B:75:09:0E:9E:A0:42:98:B4:7B:AF:82:FA:A2:28:0E:5E:36:A4:BF
Certificate issuer:       /CN=A913731F/serialNumber=5B75090E9EA04298B47BAF82FAA2280E5E36A4BF
Certificate serial:       01C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W3UJDp6gQpi0e6-C-qIoDl42pL8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913731F/81711ED89D6F11EEBBBC9180C4F9AE02/W3UJDp6gQpi0e6-C-qIoDl42pL8.mft
Manifest number:          01B7
Signing time:             Wed 25 Mar 2026 03:22:56 +0000
Manifest this update:     Wed 25 Mar 2026 03:22:56 +0000
Manifest next update:     Wed 01 Apr 2026 03:22:56 +0000
Files and hashes:         1: W3UJDp6gQpi0e6-C-qIoDl42pL8.crl (hash: n8N3W0ULmNJJ1QX7aO6XP2bytcwy2hshCCPy2CJRiQs=)
                          2: 1701D3A0F36B11EF87FE3725C4F9AE02.roa (hash: TX+J7abBnuU/uCIH/IV3ubD2e5LCktkAj57+UDWn9JA=)
                          3: 32776B2EF77E11EFA2C3C928C4F9AE02.roa (hash: XUXNoEvnLXCrMAn/PkLZL72CudJZnmORjDiZpfrBW3c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913731F/81711ED89D6F11EEBBBC9180C4F9AE02/W3UJDp6gQpi0e6-C-qIoDl42pL8.crl
                          rsync://rpki.apnic.net/member_repository/A913731F/81711ED89D6F11EEBBBC9180C4F9AE02/W3UJDp6gQpi0e6-C-qIoDl42pL8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W3UJDp6gQpi0e6-C-qIoDl42pL8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:22:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 450 (0x1c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913731F, serialNumber=5B75090E9EA04298B47BAF82FAA2280E5E36A4BF
        Validity
            Not Before: Mar 25 03:22:56 2026 GMT
            Not After : Apr  1 03:22:56 2026 GMT
        Subject: CN=69c35510-d453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:60:b5:ff:9f:aa:a3:b5:bc:bc:88:cc:3e:18:
                    a0:c8:be:1e:cd:9e:23:d0:43:29:a1:65:ca:7e:d4:
                    3f:68:55:22:f6:85:b7:4c:f4:ff:a6:62:31:ac:66:
                    f5:3a:37:e0:ff:22:2f:b3:a9:5e:6f:4b:02:8a:c1:
                    03:4c:e6:6a:06:56:07:4f:c0:2b:34:b8:fb:cf:d7:
                    e3:92:55:4c:3a:7b:fb:1a:4e:41:0d:c6:d3:8b:94:
                    4e:0c:12:79:0a:db:c7:a2:13:ae:1b:fd:cb:e8:8c:
                    40:f0:85:b2:d8:c3:d8:88:58:fa:93:c5:9f:43:1f:
                    88:4a:55:b0:a3:b5:d4:66:c5:bf:2f:ec:f8:87:cb:
                    86:92:fd:1c:94:a7:10:02:12:05:34:93:b9:a6:ed:
                    17:86:c3:54:cc:db:7f:bd:78:bd:a1:3e:6d:5b:6f:
                    de:e8:de:69:bf:23:98:d3:8d:ac:c6:57:64:c0:c6:
                    87:07:39:a2:88:86:63:9c:35:e2:b4:47:d2:1b:26:
                    66:f3:ac:1d:48:3b:ea:08:4a:38:02:b7:3f:7c:6c:
                    2b:5b:59:9a:bf:3b:e1:fd:92:f0:33:d2:33:d7:39:
                    b2:e3:10:d1:67:cd:1c:b4:01:65:6e:a0:14:45:78:
                    5b:8f:59:04:5a:af:74:0d:1c:1e:a6:cb:49:e4:0f:
                    d8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:D1:14:2D:DE:F7:25:58:E0:A1:44:7E:EF:31:75:01:C3:32:71:17
