Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft
File:                     WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft (raw, json)
Hash identifier:          vocbUYB0SP+r2awRFEnQinHe+vp0VXeWa4w5uBVve1E=
Subject key identifier:   09:D6:3A:75:23:2B:0C:30:62:A6:A2:C4:4A:E2:06:05:58:7E:36:6F
Authority key identifier: 59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7
Certificate issuer:       /CN=A914781A/serialNumber=59314703092845FCBD0BFBAEEF87D83FC66ED1D7
Certificate serial:       142C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft
Manifest number:          13EA
Signing time:             Tue 24 Mar 2026 14:56:03 +0000
Manifest this update:     Tue 24 Mar 2026 14:56:03 +0000
Manifest next update:     Tue 31 Mar 2026 14:56:03 +0000
Files and hashes:         1: WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl (hash: G493ju6XIAxrrMbVpm+mxCMEs3K2/LynGiTNnWt1458=)
                          2: 069626A6ABC211EA9C9FC06EC4F9AE02.roa (hash: a13wcJgj/v303LsVDa83QJzYatBFpSPG3+KuAw015o8=)
                          3: E53A0A54450911EBBA450A64C4F9AE02.roa (hash: QsNfjyBldTeeXZxbYWBlEhOqNtrvsHdGyA494jCXWak=)
                          4: 5BE6FE3ED7A311EF9D214C13C4F9AE02.roa (hash: f6ZjXZpyq8OVEfmQdaDwSN6wsAiiFOFq3Xa/dwSKfIU=)
                          5: 46CE46B416BF11EBB31D5A6AC4F9AE02.roa (hash: uelfGUi7e/t05BHwWkhZVN++x9escF/UtiNhCjCcV0s=)
                          6: 005D2F8E56B611EAA08F9B82C4F9AE02.roa (hash: 6B9hPSQdsNcZKZfD4I2g+nG3PQ9K3MqkXD1L3kncMBw=)
                          7: E1982A2EAD7511EA94C97127C4F9AE02.roa (hash: FXJ8Ym+jtcL3rZsEDtV2bU4z875vH9QG04Qb3pATJI0=)
                          8: 0D4D857E3B9211F0857DC432C4F9AE02.roa (hash: krDa/XdE9E/2Q0I211bs1loNvGb6/CHjA41cl9NEUoY=)
                          9: 994F0A88D86B11E9B8BFCE0AC4F9AE02.roa (hash: SE39gOZ2xnFhkX1dRNgXZ68hAy9sMt5XwzHtFoVdgBQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl
                          rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 14:56:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5164 (0x142c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914781A, serialNumber=59314703092845FCBD0BFBAEEF87D83FC66ED1D7
        Validity
            Not Before: Mar 24 14:56:03 2026 GMT
            Not After : Mar 31 14:56:03 2026 GMT
        Subject: CN=69c2a603-d70b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2a:1d:aa:85:84:2f:ad:16:eb:29:9d:88:c4:
                    08:45:f6:7f:43:84:04:88:13:02:f3:4c:68:94:a6:
                    a8:fe:85:12:28:c6:14:d6:89:ec:80:73:ad:2b:6a:
                    d3:de:53:ec:06:ab:29:d5:c9:6f:15:ae:b1:c3:72:
                    da:8e:1e:b3:e2:ad:bb:dd:da:54:09:b6:2a:24:4e:
                    7e:ae:12:ba:97:3a:a9:cc:d2:0f:92:ab:05:3b:b9:
                    5e:36:af:c3:d0:3d:24:78:2e:d0:6a:68:d9:98:1d:
                    f5:f4:64:53:15:1f:99:54:d4:6b:f2:a5:1d:57:37:
                    38:11:6b:e0:9b:f1:49:cf:f5:9e:27:1c:70:40:30:
                    46:dc:0b:d4:0f:20:d8:8c:f7:37:b1:12:9f:6c:3f:
                    bd:59:a5:6b:82:73:97:8a:b3:37:63:2d:08:07:58:
                    63:7f:12:8d:21:32:7f:ec:e5:57:f9:94:11:27:fe:
                    69:60:f5:07:5e:0e:51:d5:a8:3a:87:16:40:54:12:
                    5c:4a:77:72:98:f9:8b:2e:28:e5:1e:f7:a7:c2:02:
                    66:ff:b3:56:b3:18:e0:50:9e:c0:39:24:08:81:92:
                    6b:79:cd:09:54:3b:15:d7:b0:33:92:10:87:4a:c1:
                    06:80:c9:d7:48:ad:c5:74:f7:c2:76:49:46:35:50:
                    cb:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:D6:3A:75:23:2B:0C:30:62:A6:A2:C4:4A:E2:06:05:58:7E:36:6F
            X509v3 Authority Key Identifier:
                keyid:59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:01:e9:71:eb:2e:a0:5e:46:02:d2:2f:8d:53:e7:31:03:c7:
         87:8f:ee:6f:ba:c2:74:4d:f3:7a:d9:e6:f8:2b:c8:23:3a:a8:
         cf:f7:39:0e:67:9e:f0:53:88:a7:b5:72:08:9a:ab:85:74:24:
         c7:4d:dc:ee:db:be:e4:40:28:db:a9:70:80:f9:73:eb:60:46:
         3c:c4:f3:52:55:ba:83:4a:4c:9b:f7:14:e8:99:4e:ce:a0:b5:
         c4:5c:a6:0e:ad:a3:dd:e5:ce:66:f5:a2:aa:59:81:3a:30:a3:
         99:78:84:c9:8d:59:e0:46:79:5f:4d:0b:06:80:60:90:ff:9b:
         59:fc:37:1b:18:a1:96:4a:bb:cc:b7:64:0e:78:14:11:e6:e9:
         88:94:65:73:0b:d2:d9:24:b5:b7:10:28:c7:60:c8:3d:e3:ea:
         75:aa:74:76:78:76:c5:ac:f6:4c:9d:a2:e7:02:0b:72:34:90:
         51:71:d0:06:67:cd:f0:6c:f5:57:27:fa:d7:7b:fb:a0:87:d5:
         62:2f:77:91:c1:00:28:aa:b0:51:db:44:5d:b2:01:ba:e0:4c:
         0c:16:e1:bf:97:d9:6e:4b:58:64:fc:a2:cc:0e:ef:61:d4:2e:
         ea:c9:d7:a3:84:e4:24:49:47:1f:00:1d:4a:04:b6:ac:82:1c:
         e2:73:c2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:10:26 2026 by rpki-client