Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.mft
File:                     Wlb4n1CBKoEP8t6EVHDxCSckoas.mft (raw, json)
Hash identifier:          4sqf3wsWT4oM2ZXu7FIp9993L/6LYd1dB4Dk22fZfs4=
Subject key identifier:   20:E3:0C:17:B8:FC:9C:7D:DF:59:3B:4D:A9:F3:45:A1:95:D4:12:B6
Authority key identifier: 5A:56:F8:9F:50:81:2A:81:0F:F2:DE:84:54:70:F1:09:27:24:A1:AB
Certificate issuer:       /CN=A9193235/serialNumber=5A56F89F50812A810FF2DE845470F1092724A1AB
Certificate serial:       01D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wlb4n1CBKoEP8t6EVHDxCSckoas.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.mft
Manifest number:          0882
Signing time:             Tue 24 Mar 2026 22:04:38 +0000
Manifest this update:     Tue 24 Mar 2026 22:04:38 +0000
Manifest next update:     Tue 31 Mar 2026 22:04:38 +0000
Files and hashes:         1: Wlb4n1CBKoEP8t6EVHDxCSckoas.crl (hash: jFoGC4JjrNA4mULYlZk85v+4ciFzQGdrGStAJlo+vlY=)
                          2: 105A1F50778211EE997FD552C4F9AE02.roa (hash: VJb/MYYXgapvW6oZ8weDqeGFcx6jxW/gZrD/WXjQRgg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.crl
                          rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wlb4n1CBKoEP8t6EVHDxCSckoas.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:04:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 470 (0x1d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193235, serialNumber=5A56F89F50812A810FF2DE845470F1092724A1AB
        Validity
            Not Before: Mar 24 22:04:38 2026 GMT
            Not After : Mar 31 22:04:38 2026 GMT
        Subject: CN=69c30a76-3a9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c1:5d:ed:67:a1:18:d7:81:d3:63:da:36:57:
                    8c:55:71:48:7c:5a:0d:0c:9b:9a:be:4e:fe:c2:b2:
                    48:f0:59:ad:37:17:36:bd:d7:c6:9d:26:e6:ad:82:
                    2b:01:e7:24:a8:d4:6d:aa:b7:5f:fe:63:0e:c9:9d:
                    ab:e0:0e:cd:2d:14:6e:fc:b8:48:08:21:59:6b:bd:
                    5d:bf:02:5d:88:80:1b:39:56:c1:48:b5:06:e2:24:
                    f8:3c:33:2a:c2:63:03:27:8a:cb:fe:31:8b:92:38:
                    ac:c1:d9:fd:dd:d0:67:f8:a6:22:d3:e7:3f:d7:92:
                    b4:83:b5:ae:88:5f:51:48:6f:d5:7d:a6:13:db:df:
                    7e:87:bc:0e:31:85:f0:97:5f:ed:7e:f4:8f:31:88:
                    f8:34:d3:de:78:86:32:5f:fd:a7:db:c2:21:8b:c5:
                    f7:54:d2:f6:8a:76:d1:86:1c:03:d2:75:2a:48:eb:
                    45:ea:34:04:6a:27:e5:0e:74:c6:c5:d4:6b:9a:6a:
                    33:54:04:a7:7b:a6:57:94:fa:ed:15:74:b5:b8:46:
                    b5:e4:0e:7a:e7:7c:6d:9a:e8:ff:ae:64:d6:82:8f:
                    ca:22:5f:07:c3:90:88:07:60:f9:e1:ab:1a:f1:ea:
                    c6:02:a3:8b:8d:37:8a:69:f0:46:97:8c:6f:7e:e0:
                    73:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:E3:0C:17:B8:FC:9C:7D:DF:59:3B:4D:A9:F3:45:A1:95:D4:12:B6
            X509v3 Authority Key Identifier:
                keyid:5A:56:F8:9F:50:81:2A:81:0F:F2:DE:84:54:70:F1:09:27:24:A1:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wlb4n1CBKoEP8t6EVHDxCSckoas.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:8e:79:01:8f:45:0e:53:14:50:3a:e7:fd:56:c0:5c:31:fa:
         ab:35:22:31:a6:61:68:80:9b:3c:8e:8e:f4:44:e7:35:69:33:
         28:45:e4:dc:d3:e8:73:3f:d3:6c:d0:85:10:3d:0c:f0:7c:d6:
         08:35:a8:d1:56:ca:41:00:bd:50:c9:4a:0e:fb:88:64:c8:d5:
         d8:9d:dd:40:7c:07:b7:4e:30:11:35:36:ed:0e:2b:2c:41:03:
         7f:f9:e6:0b:16:3f:b2:ec:97:ca:02:c4:f3:dd:cd:05:f3:eb:
         2f:df:11:d3:bd:b1:12:7d:ea:24:0f:f0:87:69:d4:7c:7a:ba:
         8f:59:5f:d0:2a:14:76:6c:d8:73:73:c7:63:af:b0:2c:f7:78:
         fe:73:18:1e:1b:93:af:c8:5f:ae:2a:cf:7c:33:2f:9a:93:77:
         28:6f:bd:31:bb:bd:ae:a4:49:f2:b2:fb:92:62:cf:80:d6:62:
         89:06:17:91:b6:83:34:83:7f:66:09:15:0e:4d:bf:82:bd:9a:
         5e:64:31:a4:18:a2:d6:6e:a6:e0:96:ee:7f:8b:dc:a1:5a:37:
         8f:41:03:4f:23:1a:52:9d:43:42:0b:7c:b5:ca:ac:0d:7e:18:
         a5:e7:c8:f4:5e:63:8a:b1:ca:b8:51:38:c3:84:b3:39:5c:a9:
         4d:d0:48:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:49:15 2026 by rpki-client