Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91843C6/0236164A7B8911ED9DE15283C4F9AE02/wuH3Z0PV73o0ajcy6vkNrVgod90.mft
File:                     wuH3Z0PV73o0ajcy6vkNrVgod90.mft (raw, json)
Hash identifier:          SnYyuK+CQXDCem8lOhWCJNmMrfnBimGsVk/liQ+JzqY=
Subject key identifier:   5E:39:41:26:1A:14:A4:02:D8:A2:FF:E0:05:55:22:18:9D:C3:EE:62
Authority key identifier: C2:E1:F7:67:43:D5:EF:7A:34:6A:37:32:EA:F9:0D:AD:58:28:77:DD
Certificate issuer:       /CN=A91843C6/serialNumber=C2E1F76743D5EF7A346A3732EAF90DAD582877DD
Certificate serial:       0276
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuH3Z0PV73o0ajcy6vkNrVgod90.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91843C6/0236164A7B8911ED9DE15283C4F9AE02/wuH3Z0PV73o0ajcy6vkNrVgod90.mft
Manifest number:          026D
Signing time:             Wed 25 Mar 2026 01:31:38 +0000
Manifest this update:     Wed 25 Mar 2026 01:31:37 +0000
Manifest next update:     Wed 01 Apr 2026 01:31:37 +0000
Files and hashes:         1: wuH3Z0PV73o0ajcy6vkNrVgod90.crl (hash: e0jLfnd0b7lBHyMKFSOT4nu/PiuqipPgFZpodU7Mzc8=)
                          2: 679A3A06D1F211ED8C598E75C4F9AE02.roa (hash: GiGFmzfp0JcmzMEj9/8+EUQT4rCYMXVADjq597dRKsc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91843C6/0236164A7B8911ED9DE15283C4F9AE02/wuH3Z0PV73o0ajcy6vkNrVgod90.crl
                          rsync://rpki.apnic.net/member_repository/A91843C6/0236164A7B8911ED9DE15283C4F9AE02/wuH3Z0PV73o0ajcy6vkNrVgod90.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuH3Z0PV73o0ajcy6vkNrVgod90.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:31:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 630 (0x276)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91843C6, serialNumber=C2E1F76743D5EF7A346A3732EAF90DAD582877DD
        Validity
            Not Before: Mar 25 01:31:37 2026 GMT
            Not After : Apr  1 01:31:37 2026 GMT
        Subject: CN=69c33af9-03de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:99:b9:32:7e:5f:ae:26:fa:77:3f:4e:06:6a:
                    4a:02:2f:14:55:d0:7f:74:bd:06:97:2c:96:08:2a:
                    68:b5:99:65:c5:56:b9:17:e5:ba:e7:4b:9e:17:37:
                    ad:08:e1:38:5f:99:20:f6:da:5c:82:33:16:62:34:
                    b2:c7:50:40:a4:6e:02:af:a3:d9:49:27:34:53:27:
                    cc:53:ed:76:41:03:5b:f5:f8:49:b5:d5:7a:fe:0e:
                    8a:30:4b:5b:1b:3f:33:e6:51:8e:97:a9:d3:91:8a:
                    3d:ac:ad:3a:93:d7:f6:f5:0d:20:07:67:96:07:29:
                    c7:04:e1:67:f4:e1:12:f1:f6:c8:17:aa:f5:11:bb:
                    ba:cf:72:1f:5c:81:f0:98:52:5a:1f:7c:e7:bb:33:
                    aa:f3:66:c1:39:bd:c3:1a:75:ad:55:f9:76:c3:ff:
                    9a:c5:eb:5d:41:4d:50:6c:64:64:ad:9c:96:4f:ff:
                    0f:17:47:01:2d:2d:47:97:3c:54:81:72:c9:db:e2:
                    93:20:2f:25:40:bf:2f:fb:9b:5c:07:0f:66:e2:16:
                    48:d2:d3:73:0b:d6:ec:74:ca:94:19:ed:6c:35:e6:
                    76:55:88:75:0f:ef:a0:fb:c8:5f:ad:b9:07:4f:24:
                    e7:81:61:d3:4e:c1:f6:dd:7d:fd:e7:6d:6d:f3:4b:
                    53:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:39:41:26:1A:14:A4:02:D8:A2:FF:E0:05:55:22:18:9D:C3:EE:62
            X509v3 Authority Key Identifier:
                keyid:C2:E1:F7:67:43:D5:EF:7A:34:6A:37:32:EA:F9:0D:AD:58:28:77:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91843C6/0236164A7B8911ED9DE15283C4F9AE02/wuH3Z0PV73o0ajcy6vkNrVgod90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuH3Z0PV73o0ajcy6vkNrVgod90.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91843C6/0236164A7B8911ED9DE15283C4F9AE02/wuH3Z0PV73o0ajcy6vkNrVgod90.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:fe:45:be:bc:f5:cc:39:8a:b4:18:56:ec:60:92:02:f9:3b:
         ff:e1:23:36:3a:d6:47:c5:e7:2e:bb:5d:2f:16:ee:46:f7:f9:
         41:2e:1f:87:b4:5d:cb:fe:c1:1f:09:7a:ac:e4:a9:1a:79:a4:
         25:2a:20:57:43:ba:e8:01:5e:9f:54:84:e2:55:fc:44:61:75:
         79:4e:2c:94:aa:cf:d3:67:88:92:e4:ea:90:8a:76:40:c8:81:
         0b:a5:e1:d1:27:ac:3a:48:ee:28:f8:89:76:b2:56:9e:38:94:
         6e:c5:06:89:30:39:b5:31:b0:2c:77:4d:14:2c:e6:c6:0b:93:
         01:74:34:80:fe:94:4b:ca:fd:c2:ec:83:f7:ea:ab:b5:3b:25:
         03:b6:01:7c:50:f2:de:e0:78:80:e0:00:ae:3b:84:c1:2a:0d:
         31:fe:88:d1:0b:84:40:07:6e:83:31:51:0c:05:7d:16:72:3e:
         72:de:c2:21:13:35:b8:bd:59:bb:d3:54:2e:49:de:dc:13:37:
         24:87:49:8c:a2:9c:52:6d:17:5b:a3:ed:56:b8:91:86:30:a9:
         f8:2e:f8:cf:4d:0a:ec:e8:61:e8:5a:4d:e7:8b:aa:ea:2c:2d:
         3e:71:a4:25:85:f7:02:01:0f:0c:a0:cd:05:60:76:c1:23:88:
         05:33:59:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:10:49 2026 by rpki-client