Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A7CB/062482B09D0A11EA801CB243C4F9AE02/WYYa7M8NRdskqH6ohHvxmZH--vY.mft
File:                     WYYa7M8NRdskqH6ohHvxmZH--vY.mft (raw, json)
Hash identifier:          p2oNiZLGl2/KX2Dw/njEvoFbPZDW4Ti9WTJ7v0KYiuA=
Subject key identifier:   EF:5C:6B:14:AD:76:8F:A4:73:C7:13:63:A0:07:F7:B8:35:45:FD:51
Authority key identifier: 59:86:1A:EC:CF:0D:45:DB:24:A8:7E:A8:84:7B:F1:99:91:FE:FA:F6
Certificate issuer:       /CN=A913A7CB/serialNumber=59861AECCF0D45DB24A87EA8847BF19991FEFAF6
Certificate serial:       09DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYYa7M8NRdskqH6ohHvxmZH--vY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A7CB/062482B09D0A11EA801CB243C4F9AE02/WYYa7M8NRdskqH6ohHvxmZH--vY.mft
Manifest number:          09D4
Signing time:             Thu 26 Mar 2026 19:47:05 +0000
Manifest this update:     Thu 26 Mar 2026 19:47:04 +0000
Manifest next update:     Thu 02 Apr 2026 19:47:04 +0000
Files and hashes:         1: WYYa7M8NRdskqH6ohHvxmZH--vY.crl (hash: XSx/4jKooVG9ffMM2OtGgavxtNtp9Aq/ynkKvTmHnFo=)
                          2: 0D7DDD3A9D0B11EAAD024D44C4F9AE02.roa (hash: ddqS4/mb51CzbtcFdWmgiH2BC7jHFVDahaNaDt2judU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A7CB/062482B09D0A11EA801CB243C4F9AE02/WYYa7M8NRdskqH6ohHvxmZH--vY.crl
                          rsync://rpki.apnic.net/member_repository/A913A7CB/062482B09D0A11EA801CB243C4F9AE02/WYYa7M8NRdskqH6ohHvxmZH--vY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYYa7M8NRdskqH6ohHvxmZH--vY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 19:47:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2525 (0x9dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A7CB, serialNumber=59861AECCF0D45DB24A87EA8847BF19991FEFAF6
        Validity
            Not Before: Mar 26 19:47:04 2026 GMT
            Not After : Apr  2 19:47:04 2026 GMT
        Subject: CN=69c58d39-69ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:63:d1:8e:b1:29:2e:5c:dc:cf:25:be:eb:cd:
                    8f:41:08:d0:ed:d0:39:53:f9:8d:ed:38:7f:af:d8:
                    ec:ef:45:47:33:95:75:c3:1d:45:c3:f3:c2:75:07:
                    ca:93:c4:39:37:01:6b:35:a8:5a:ce:6a:bc:c7:46:
                    86:5e:7c:f1:e4:ba:a8:e2:3d:ca:c1:5a:cb:6b:0f:
                    db:6e:60:89:39:d6:ad:c1:3c:72:c5:44:35:71:fb:
                    31:ce:f3:b1:b1:51:22:14:66:bb:c6:0c:17:6b:f6:
                    63:e8:b1:5a:ce:e0:a9:d1:ea:45:46:54:64:44:c0:
                    4d:d8:d6:a1:d3:4d:c8:e0:da:99:0e:d1:f3:cd:e8:
                    18:e4:16:47:81:53:dc:a5:4d:44:95:f6:69:ab:b9:
                    e7:81:7e:0a:c1:b1:e8:3e:98:bd:85:73:97:2f:5e:
                    bd:ad:9b:fe:db:a6:96:a8:f5:95:2d:a1:04:b1:06:
                    cc:59:59:1e:9f:da:84:ab:22:90:17:9c:7f:c2:13:
                    05:70:13:83:82:6e:d0:2d:0e:e5:fe:ca:3c:f7:6b:
                    49:a8:58:d3:12:21:d3:68:bd:8a:d9:5d:7c:1c:50:
                    18:17:41:f8:c6:3c:ca:bb:77:99:d7:22:0e:ca:8f:
                    51:85:21:8c:86:60:06:b0:6f:ae:60:56:bd:19:1d:
                    82:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:5C:6B:14:AD:76:8F:A4:73:C7:13:63:A0:07:F7:B8:35:45:FD:51
            X509v3 Authority Key Identifier:
                keyid:59:86:1A:EC:CF:0D:45:DB:24:A8:7E:A8:84:7B:F1:99:91:FE:FA:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A7CB/062482B09D0A11EA801CB243C4F9AE02/WYYa7M8NRdskqH6ohHvxmZH--vY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYYa7M8NRdskqH6ohHvxmZH--vY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A7CB/062482B09D0A11EA801CB243C4F9AE02/WYYa7M8NRdskqH6ohHvxmZH--vY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:0a:db:9d:4b:ad:b2:e4:f4:e2:8e:97:24:3d:08:ea:2c:57:
         4e:69:45:3b:67:1a:25:88:0f:bc:e9:b0:f6:a0:ab:77:36:e5:
         b3:f3:a4:0b:3e:c5:55:7b:e2:27:6e:74:f2:38:6f:31:c7:95:
         e9:c2:67:24:34:9a:dd:e9:62:81:8e:eb:05:59:3a:08:30:26:
         03:5f:63:72:f6:01:de:62:ea:51:9b:13:98:fc:3a:51:69:4a:
         16:29:f0:86:54:f4:07:83:23:16:95:de:57:cf:4b:4d:79:b6:
         83:c0:b1:75:73:ba:1b:f4:62:42:73:09:06:df:8e:1e:c0:b6:
         fc:93:17:61:40:f3:54:51:3a:8e:79:50:d4:79:5f:9f:17:25:
         fb:86:9d:6b:83:ba:6d:38:09:a0:65:f1:f9:0b:85:e3:76:74:
         32:e7:10:fc:7c:5e:3b:79:29:1b:98:08:ac:27:2f:e4:13:eb:
         16:41:4f:aa:e5:97:98:39:64:ea:1e:6e:69:cc:8b:22:6d:f3:
         27:92:82:d7:10:62:00:b4:eb:4a:27:38:36:40:86:2e:e0:cd:
         f4:b9:58:46:0a:45:ec:b6:54:a1:0a:f4:30:2c:b9:43:7c:4b:
         59:51:4d:68:02:d5:2b:ba:37:c9:c9:d8:42:57:38:27:6e:43:
         30:d3:62:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:16:54 2026 by rpki-client