Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.mft
File:                     wG_wBd4dXvE7qPDCYOljA0paIso.mft (raw, json)
Hash identifier:          EKjXFtGq4ltpxzWN8D/G943jKD8krz96EfsJa8w+Hbw=
Subject key identifier:   B0:50:C9:0E:CD:FA:D8:DD:D0:89:9E:65:49:DC:54:79:AF:DA:03:59
Authority key identifier: C0:6F:F0:05:DE:1D:5E:F1:3B:A8:F0:C2:60:E9:63:03:4A:5A:22:CA
Certificate issuer:       /CN=A91A0C5F/serialNumber=C06FF005DE1D5EF13BA8F0C260E963034A5A22CA
Certificate serial:       024A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wG_wBd4dXvE7qPDCYOljA0paIso.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.mft
Manifest number:          0246
Signing time:             Mon 11 May 2026 02:27:04 +0000
Manifest this update:     Mon 11 May 2026 02:27:03 +0000
Manifest next update:     Mon 18 May 2026 02:27:03 +0000
Files and hashes:         1: wG_wBd4dXvE7qPDCYOljA0paIso.crl (hash: ePB2tdqHpLjRhwxZtZJkweTDbJGPicDi4u0oA0USAJM=)
                          2: 0D53ED80D2BA11ED8E06CC13C4F9AE02.roa (hash: inrK8OqEEdjI+824HmaDT3XyzEScsrEG2Pp9/A3OtMQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.crl
                          rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wG_wBd4dXvE7qPDCYOljA0paIso.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 02:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 586 (0x24a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0C5F, serialNumber=C06FF005DE1D5EF13BA8F0C260E963034A5A22CA
        Validity
            Not Before: May 11 02:27:03 2026 GMT
            Not After : May 18 02:27:03 2026 GMT
        Subject: CN=6a013e78-60d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:62:4b:e4:99:ba:f1:46:63:44:9c:0b:67:ec:
                    2b:42:0e:5d:71:26:71:54:e9:26:cb:3c:49:0e:54:
                    0f:d0:78:4a:88:a3:26:f5:b8:09:9c:99:92:4d:f4:
                    f2:75:0d:a2:df:00:b0:4a:14:dd:e2:65:c6:d8:76:
                    2c:93:93:ca:8a:0c:5b:e4:e6:e5:a7:ff:a5:8d:d8:
                    1b:6c:d1:b3:13:82:c9:a3:2f:86:20:5d:81:d6:9d:
                    ac:a5:46:62:3a:6c:88:d2:ba:cf:18:c0:82:80:79:
                    5b:f3:54:10:63:dd:fd:4d:54:fd:dc:6f:5c:83:9c:
                    47:74:43:dc:77:67:82:10:1e:70:22:66:f1:46:45:
                    0a:f8:8e:df:a8:75:34:0b:00:6d:ee:94:96:ae:bc:
                    e4:59:5e:d6:a8:39:77:f5:3b:20:a4:29:70:bb:61:
                    10:e6:c0:d5:28:26:18:3d:71:64:21:1e:6c:b6:99:
                    83:bd:5b:7f:92:02:4f:53:ed:fe:b4:de:39:fa:75:
                    84:b8:c9:d5:27:8d:2a:61:63:f9:89:63:c7:e6:05:
                    5e:e8:75:a8:55:1f:59:15:37:3c:cf:1d:5a:57:41:
                    74:4a:b3:04:db:21:60:63:f3:73:6f:3e:e8:29:19:
                    d1:80:fd:ee:17:7f:78:aa:dc:4f:33:3f:98:cd:56:
                    6b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:50:C9:0E:CD:FA:D8:DD:D0:89:9E:65:49:DC:54:79:AF:DA:03:59
            X509v3 Authority Key Identifier:
                keyid:C0:6F:F0:05:DE:1D:5E:F1:3B:A8:F0:C2:60:E9:63:03:4A:5A:22:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wG_wBd4dXvE7qPDCYOljA0paIso.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:07:34:bd:e0:d2:c7:a1:3c:59:89:70:a6:61:f1:d0:75:e7:
         44:34:19:84:14:45:ed:c0:eb:8d:40:fc:f8:69:f6:e6:01:21:
         c8:02:f3:f5:77:d4:55:a2:a3:20:76:d2:b6:f2:74:d0:e0:cf:
         72:7e:0b:cf:31:f0:15:59:53:af:46:5c:b4:01:04:b3:eb:31:
         8b:df:f9:12:54:b0:6a:cc:17:a3:41:14:c4:32:72:3e:9b:80:
         69:76:f6:a4:8f:48:cc:3f:ed:b8:8f:98:c3:18:0b:cc:eb:69:
         fc:42:77:a7:4b:44:8e:f0:4c:6a:e3:31:0a:f2:7e:de:e3:6b:
         1e:c1:a0:dd:c9:5c:92:09:5f:46:8f:ad:f3:d7:0d:01:a0:1c:
         24:ec:c7:69:9e:02:ef:25:b3:5e:2b:8d:c4:2a:fd:ee:89:7b:
         ec:f7:10:a9:26:14:7d:65:c0:32:63:fc:08:c8:77:d9:6a:63:
         a5:ab:7d:b8:5f:c9:a3:56:94:57:8e:89:31:ad:0a:be:6f:09:
         b2:52:fd:15:bc:bf:df:52:32:92:64:08:7a:c8:71:2b:1e:58:
         03:24:cf:24:6b:5b:32:d6:f7:d2:45:42:b3:62:79:4c:e5:48:
         fa:11:d8:dc:cf:9f:95:b0:e6:b4:ad:25:cf:5c:48:bf:7f:be:
         67:79:66:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:35:37 2026 by rpki-client