Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft
File:                     WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft (raw, json)
Hash identifier:          t2DjpmCUu0g5kzVs34BrKmGQXiAfJV6L2gyE8pHFjP0=
Subject key identifier:   82:A6:B9:4A:2F:4F:D8:F4:D8:51:B6:37:6F:57:3A:F5:54:E1:4D:F3
Authority key identifier: 5A:22:3B:9C:52:4F:AA:ED:87:27:21:A4:2B:3C:30:2D:97:1E:38:04
Certificate issuer:       /CN=A9137843/serialNumber=5A223B9C524FAAED872721A42B3C302D971E3804
Certificate serial:       0617
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft
Manifest number:          060F
Signing time:             Tue 12 May 2026 22:56:28 +0000
Manifest this update:     Tue 12 May 2026 22:56:27 +0000
Manifest next update:     Tue 19 May 2026 22:56:27 +0000
Files and hashes:         1: WiI7nFJPqu2HJyGkKzwwLZceOAQ.crl (hash: Ww7I1fGvFhqN74uN4ivqdiVV3VvHJsTnl4aL97rV2aY=)
                          2: F2DDD4EEFB3211EB967B1759C4F9AE02.roa (hash: QnCIfaBwZolfnjhgtwAliuHrR1tHCV7ZzJ1Dz2+uA9o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.crl
                          rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:56:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1559 (0x617)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137843, serialNumber=5A223B9C524FAAED872721A42B3C302D971E3804
        Validity
            Not Before: May 12 22:56:27 2026 GMT
            Not After : May 19 22:56:27 2026 GMT
        Subject: CN=6a03b01c-e49c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:07:4d:69:6c:57:8b:8b:16:ed:40:78:c8:41:
                    13:f8:f6:af:bf:2e:83:9b:94:01:4a:dc:1e:89:2d:
                    04:20:3e:64:bf:b8:73:55:40:0a:15:c5:ad:47:f3:
                    2b:d3:1a:15:28:7b:fc:72:b4:05:c3:03:ba:85:27:
                    36:60:2d:64:b5:d2:de:71:44:9d:4a:be:98:4c:ed:
                    a8:ae:a7:6c:21:d8:b0:25:63:ba:9f:a2:ba:54:d3:
                    3f:07:94:53:18:91:3d:a2:1c:28:d5:7e:a2:70:63:
                    a9:c4:72:18:75:44:a5:d7:d4:5c:dc:1f:8a:d9:fc:
                    95:c1:35:e9:4a:97:a6:56:d3:7c:4f:60:8d:bc:c0:
                    01:6c:3a:77:d7:68:14:e6:5d:e8:f3:96:5e:61:96:
                    42:a3:0d:37:79:69:2f:de:1e:9f:14:08:e3:a5:3a:
                    59:75:92:db:af:ef:5a:42:6c:3c:06:18:dd:68:3e:
                    b5:e0:80:fe:88:9f:39:72:83:58:90:ad:50:35:b1:
                    76:61:3e:87:a5:49:a0:d9:8e:bc:9e:7f:5c:94:ce:
                    3c:64:2f:c2:d9:1b:55:b7:ec:ca:25:9c:6d:3e:50:
                    c4:3d:a7:79:6a:5a:cf:ae:3d:5b:a5:d4:ac:49:f0:
                    cf:7b:7b:fc:df:12:36:1e:06:f1:cd:dd:11:c1:17:
                    0e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A6:B9:4A:2F:4F:D8:F4:D8:51:B6:37:6F:57:3A:F5:54:E1:4D:F3
            X509v3 Authority Key Identifier:
                keyid:5A:22:3B:9C:52:4F:AA:ED:87:27:21:A4:2B:3C:30:2D:97:1E:38:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:46:50:c1:1c:1b:8c:47:08:b2:7f:f9:6a:db:5b:61:68:b7:
         5c:51:01:de:d9:63:71:ed:9b:74:55:f3:c5:69:6d:6a:84:dd:
         85:e3:eb:43:ee:a3:78:d3:1b:dd:ba:db:28:09:01:86:c2:48:
         ba:5b:70:7c:e6:11:19:a7:cc:56:18:16:63:42:18:eb:2e:08:
         fa:49:a7:51:06:d5:43:8d:35:70:c1:25:bb:a7:91:eb:f2:b2:
         56:17:6b:e9:3f:d1:e6:4c:07:d1:d1:7e:23:12:51:ac:b6:10:
         7e:4f:b9:58:d6:9f:fe:bb:12:c5:63:d6:ba:57:66:93:7d:bb:
         26:58:8b:58:93:39:51:94:5e:e2:8d:de:2f:66:87:7c:d7:b7:
         96:c0:38:07:e4:b5:0e:b6:30:f7:f2:a5:c0:f9:d8:68:e1:f9:
         a4:fe:2c:7d:2c:97:86:ed:ec:f8:34:cb:4c:e4:d8:81:9f:b6:
         05:1a:3b:31:36:5b:9b:39:67:24:7c:30:2a:3b:ba:dc:d7:10:
         76:37:e2:c4:a3:b9:89:44:70:0f:de:b1:15:82:4c:1b:93:3b:
         b5:e1:b0:b2:71:80:3d:90:49:d8:4f:11:be:98:5c:e5:c0:8d:
         12:5b:b2:13:88:1f:3f:ad:a7:31:d2:65:0f:78:96:26:59:4f:
         35:c0:a4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:31:41 2026 by rpki-client