Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft
File:                     WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft (raw, json)
Hash identifier:          OCsK9H1djQM1cVwY7DndazIez3BrkzTxP7/AXj1SiCI=
Subject key identifier:   80:3F:EF:58:5B:CF:75:2F:D0:B8:E0:64:1B:0A:62:35:C1:53:E7:0B
Authority key identifier: 59:90:F4:C3:BB:23:43:6C:95:10:0B:48:48:DC:91:86:AA:49:53:19
Certificate issuer:       /CN=A913C4FD/serialNumber=5990F4C3BB23436C95100B4848DC9186AA495319
Certificate serial:       0107
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZD0w7sjQ2yVEAtISNyRhqpJUxk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft
Manifest number:          0102
Signing time:             Wed 25 Mar 2026 05:23:11 +0000
Manifest this update:     Wed 25 Mar 2026 05:23:11 +0000
Manifest next update:     Wed 01 Apr 2026 05:23:11 +0000
Files and hashes:         1: WZD0w7sjQ2yVEAtISNyRhqpJUxk.crl (hash: ShHbzCkewd8xNCyjAqXGepcITWUhXF50hNHpIK2/RuQ=)
                          2: 7C321BDEA55711EFB8317F6BC4F9AE02.roa (hash: 0iiaisEVoFgTOH2CCzbwqWu/DbOaNizKGC5fWfvGWtw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.crl
                          rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZD0w7sjQ2yVEAtISNyRhqpJUxk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 263 (0x107)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C4FD, serialNumber=5990F4C3BB23436C95100B4848DC9186AA495319
        Validity
            Not Before: Mar 25 05:23:11 2026 GMT
            Not After : Apr  1 05:23:11 2026 GMT
        Subject: CN=69c3713f-d2e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ee:22:18:26:63:d2:9c:2c:8e:4a:dd:fc:55:
                    b6:b8:f3:d6:d6:e9:1f:a7:dd:90:57:df:11:1c:1e:
                    c8:d0:52:0c:e1:e4:01:f0:f8:4a:bf:56:ec:48:93:
                    f9:2d:5f:05:54:5c:f1:36:3b:b9:f7:fe:e0:ee:f3:
                    4b:47:9a:7c:44:9a:f8:de:6e:3c:96:fa:ef:74:4d:
                    08:64:b9:3e:50:f6:f6:1f:dd:dd:27:2e:fb:50:43:
                    67:1f:67:4d:1d:dd:2a:e0:e1:52:94:f9:a6:4e:6c:
                    2f:a9:c1:fa:e1:e8:6d:f6:5b:a5:c5:64:31:14:91:
                    65:0d:49:a5:86:e7:ac:30:5e:bb:7f:2e:08:63:cd:
                    4b:87:22:f7:b6:bb:f2:fb:16:03:21:40:31:9b:a9:
                    cc:4d:80:02:01:29:f4:69:bf:74:41:3f:82:f6:3b:
                    f8:19:5d:25:92:cc:71:ae:92:52:1e:8f:06:d3:54:
                    cb:61:da:fe:3e:63:00:02:ed:1d:08:a1:3d:fb:08:
                    39:02:09:c6:9e:06:11:90:4e:7b:b1:c3:c9:59:73:
                    c7:bf:e1:94:e5:bb:9a:34:51:24:7d:7a:e8:c8:bc:
                    db:ad:01:96:ac:c0:fd:f0:85:ad:62:7a:a2:d0:1e:
                    53:13:85:c2:0f:25:53:b7:9c:cb:09:e5:ae:76:de:
                    ec:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:3F:EF:58:5B:CF:75:2F:D0:B8:E0:64:1B:0A:62:35:C1:53:E7:0B
            X509v3 Authority Key Identifier:
                keyid:59:90:F4:C3:BB:23:43:6C:95:10:0B:48:48:DC:91:86:AA:49:53:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZD0w7sjQ2yVEAtISNyRhqpJUxk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:6f:f0:e4:01:1f:53:b2:9a:4f:e5:bb:35:ae:ef:dd:fe:62:
         8a:85:b0:d0:e4:db:7d:90:be:0f:30:e8:c0:45:e7:d1:c8:34:
         ed:4b:0c:f2:67:cf:55:69:46:ed:41:b3:86:4f:75:42:d2:af:
         6f:cf:f4:da:15:08:13:d3:94:62:cf:aa:0c:53:c7:76:bb:fa:
         bf:2e:06:df:60:e7:dc:1c:8a:dc:f7:e2:41:16:e4:d5:ed:ad:
         9e:c4:1e:f9:32:3d:99:79:51:4f:08:27:8b:6b:1e:32:3a:a7:
         e0:43:f0:05:c7:fc:1a:fe:6a:13:06:52:e5:d2:06:f8:39:bb:
         1b:f9:de:d4:89:79:65:7f:e3:aa:a0:05:82:a2:0f:39:5c:f1:
         03:1d:73:c8:dd:35:4e:bb:50:a0:0b:6b:f6:53:47:d8:45:26:
         9d:4e:af:86:f8:77:bd:bb:bd:db:72:03:03:e8:d1:66:ae:09:
         b9:22:c6:a8:a7:d5:f7:c7:ea:71:b8:2d:dd:f4:44:db:a8:1d:
         85:84:fc:ea:c9:5e:aa:04:70:7e:e8:68:20:c5:5e:c4:87:83:
         34:de:58:16:0e:f1:f5:c3:b9:58:08:57:d5:0d:63:ad:8b:3b:
         8e:2e:aa:20:e0:67:87:ed:73:0b:b3:c2:78:4a:76:ed:c9:0b:
         e8:80:52:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:15:25 2026 by rpki-client