Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.mft
File:                     1WjiWa6pXRNIxmPjlfyma-wQwwk.mft (raw, json)
Hash identifier:          0EvvGwqWfDAJp8RIRkYwEE+q1gCX01jOIA8RXVSFQhM=
Subject key identifier:   B4:C1:DB:C5:EA:6C:A7:AA:7A:DA:72:4C:FD:F4:95:07:65:9F:EF:05
Authority key identifier: D5:68:E2:59:AE:A9:5D:13:48:C6:63:E3:95:FC:A6:6B:EC:10:C3:09
Certificate issuer:       /CN=A914C086/serialNumber=D568E259AEA95D1348C663E395FCA66BEC10C309
Certificate serial:       3522
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WjiWa6pXRNIxmPjlfyma-wQwwk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.mft
Manifest number:          3521
Signing time:             Tue 24 Mar 2026 15:04:21 +0000
Manifest this update:     Tue 24 Mar 2026 15:04:20 +0000
Manifest next update:     Tue 31 Mar 2026 15:04:20 +0000
Files and hashes:         1: 1WjiWa6pXRNIxmPjlfyma-wQwwk.crl (hash: Bk0a91L09u+D45hJ0IcAryM6GLgYBx2LubTb7NoW4Cw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.crl
                          rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WjiWa6pXRNIxmPjlfyma-wQwwk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 15:04:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13602 (0x3522)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C086, serialNumber=D568E259AEA95D1348C663E395FCA66BEC10C309
        Validity
            Not Before: Mar 24 15:04:20 2026 GMT
            Not After : Mar 31 15:04:20 2026 GMT
        Subject: CN=69c2a7f5-57b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0c:f5:c9:c3:be:72:03:31:3e:23:81:e6:bf:
                    81:56:c9:c3:ec:bf:9c:d4:4c:e3:72:cb:17:51:62:
                    b9:33:6f:c9:7b:da:5d:8a:2b:0d:0e:57:33:b9:1e:
                    8d:88:32:1e:36:44:ca:88:b0:e5:b5:d1:1a:6f:18:
                    7d:01:33:3f:ef:b5:40:7b:bc:53:b6:02:b7:f3:05:
                    51:47:00:03:86:df:ca:fb:f3:b5:cb:c8:0b:d9:55:
                    82:08:42:59:7e:55:2a:9e:82:6a:a7:58:b2:a4:cd:
                    8c:90:15:cb:45:93:8a:81:08:c3:20:4a:bc:f2:f4:
                    a9:c9:a6:5f:19:4b:83:45:24:30:00:4c:6e:0d:20:
                    24:77:5f:6f:ed:fe:54:73:0c:c0:7a:c9:39:57:a8:
                    11:f7:83:c9:44:3c:37:fd:91:de:9e:96:a4:8d:dc:
                    ce:d4:a1:77:71:06:30:dc:d1:b9:fb:d1:e0:52:15:
                    80:a3:fc:7c:8a:19:58:a8:42:34:d9:51:2e:f8:0e:
                    33:45:c0:8a:d5:ff:55:c7:9a:c1:af:eb:65:d0:c2:
                    e2:58:8f:3d:4c:43:d3:a9:2c:20:1c:35:eb:7f:3b:
                    df:2b:69:db:a2:d5:4c:0d:f4:84:d9:43:06:71:a3:
                    4d:3f:3f:6e:ea:00:58:97:c8:25:e2:3d:a6:53:14:
                    da:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C1:DB:C5:EA:6C:A7:AA:7A:DA:72:4C:FD:F4:95:07:65:9F:EF:05
            X509v3 Authority Key Identifier:
                keyid:D5:68:E2:59:AE:A9:5D:13:48:C6:63:E3:95:FC:A6:6B:EC:10:C3:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WjiWa6pXRNIxmPjlfyma-wQwwk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:99:f3:8e:57:11:4f:e8:fa:85:a2:08:c3:89:91:35:24:02:
         e1:22:df:46:8a:52:4d:1f:57:eb:2d:7d:9b:c5:b9:e6:a5:8e:
         50:3a:11:12:27:e4:0d:38:aa:49:4e:f0:7f:f7:22:06:5e:b4:
         6f:fe:84:29:00:07:8b:43:61:34:0f:e4:af:c4:08:6c:e4:b4:
         34:a2:eb:c2:c0:98:dd:29:d5:b1:81:6a:c5:ac:d8:fc:c3:50:
         aa:7d:e8:b2:fe:d6:55:d9:be:df:f3:99:cb:0d:ec:1b:34:da:
         19:2d:74:3f:aa:8c:c9:1b:d0:9e:0c:55:86:04:9d:d4:34:76:
         07:91:ca:12:1f:5a:c7:f9:5e:47:b1:35:48:7a:52:6c:2a:96:
         57:a7:2b:7a:b5:6e:29:6e:8b:98:d3:29:78:d9:80:b1:e8:66:
         d2:ba:17:97:d7:9f:13:fe:37:a7:3f:b8:4f:b4:23:d5:e1:7c:
         fe:b7:b9:08:e6:12:0b:7b:48:36:e0:6b:1b:25:00:49:2e:12:
         f5:04:94:80:62:1f:5e:66:6b:35:d2:2a:ac:37:dd:a5:b7:28:
         ea:7f:f8:1e:64:fa:dd:52:45:6b:4e:66:99:6b:5a:33:58:c9:
         6a:62:8a:a1:0f:d8:22:91:63:66:6f:20:41:50:eb:00:93:89:
         7e:ac:76:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:54:21 2026 by rpki-client