Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft
File:                     W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft (raw, json)
Hash identifier:          4rpswc8S4ct967f9vGoX+jnnY9yXQGFw2CNGITVAp/w=
Subject key identifier:   45:F2:76:41:BF:F2:BA:D3:6D:9A:2C:2E:82:9B:2A:34:6D:34:D0:0D
Authority key identifier: 5B:C4:94:E8:9D:0A:41:55:B5:52:53:63:D1:23:5C:5E:DC:0F:DE:2F
Certificate issuer:       /CN=A9171882/serialNumber=5BC494E89D0A4155B5525363D1235C5EDC0FDE2F
Certificate serial:       0174
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W8SU6J0KQVW1UlNj0SNcXtwP3i8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft
Manifest number:          0171
Signing time:             Wed 25 Mar 2026 03:58:51 +0000
Manifest this update:     Wed 25 Mar 2026 03:58:51 +0000
Manifest next update:     Wed 01 Apr 2026 03:58:51 +0000
Files and hashes:         1: W8SU6J0KQVW1UlNj0SNcXtwP3i8.crl (hash: Rkqi6melYpzlivQhaR3NvjJd5FRXPjJ1mYW1x9OoNJ4=)
                          2: FD990E7AF0B311EE9923BC84C4F9AE02.roa (hash: VwI4htuyMxcGwrz52sIqcL8v2K+xVngLHVndBMFj5NM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.crl
                          rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W8SU6J0KQVW1UlNj0SNcXtwP3i8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:58:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 372 (0x174)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171882, serialNumber=5BC494E89D0A4155B5525363D1235C5EDC0FDE2F
        Validity
            Not Before: Mar 25 03:58:51 2026 GMT
            Not After : Apr  1 03:58:51 2026 GMT
        Subject: CN=69c35d7b-9e33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:60:c4:a4:5f:ad:ab:64:f4:31:7c:c0:4e:6d:
                    4c:db:00:4f:06:ca:2d:e5:39:fd:bc:a0:b0:a5:f4:
                    83:37:7f:a0:a6:c8:82:c5:10:6c:56:bb:b0:af:fa:
                    9c:19:0b:a6:dd:37:6b:67:9e:8f:d4:f1:76:16:03:
                    7c:30:b5:49:f3:85:42:93:d1:a0:b7:69:38:b8:bb:
                    20:d1:6c:31:1d:66:12:b0:d6:73:f7:6e:37:b1:9c:
                    74:95:bc:f4:ac:d7:cd:ab:43:f6:06:f3:a7:95:3d:
                    5a:bb:c0:28:ae:21:68:07:47:31:94:73:92:89:a2:
                    58:c0:8d:f6:3f:fc:aa:a3:35:1b:00:52:27:12:1f:
                    6e:c5:a1:0b:27:70:12:e9:80:7e:10:4a:b1:85:ec:
                    df:11:a6:76:03:e9:59:82:c5:95:ab:8b:97:5f:97:
                    da:b0:6b:1e:17:7a:a0:55:f3:b1:bf:3e:2e:92:4d:
                    a0:42:07:7a:65:49:dc:c7:13:ea:ce:5b:03:5e:42:
                    65:d2:c8:a0:f1:94:59:4c:d6:bf:0b:19:24:5b:1d:
                    49:d0:9f:26:4d:79:97:ad:c1:34:0e:cd:52:e7:cb:
                    7a:d0:f8:74:1b:8f:03:89:e0:f6:8b:28:72:8d:79:
                    f0:84:d9:f1:10:7c:7b:ff:70:38:e6:82:df:ea:0b:
