Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft
File:                     WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft (raw, json)
Hash identifier:          K7SF9VNF+zkQjgUgsNcRGBKEipSWZPOLUna2alJFhh8=
Subject key identifier:   0A:5E:A7:57:D2:78:2E:A9:27:36:74:80:12:5A:09:7C:20:FA:F6:47
Authority key identifier: 58:EE:E5:2D:2A:E0:92:EC:55:86:E0:70:E6:46:2C:36:35:0F:A6:E1
Certificate issuer:       /CN=A914A75A/serialNumber=58EEE52D2AE092EC5586E070E6462C36350FA6E1
Certificate serial:       CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WO7lLSrgkuxVhuBw5kYsNjUPpuE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft
Manifest number:          C8
Signing time:             Wed 25 Mar 2026 06:01:21 +0000
Manifest this update:     Wed 25 Mar 2026 06:01:20 +0000
Manifest next update:     Wed 01 Apr 2026 06:01:20 +0000
Files and hashes:         1: WO7lLSrgkuxVhuBw5kYsNjUPpuE.crl (hash: uJlpTKiAhfWmZLhfURjy6Cg0z9b6U4xnv0EkQYkbPMc=)
                          2: D56D67B0F48711EFBB2D9D73C4F9AE02.roa (hash: 0HTbq8tBAK4fR+4sUeMKuHfNpFggIF0IOaiwHW3RNno=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.crl
                          rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WO7lLSrgkuxVhuBw5kYsNjUPpuE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 202 (0xca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A75A, serialNumber=58EEE52D2AE092EC5586E070E6462C36350FA6E1
        Validity
            Not Before: Mar 25 06:01:20 2026 GMT
            Not After : Apr  1 06:01:20 2026 GMT
        Subject: CN=69c37a31-727b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:51:35:4e:30:9d:3a:7a:e8:ae:e7:fb:e5:f9:
                    67:96:12:e8:05:18:32:87:f7:c2:66:b5:8a:b1:f0:
                    6e:dd:f0:b7:7f:1c:64:33:c3:1a:fb:a6:93:73:e3:
                    20:26:a7:c2:48:c0:c6:ae:af:08:05:7d:26:9c:b2:
                    ab:9d:a9:8b:83:8b:6c:ed:54:5a:51:49:71:f6:cb:
                    3b:61:5c:22:a0:f9:23:81:10:2a:58:d9:30:f1:8d:
                    27:fc:24:34:37:12:0e:3d:72:7e:7d:8c:68:bd:36:
                    cd:64:c2:70:97:55:d2:8c:33:3b:c7:fd:e2:a1:12:
                    f2:09:1b:4c:44:3c:fe:2f:fe:ff:d7:0f:1b:b9:ec:
                    d7:c8:4f:d9:ee:a1:4b:07:2e:b1:4c:e5:c2:d1:6a:
                    3c:21:fd:93:74:52:1d:92:6a:86:ef:9b:e4:16:42:
                    ef:c7:6e:ad:0d:7f:ad:d6:60:ba:59:b4:28:b2:0f:
                    7d:dd:85:1d:5f:d6:7d:64:90:13:38:41:26:98:2c:
                    6e:c6:b1:e6:f4:8f:d7:4c:99:58:00:89:dc:d0:5e:
                    ad:15:76:b3:49:95:c2:15:c9:e5:34:b6:a0:51:ac:
                    77:78:8d:0a:0d:d4:16:92:b5:cc:d1:4b:10:38:20:
                    9f:2d:38:3b:e6:25:ba:39:0a:53:62:c5:cf:ed:a0:
                    c2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:5E:A7:57:D2:78:2E:A9:27:36:74:80:12:5A:09:7C:20:FA:F6:47
            X509v3 Authority Key Identifier:
                keyid:58:EE:E5:2D:2A:E0:92:EC:55:86:E0:70:E6:46:2C:36:35:0F:A6:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WO7lLSrgkuxVhuBw5kYsNjUPpuE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:13:52:47:86:f5:58:95:78:d2:82:4c:98:72:a2:07:1b:a1:
         8f:40:d5:dc:45:b8:8a:fe:83:a5:9a:57:b9:6c:21:82:7d:05:
         4f:9a:71:c6:1f:71:0c:9a:01:92:d8:99:8e:eb:83:9a:84:04:
         8f:c2:c2:40:03:e8:7d:42:37:d4:78:17:f3:91:66:f7:a3:eb:
         ba:94:b4:11:40:86:d7:b0:b0:fd:92:a5:06:66:cb:65:75:1a:
         b6:17:80:b7:2f:a9:94:24:2c:5d:56:19:02:54:ec:86:1e:80:
         52:af:a2:54:9f:6e:bf:5e:07:04:1a:75:5c:ea:44:b9:bb:8d:
         01:81:58:c0:f4:fd:fd:8f:d1:c2:69:6d:ba:e5:8b:3a:32:90:
         99:a1:fd:e4:34:4a:16:76:a1:a7:50:fc:a1:6d:d2:8e:a0:35:
         a6:5b:47:01:eb:b6:15:c2:97:90:4a:ac:10:dd:17:bd:dd:60:
         8f:75:45:82:3f:a2:02:1c:59:90:2b:47:e4:e7:57:fe:be:b5:
         87:34:1e:99:9c:b6:aa:ac:87:1c:cf:09:c4:0e:66:e9:35:de:
         95:f2:df:d4:b1:8c:47:a4:47:c5:7f:b5:99:ee:fb:ce:c1:37:
         30:9a:3b:a9:80:c2:75:f1:c4:aa:1f:67:4c:bd:ef:83:c6:f1:
         11:8c:2c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:29:21 2026 by rpki-client