            X509v3 Authority Key Identifier:
                keyid:5B:75:09:0E:9E:A0:42:98:B4:7B:AF:82:FA:A2:28:0E:5E:36:A4:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913731F/81711ED89D6F11EEBBBC9180C4F9AE02/W3UJDp6gQpi0e6-C-qIoDl42pL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W3UJDp6gQpi0e6-C-qIoDl42pL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913731F/81711ED89D6F11EEBBBC9180C4F9AE02/W3UJDp6gQpi0e6-C-qIoDl42pL8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:08:62:88:81:ea:b3:ec:19:2f:99:fd:af:ed:3e:ce:74:a6:
         7d:25:0c:42:b9:d7:55:e0:4c:11:05:49:8c:4c:58:10:12:0c:
         ba:5e:22:1d:4d:cb:b1:d9:c4:2a:33:49:5a:38:27:77:c9:45:
         7c:02:b9:75:81:9a:8d:fb:5a:f1:ab:0d:4c:ab:3e:1a:9e:08:
         21:da:fe:90:f6:f7:34:2b:f2:90:77:27:22:71:5c:8f:05:ed:
         80:4e:9e:eb:92:e4:c1:95:ff:4c:aa:82:3c:0b:99:10:74:ee:
         bc:ec:e8:03:6e:36:83:67:ed:57:13:3a:0c:2b:52:a7:55:49:
         0d:68:5a:6a:e4:4f:ea:d0:d7:3f:14:0f:9b:ad:43:f9:3d:44:
         0f:46:59:1c:8f:1f:c3:18:ec:27:85:29:5b:09:11:4a:f3:33:
         53:02:40:39:75:7f:7a:3a:69:2d:1e:79:35:e7:80:ba:0d:fe:
         d0:75:8b:81:a9:66:45:ca:d0:fc:66:ac:b6:37:6d:29:bd:41:
         c9:71:7b:41:f7:80:d2:7d:6a:be:2a:0e:fa:51:a7:82:14:cc:
         4f:65:a9:84:92:af:a4:cd:76:b5:3d:54:65:c7:20:b2:c1:75:
         2d:67:f1:a6:58:5e:d8:7d:22:64:88:e7:b0:24:b7:0d:65:fe:
         74:cf:5b:b0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzczMUYxMTAvBgNVBAUTKDVCNzUwOTBFOUVBMDQyOThCNDdCQUY4MkZBQTIyODBF
NUUzNkE0QkYwHhcNMjYwMzI1MDMyMjU2WhcNMjYwNDAxMDMyMjU2WjAYMRYwFAYD
VQQDEw02OWMzNTUxMC1kNDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx2C1/5+qo7W8vIjMPhigyL4ezZ4j0EMpoWXKftQ/aFUi9oW3TPT/pmIxrGb1
Ojfg/yIvs6leb0sCisEDTOZqBlYHT8ArNLj7z9fjklVMOnv7Gk5BDcbTi5RODBJ5
CtvHohOuG/3L6IxA8IWy2MPYiFj6k8WfQx+ISlWwo7XUZsW/L+z4h8uGkv0clKcQ
AhIFNJO5pu0XhsNUzNt/vXi9oT5tW2/e6N5pvyOY042sxldkwMaHBzmiiIZjnDXi
tEfSGyZm86wdSDvqCEo4Arc/fGwrW1mavzvh/ZLwM9Iz1zmy4xDRZ80ctAFlbqAU
RXhbj1kEWq90DRwepstJ5A/YmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDDRFC3e
9yVY4KFEfu8xdQHDMnEXMB8GA1UdIwQYMBaAFFt1CQ6eoEKYtHuvgvqiKA5eNqS/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzMxRi84MTcxMUVEODlE
NkYxMUVFQkJCQzkxODBDNEY5QUUwMi9XM1VKRHA2Z1FwaTBlNi1DLXFJb0RsNDJw
TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1czVUpEcDZnUXBpMGU2LUMtcUlvRGw0MnBMOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NzMxRi84MTcxMUVEODlENkYxMUVFQkJCQzkxODBDNEY5QUUwMi9XM1VKRHA2Z1Fw
aTBlNi1DLXFJb0RsNDJwTDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZQhiiIHqs+wZL5n9r+0+znSmfSUMQrnXVeBMEQVJjExYEBIMul4iHU3LsdnE
KjNJWjgnd8lFfAK5dYGajfta8asNTKs+Gp4IIdr+kPb3NCvykHcnInFcjwXtgE6e
65LkwZX/TKqCPAuZEHTuvOzoA242g2ftVxM6DCtSp1VJDWhaauRP6tDXPxQPm61D
+T1ED0ZZHI8fwxjsJ4UpWwkRSvMzUwJAOXV/ejppLR55NeeAug3+0HWLgalmRcrQ
/GastjdtKb1ByXF7QfeA0n1qvioO+lGnghTMT2WphJKvpM12tT1UZccgssF1LWfx
plhe2H0iZIjnsCS3DWX+dM9bsA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:55:10 2026 by rpki-client