Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft
File:                     WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft (raw, json)
Hash identifier:          N4TGUjJl+soBgqi7vv0NVrX6k2rKaR7H/9HOo0RngB8=
Subject key identifier:   B9:46:C1:57:C7:BD:85:CA:B0:69:E0:C7:05:41:11:AC:06:68:5F:B9
Authority key identifier: 59:57:59:D1:7F:8A:CF:44:CC:54:D9:06:04:6C:02:F4:B1:D9:DA:A2
Certificate issuer:       /CN=A9147016/serialNumber=595759D17F8ACF44CC54D906046C02F4B1D9DAA2
Certificate serial:       04EA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft
Manifest number:          04E5
Signing time:             Tue 24 Mar 2026 23:25:39 +0000
Manifest this update:     Tue 24 Mar 2026 23:25:38 +0000
Manifest next update:     Tue 31 Mar 2026 23:25:38 +0000
Files and hashes:         1: WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl (hash: Bl1FmPnP0Xb8CQPr/VdbEjF45CSwM5xqZOt6wS15PrU=)
                          2: 94FA2A66174B11EF84A2715AC4F9AE02.roa (hash: 2bvU2l27JfiDPTUt5UdrWGWC12SuTqfGvD8E40bRY/8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl
                          rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:25:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1258 (0x4ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147016, serialNumber=595759D17F8ACF44CC54D906046C02F4B1D9DAA2
        Validity
            Not Before: Mar 24 23:25:38 2026 GMT
            Not After : Mar 31 23:25:38 2026 GMT
        Subject: CN=69c31d73-d35b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8b:cd:38:81:d3:97:f2:c3:b4:c8:b6:d1:ef:
                    99:5c:70:f3:c6:a8:11:9c:f2:a2:15:89:f6:e2:90:
                    eb:91:ad:61:1c:83:48:52:23:e5:7c:9b:d4:c4:0e:
                    96:e4:4a:12:11:65:3c:d1:c0:83:cd:7a:4a:ab:f5:
                    c2:6f:89:84:75:3e:d8:7e:d1:b6:32:ff:23:c5:6a:
                    81:79:59:83:9d:9f:d6:18:b7:8e:b7:6a:92:47:0c:
                    35:61:28:9a:98:fd:81:b3:56:e1:50:96:92:cb:0d:
                    0d:f4:81:1f:c5:d8:36:10:ba:96:3f:ad:b4:e5:3b:
                    c1:b2:8f:b5:d0:eb:61:f9:b0:54:f7:81:d1:38:c1:
                    96:17:bb:1c:8b:91:35:20:52:e3:34:50:72:68:d5:
                    ca:ce:5d:b1:17:a0:9d:c2:9b:a7:da:34:17:7b:c2:
                    05:45:bc:d0:23:b8:90:98:19:e5:4d:39:ce:2d:bb:
                    60:07:92:9c:fc:c7:79:ca:85:48:ce:95:6b:da:1c:
                    c4:12:fb:f3:11:a1:cb:56:ef:7f:6a:5e:c2:40:36:
                    9c:14:84:2d:d3:e4:c6:30:2f:a7:9e:1a:87:22:8f:
                    31:83:5f:14:4a:cd:4d:8a:5c:82:b2:93:de:0d:01:
                    34:3f:d4:3e:aa:29:f9:00:bf:15:56:22:9e:f1:c6:
                    62:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:46:C1:57:C7:BD:85:CA:B0:69:E0:C7:05:41:11:AC:06:68:5F:B9
            X509v3 Authority Key Identifier:
                keyid:59:57:59:D1:7F:8A:CF:44:CC:54:D9:06:04:6C:02:F4:B1:D9:DA:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:d3:5d:f8:e8:37:dd:e5:d9:c4:42:05:84:5e:a0:c5:c9:83:
         3c:68:fa:42:80:72:dd:8b:30:38:d4:41:00:48:f0:55:47:eb:
         59:54:1e:59:07:45:73:fa:f3:8b:69:47:78:81:43:48:ad:44:
         f8:00:c2:58:d8:6b:cc:17:35:50:c6:04:e8:10:02:bb:fc:b9:
         21:00:b2:86:ab:b4:72:7d:bf:ed:f9:4d:33:1d:f9:42:1b:3b:
         f4:ab:8d:eb:f7:88:ac:f9:1d:ec:90:b5:6f:88:98:c7:b1:5b:
         b5:e8:75:3c:d8:f6:86:b0:0b:3a:58:78:39:11:cc:54:7b:f9:
         28:d5:04:4b:92:ea:f9:e1:b6:ee:76:f0:42:42:94:0f:8d:e0:
         d5:ed:d4:55:44:8d:12:34:9a:c1:c0:3e:5d:07:0a:b1:81:ed:
         03:5f:e1:c8:08:a1:ce:1f:64:f0:07:12:f9:34:07:6e:b3:36:
         88:b6:f8:c0:30:77:79:ad:b8:98:a8:88:df:31:d4:20:fc:e0:
         59:6a:e8:38:02:38:b4:09:c8:a6:34:d4:2f:64:be:bd:e6:4c:
         cc:09:89:36:a0:5b:75:01:d5:81:a0:97:10:d7:f5:ca:87:55:
         e7:95:1f:00:d3:bb:ea:21:d1:3d:63:32:61:40:00:95:06:88:
         3d:5c:7a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:50:55 2026 by rpki-client