Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft
File:                     wP8fMmfYrZgSiz45fM_3lzt1CM0.mft (raw, json)
Hash identifier:          0cIEPXMMynKUaoLFON/c84gXP41dzw9WVtENzqaN39w=
Subject key identifier:   9C:EA:FC:A9:E0:4D:47:D3:73:18:12:88:5C:BF:AA:4B:E1:6B:FA:F5
Authority key identifier: C0:FF:1F:32:67:D8:AD:98:12:8B:3E:39:7C:CF:F7:97:3B:75:08:CD
Certificate issuer:       /CN=A91653D3/serialNumber=C0FF1F3267D8AD98128B3E397CCFF7973B7508CD
Certificate serial:       0156
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wP8fMmfYrZgSiz45fM_3lzt1CM0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft
Manifest number:          0156
Signing time:             Wed 25 Mar 2026 04:15:47 +0000
Manifest this update:     Wed 25 Mar 2026 04:15:47 +0000
Manifest next update:     Wed 01 Apr 2026 04:15:47 +0000
Files and hashes:         1: wP8fMmfYrZgSiz45fM_3lzt1CM0.crl (hash: OXEhqb7CNpBmH82DW3hZnqCTzjvXmNj0gvOSx+QwAbk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.crl
                          rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wP8fMmfYrZgSiz45fM_3lzt1CM0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 342 (0x156)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91653D3, serialNumber=C0FF1F3267D8AD98128B3E397CCFF7973B7508CD
        Validity
            Not Before: Mar 25 04:15:47 2026 GMT
            Not After : Apr  1 04:15:47 2026 GMT
        Subject: CN=69c36173-5aea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:cf:b4:50:74:d2:c6:1c:f6:bf:35:a4:d8:39:
                    08:2c:a2:42:e9:c6:99:0b:4f:ab:6a:69:7e:ff:49:
                    91:94:62:9f:a0:3a:c3:9f:9d:35:6f:db:e8:36:7b:
                    ed:71:d2:3f:bd:a5:20:70:74:ad:b7:3f:d9:41:3d:
                    04:79:f0:f0:d7:07:52:08:32:8d:1a:a3:7c:d1:4b:
                    17:2a:ec:d3:e4:a4:a5:0b:86:2e:ca:75:fc:20:54:
                    81:c6:24:af:77:cc:89:22:df:73:c5:5e:f9:27:65:
                    ea:ef:01:7e:79:f4:7f:bf:01:75:1c:6d:32:d8:8b:
                    ea:d8:57:ce:b5:c7:63:a3:29:8e:0b:34:5f:e0:33:
                    01:5d:d6:c8:ac:ca:8e:69:c0:17:a9:2a:6d:66:6b:
                    59:6e:b8:63:d7:ca:f3:da:0e:6d:9d:71:f1:22:ce:
                    d6:b0:98:c5:6d:81:44:ae:b8:e7:af:a9:75:9c:24:
                    cd:a5:34:e8:ae:ec:ce:13:85:3f:bf:74:ad:bc:56:
                    96:05:10:50:0b:e7:3d:05:17:f0:80:e5:34:06:3b:
                    17:7e:0a:50:49:81:24:c1:56:b8:53:8b:e0:b3:fb:
                    44:c3:87:b1:cb:3a:3b:2e:18:88:1e:0e:bc:e0:92:
                    3c:6d:c6:f3:97:53:3b:a8:75:26:18:37:7f:dc:69:
                    fe:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:EA:FC:A9:E0:4D:47:D3:73:18:12:88:5C:BF:AA:4B:E1:6B:FA:F5
            X509v3 Authority Key Identifier:
                keyid:C0:FF:1F:32:67:D8:AD:98:12:8B:3E:39:7C:CF:F7:97:3B:75:08:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wP8fMmfYrZgSiz45fM_3lzt1CM0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:32:42:d7:7d:3e:a9:63:09:c8:8e:a4:58:f5:1b:58:2a:45:
         4c:ac:eb:34:a3:35:d1:cc:61:38:63:e0:dd:86:88:55:45:8d:
         23:6a:e8:84:b0:11:8f:d0:a6:b5:4e:05:ab:2d:08:df:b9:97:
         23:53:16:59:92:84:9b:f0:6e:6a:26:91:be:72:6f:0c:28:d0:
         ef:15:26:f7:d9:b0:33:55:94:cf:97:d5:6c:ef:ed:24:a3:b7:
         48:46:12:45:8a:18:3e:b4:1d:9a:6a:02:34:66:3b:69:8c:ef:
         32:46:d1:12:6f:ed:ea:96:07:f0:fe:16:9c:fe:26:1c:2b:27:
         cc:31:1c:e5:b6:39:b7:78:da:bb:0c:83:b4:d2:40:ad:6f:84:
         5c:d8:37:d4:de:82:d9:5f:ec:b1:7a:21:f0:44:37:3d:49:3b:
         82:2c:a1:5d:70:7b:db:d4:47:d1:0b:68:5a:a9:4b:c1:b7:0b:
         bf:68:1a:16:fa:2a:4c:1a:dd:85:41:25:2c:c2:e3:1e:fe:31:
         4a:96:25:c3:f1:50:d2:15:9b:4f:b9:a8:42:94:cc:70:f6:8e:
         56:2e:1f:42:82:1a:51:1c:4f:65:4a:ad:30:65:a1:e1:f1:eb:
         d7:d4:8c:ac:33:22:18:66:ed:40:6d:4a:af:07:bf:33:4f:0f:
         d9:ca:5c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:53:24 2026 by rpki-client