Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft
File:                     waLHH9itWCWJ8EkC3a-DmIXf0zc.mft (raw, json)
Hash identifier:          G4Zd6MVASambpyXrz5jXsPSb2qSem4XfX6kIni3QtSQ=
Subject key identifier:   57:59:40:FC:38:02:ED:91:34:5C:25:EF:55:30:3E:71:F8:C1:43:60
Authority key identifier: C1:A2:C7:1F:D8:AD:58:25:89:F0:49:02:DD:AF:83:98:85:DF:D3:37
Certificate issuer:       /CN=A91A87AB/serialNumber=C1A2C71FD8AD582589F04902DDAF839885DFD337
Certificate serial:       0613
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft
Manifest number:          060A
Signing time:             Tue 24 Mar 2026 22:35:31 +0000
Manifest this update:     Tue 24 Mar 2026 22:35:30 +0000
Manifest next update:     Tue 31 Mar 2026 22:35:30 +0000
Files and hashes:         1: waLHH9itWCWJ8EkC3a-DmIXf0zc.crl (hash: cT/xRIH3Hm31kuN54bnx5Q46sgt1jZZCUAYtrat5fPs=)
                          2: 9C3424A08F7F11F09A0D9529C4F9AE02.roa (hash: hM4BPVux9YYhFTFUn31M+wA3pgU5Mg1/NkcXZA6rsfo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.crl
                          rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:35:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1555 (0x613)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A87AB, serialNumber=C1A2C71FD8AD582589F04902DDAF839885DFD337
        Validity
            Not Before: Mar 24 22:35:30 2026 GMT
            Not After : Mar 31 22:35:30 2026 GMT
        Subject: CN=69c311b2-e635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:77:f1:b6:05:16:97:58:8e:d2:b9:e4:4b:34:
                    a6:6e:5b:f1:cd:85:ff:35:90:c3:74:2e:6e:45:65:
                    24:d0:c1:c1:84:ef:a9:45:e7:b4:16:30:f5:7f:22:
                    77:bc:c9:a6:00:b2:94:98:45:21:ce:e8:26:8c:08:
                    1a:68:d7:ae:4c:f3:1f:b2:7c:5b:87:25:ad:d8:01:
                    c8:e8:59:78:36:e5:30:58:26:4e:21:29:38:e6:30:
                    6d:47:d2:58:92:e3:35:e9:ce:9d:12:38:7e:f8:9b:
                    8b:be:83:a1:04:1b:bf:a9:40:f8:d2:3a:8c:71:df:
                    fa:74:b3:c7:1b:8f:e3:68:18:4d:fe:9c:3b:5d:3d:
                    53:5c:31:de:10:86:12:f1:69:a5:a0:f9:d1:4e:6d:
                    f2:25:a9:b0:87:95:4d:77:16:f5:0b:a0:e2:13:55:
                    6a:65:34:c5:af:cb:22:ea:15:37:52:de:5b:5c:29:
                    0c:a5:0e:39:56:87:b5:e7:22:de:de:2a:03:98:6c:
                    5e:db:e1:2b:a5:a7:1d:c3:84:81:5b:a4:cb:f6:2f:
                    54:8c:b4:e2:a4:21:9e:18:c3:35:6d:8e:5e:cd:0b:
                    38:ea:3c:50:3a:94:75:ec:44:e3:2f:ac:5c:16:0c:
                    5e:16:39:d9:c6:0e:a3:a6:8b:c4:12:ee:64:f9:ec:
                    4b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:59:40:FC:38:02:ED:91:34:5C:25:EF:55:30:3E:71:F8:C1:43:60
