Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917126B/7F965D74DADD11EAAF0F4B1CC4F9AE02/WWynM84d0W-O7zIxnqXTqLIvkMk.mft
File:                     WWynM84d0W-O7zIxnqXTqLIvkMk.mft (raw, json)
Hash identifier:          DBk0XjKLXBw2OPeI/LwMVKvgfW3iAbIVtNzR1wswTQI=
Subject key identifier:   70:3C:85:AA:D8:B1:67:B6:CC:95:56:53:01:B6:B8:FD:E9:06:FB:BC
Authority key identifier: 59:6C:A7:33:CE:1D:D1:6F:8E:EF:32:31:9E:A5:D3:A8:B2:2F:90:C9
Certificate issuer:       /CN=A917126B/serialNumber=596CA733CE1DD16F8EEF32319EA5D3A8B22F90C9
Certificate serial:       08B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWynM84d0W-O7zIxnqXTqLIvkMk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917126B/7F965D74DADD11EAAF0F4B1CC4F9AE02/WWynM84d0W-O7zIxnqXTqLIvkMk.mft
Manifest number:          08A8
Signing time:             Thu 26 Mar 2026 20:20:36 +0000
Manifest this update:     Thu 26 Mar 2026 20:20:36 +0000
Manifest next update:     Thu 02 Apr 2026 20:20:36 +0000
Files and hashes:         1: WWynM84d0W-O7zIxnqXTqLIvkMk.crl (hash: 3gkqPrOCxY7X170/3dN425RF7Arf+dcquE47sPuKvMg=)
                          2: CF4D7C70DADE11EABE8DD41DC4F9AE02.roa (hash: QGR53TZasRrALPp0UjBSoe8L9xbJT5UOrH/JQ1zHksQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917126B/7F965D74DADD11EAAF0F4B1CC4F9AE02/WWynM84d0W-O7zIxnqXTqLIvkMk.crl
                          rsync://rpki.apnic.net/member_repository/A917126B/7F965D74DADD11EAAF0F4B1CC4F9AE02/WWynM84d0W-O7zIxnqXTqLIvkMk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWynM84d0W-O7zIxnqXTqLIvkMk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 20:20:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2224 (0x8b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917126B, serialNumber=596CA733CE1DD16F8EEF32319EA5D3A8B22F90C9
        Validity
            Not Before: Mar 26 20:20:36 2026 GMT
            Not After : Apr  2 20:20:36 2026 GMT
        Subject: CN=69c59514-31f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ef:82:70:1d:fc:2a:6f:55:a6:8e:67:1f:c3:
                    0d:12:75:0f:7b:6d:f2:8c:e6:00:e9:36:74:42:1a:
                    d1:7b:67:45:f7:6b:b9:31:57:29:c1:c5:e0:5a:db:
                    6f:44:8f:7d:a4:80:0a:0c:1f:62:36:84:7a:3b:f5:
                    50:02:94:ff:78:13:ea:81:ec:aa:47:3a:e3:ac:dc:
                    6c:2a:b2:32:b4:f2:83:22:57:cd:31:3b:06:b5:21:
                    3b:0f:05:33:57:4f:b0:ec:fa:bc:6b:49:76:c1:43:
                    ea:9c:f6:a3:c1:6e:27:cf:ce:1f:34:7b:a3:74:7e:
                    46:de:a1:6c:a4:fb:0f:66:7b:3f:36:74:fe:4e:06:
                    fa:16:39:ea:30:3b:06:7f:cb:d3:a6:38:e5:0e:36:
                    94:50:79:a1:6f:01:c5:37:41:fd:f2:f1:0f:fe:02:
                    e1:c4:0f:71:e5:a9:96:da:6a:21:41:6d:51:b8:b9:
                    7e:48:0b:61:1e:63:42:ac:73:f8:ef:73:0b:54:41:
                    b6:9c:75:c3:61:db:3e:a4:8d:56:db:84:5b:9c:27:
                    d2:be:d9:e5:ce:ad:4c:6a:e4:b5:99:48:08:22:ea:
                    20:29:74:66:7a:79:a0:15:d1:db:a1:f9:6d:83:5f:
                    fc:18:71:6d:43:03:18:6e:0e:54:2d:5e:e5:f9:66:
                    35:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:3C:85:AA:D8:B1:67:B6:CC:95:56:53:01:B6:B8:FD:E9:06:FB:BC
            X509v3 Authority Key Identifier:
                keyid:59:6C:A7:33:CE:1D:D1:6F:8E:EF:32:31:9E:A5:D3:A8:B2:2F:90:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917126B/7F965D74DADD11EAAF0F4B1CC4F9AE02/WWynM84d0W-O7zIxnqXTqLIvkMk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWynM84d0W-O7zIxnqXTqLIvkMk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917126B/7F965D74DADD11EAAF0F4B1CC4F9AE02/WWynM84d0W-O7zIxnqXTqLIvkMk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:4f:bb:1f:01:2d:68:8a:da:38:65:b0:17:12:2e:be:3f:a9:
         e1:82:57:db:80:5d:9e:b5:e5:22:24:fd:fe:b6:15:5d:65:c1:
         4b:d4:19:c0:c1:6b:8a:2d:b7:56:fe:36:3d:52:16:66:ed:c9:
         68:61:e5:de:47:4e:19:46:57:15:10:57:66:3f:1c:5d:91:60:
         31:e1:ce:d5:a0:b1:98:e3:9b:a7:4f:e2:90:8e:e7:a2:af:3f:
         78:10:30:58:cf:5d:89:7d:19:12:95:4f:f7:a0:c0:54:36:33:
         67:94:3e:65:ca:7b:a3:06:81:32:c8:8f:43:8d:93:2c:12:64:
         8f:b1:c0:ca:c1:84:ec:79:cc:99:9e:62:ee:1c:c1:cd:66:c8:
         39:34:88:7c:0b:c1:5a:76:27:cf:d0:45:b7:d8:35:f4:40:01:
         dc:4b:f6:bc:c9:33:9a:01:a5:ae:28:0c:2d:ac:71:60:84:75:
         b7:4a:d9:b3:ea:0d:7a:51:21:41:fb:e7:31:ec:53:d8:1b:33:
         32:3f:cb:ba:0d:97:31:6c:c4:e2:4b:83:8b:17:c2:56:7d:12:
         2b:58:74:5f:c7:d0:30:e4:ff:51:8e:71:c5:e3:e0:fd:37:56:
         e9:50:42:f2:5f:d8:52:14:e0:d4:fa:bf:bd:ad:a9:17:09:63:
         8a:8f:61:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:14:15 2026 by rpki-client