                    4c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:F2:76:41:BF:F2:BA:D3:6D:9A:2C:2E:82:9B:2A:34:6D:34:D0:0D
            X509v3 Authority Key Identifier:
                keyid:5B:C4:94:E8:9D:0A:41:55:B5:52:53:63:D1:23:5C:5E:DC:0F:DE:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W8SU6J0KQVW1UlNj0SNcXtwP3i8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:2f:d3:2a:91:f9:cc:f9:fd:19:32:27:a4:fd:1e:cd:b4:f6:
         c7:8d:95:4a:ae:11:c8:c3:66:d4:96:39:99:c4:d3:89:43:f6:
         b1:78:93:8b:9d:92:0c:53:a1:16:1b:cc:5a:6b:9e:1f:1e:32:
         9f:1e:8d:a2:e8:79:66:3b:38:12:7c:a2:fe:d5:43:01:bc:11:
         28:90:0f:b3:99:9f:f7:84:a6:88:34:91:21:85:e8:ec:b5:b0:
         e9:7b:50:7e:31:8c:c7:c5:f6:27:5f:27:2a:1a:17:9e:d5:0a:
         fe:91:30:fb:2e:5d:79:e7:4b:bb:c2:5b:4b:04:7f:65:a0:21:
         be:b3:da:c6:09:ca:2b:0c:c5:b2:54:d4:d7:af:f7:2e:4d:13:
         96:17:e8:94:4f:74:0b:1a:b1:7e:1f:ec:b4:dd:89:9f:d7:03:
         4a:9d:af:af:99:88:6b:7f:51:76:74:8c:f9:a3:aa:20:70:09:
         2c:b4:ee:2c:3a:1b:36:c8:f7:8d:72:5a:54:5d:33:e3:b2:65:
         34:87:44:07:c1:4c:ba:a9:97:f7:5f:cb:5f:66:67:a5:22:28:
         e5:1f:e1:7b:27:2a:45:75:c1:3c:03:07:c9:92:21:8f:92:03:
         7f:8f:b2:f6:00:0f:2a:f9:56:29:d8:71:d9:7a:34:2a:8b:8b:
         c2:28:7a:36
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzE4ODIxMTAvBgNVBAUTKDVCQzQ5NEU4OUQwQTQxNTVCNTUyNTM2M0QxMjM1QzVF
REMwRkRFMkYwHhcNMjYwMzI1MDM1ODUxWhcNMjYwNDAxMDM1ODUxWjAYMRYwFAYD
VQQDEw02OWMzNWQ3Yi05ZTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp2DEpF+tq2T0MXzATm1M2wBPBsot5Tn9vKCwpfSDN3+gpsiCxRBsVruwr/qc
GQum3TdrZ56P1PF2FgN8MLVJ84VCk9Ggt2k4uLsg0WwxHWYSsNZz9243sZx0lbz0
rNfNq0P2BvOnlT1au8AoriFoB0cxlHOSiaJYwI32P/yqozUbAFInEh9uxaELJ3AS
6YB+EEqxhezfEaZ2A+lZgsWVq4uXX5fasGseF3qgVfOxvz4ukk2gQgd6ZUncxxPq
zlsDXkJl0sig8ZRZTNa/CxkkWx1J0J8mTXmXrcE0Ds1S58t60Ph0G48DieD2iyhy
jXnwhNnxEHx7/3A45oLf6gtMsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEXydkG/
8rrTbZosLoKbKjRtNNANMB8GA1UdIwQYMBaAFFvElOidCkFVtVJTY9EjXF7cD94v
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTg4Mi9BOEMyNTFFQUYw
QjMxMUVFQTRDNzJGODRDNEY5QUUwMi9XOFNVNkowS1FWVzFVbE5qMFNOY1h0d1Az
aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1c4U1U2SjBLUVZXMVVsTmowU05jWHR3UDNpOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MTg4Mi9BOEMyNTFFQUYwQjMxMUVFQTRDNzJGODRDNEY5QUUwMi9XOFNVNkowS1FW
VzFVbE5qMFNOY1h0d1AzaTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXy/TKpH5zPn9GTInpP0ezbT2x42VSq4RyMNm1JY5mcTTiUP2sXiTi52SDFOh
FhvMWmueHx4ynx6Nouh5Zjs4Enyi/tVDAbwRKJAPs5mf94SmiDSRIYXo7LWw6XtQ
fjGMx8X2J18nKhoXntUK/pEw+y5deedLu8JbSwR/ZaAhvrPaxgnKKwzFslTU16/3
Lk0TlhfolE90Cxqxfh/stN2Jn9cDSp2vr5mIa39RdnSM+aOqIHAJLLTuLDobNsj3
jXJaVF0z47JlNIdEB8FMuqmX91/LX2ZnpSIo5R/heycqRXXBPAMHyZIhj5IDf4+y
9gAPKvlWKdhx2Xo0KouLwih6Ng==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:47:06 2026 by rpki-client