            X509v3 Authority Key Identifier:
                keyid:C1:A2:C7:1F:D8:AD:58:25:89:F0:49:02:DD:AF:83:98:85:DF:D3:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:d3:77:37:e1:7d:2e:43:65:7e:9c:3b:f2:56:40:23:4d:af:
         29:58:ee:2f:02:7b:3d:21:24:6c:8d:fb:07:a2:14:ef:c6:ee:
         6d:db:ab:ea:8a:6e:70:c8:7b:02:24:e2:42:6b:0a:3b:6e:10:
         b6:6b:af:f4:91:ff:07:99:88:5f:2b:21:5a:ec:ad:86:6a:18:
         99:fb:68:7e:5b:e1:c5:26:a6:d1:1b:0b:7c:ab:74:71:d1:ee:
         22:19:d8:ba:fe:e8:15:bd:41:58:47:2d:d5:61:26:fb:25:95:
         d6:72:23:82:6e:65:28:e1:e0:eb:96:8f:8c:bd:e7:f7:0c:d7:
         08:90:d9:4e:fc:41:5b:ff:85:d1:f7:c6:6a:4c:ef:36:e6:35:
         1b:2d:e0:1c:f5:97:90:b1:86:65:4a:3a:63:44:74:5d:14:7e:
         6e:99:1d:37:fd:f3:af:98:42:70:14:45:6c:d6:9a:b3:69:3c:
         c5:39:6f:d7:8d:70:db:ba:80:74:7f:c9:5b:c3:33:18:81:cc:
         64:8b:08:0c:75:26:da:4c:42:97:dc:be:b3:a2:47:be:64:2e:
         69:c8:91:4e:32:88:07:6d:82:20:6a:a6:f9:61:4a:fc:4f:bb:
         ce:cc:c5:e6:a4:b5:11:b3:2a:00:78:dd:e1:38:6e:73:02:da:
         24:46:0e:7c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTg3QUIxMTAvBgNVBAUTKEMxQTJDNzFGRDhBRDU4MjU4OUYwNDkwMkREQUY4Mzk4
ODVERkQzMzcwHhcNMjYwMzI0MjIzNTMwWhcNMjYwMzMxMjIzNTMwWjAYMRYwFAYD
VQQDEw02OWMzMTFiMi1lNjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArnfxtgUWl1iO0rnkSzSmblvxzYX/NZDDdC5uRWUk0MHBhO+pRee0FjD1fyJ3
vMmmALKUmEUhzugmjAgaaNeuTPMfsnxbhyWt2AHI6Fl4NuUwWCZOISk45jBtR9JY
kuM16c6dEjh++JuLvoOhBBu/qUD40jqMcd/6dLPHG4/jaBhN/pw7XT1TXDHeEIYS
8WmloPnRTm3yJamwh5VNdxb1C6DiE1VqZTTFr8si6hU3Ut5bXCkMpQ45Voe15yLe
3ioDmGxe2+Erpacdw4SBW6TL9i9UjLTipCGeGMM1bY5ezQs46jxQOpR17ETjL6xc
FgxeFjnZxg6jpovEEu5k+exLSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFdZQPw4
Au2RNFwl71UwPnH4wUNgMB8GA1UdIwQYMBaAFMGixx/YrVglifBJAt2vg5iF39M3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODdBQi9GMDk2RENDNEU0
NEIxMUVCQjJDODFFODBDNEY5QUUwMi93YUxISDlpdFdDV0o4RWtDM2EtRG1JWGYw
emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dhTEhIOWl0V0NXSjhFa0MzYS1EbUlYZjB6Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
ODdBQi9GMDk2RENDNEU0NEIxMUVCQjJDODFFODBDNEY5QUUwMi93YUxISDlpdFdD
V0o4RWtDM2EtRG1JWGYwemMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFNN3N+F9LkNlfpw78lZAI02vKVjuLwJ7PSEkbI37B6IU78bubdur6opucMh7
AiTiQmsKO24Qtmuv9JH/B5mIXyshWuythmoYmftoflvhxSam0RsLfKt0cdHuIhnY
uv7oFb1BWEct1WEm+yWV1nIjgm5lKOHg65aPjL3n9wzXCJDZTvxBW/+F0ffGakzv
NuY1Gy3gHPWXkLGGZUo6Y0R0XRR+bpkdN/3zr5hCcBRFbNaas2k8xTlv141w27qA
dH/JW8MzGIHMZIsIDHUm2kxCl9y+s6JHvmQuaciRTjKIB22CIGqm+WFK/E+7zszF
5qS1EbMqAHjd4ThucwLaJEYOfA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:49 2026 by rpki-client