Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft
File:                     wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft (raw, json)
Hash identifier:          dW/YxmU88SE1PwWMKCH8zJ8Lyqep+lT1kmAANKdImjI=
Subject key identifier:   0A:2A:F4:E7:4E:60:1A:89:5E:E5:24:2F:96:0E:FB:1A:10:6B:27:3F
Authority key identifier: C1:3A:8A:BD:57:04:3A:AF:A5:8F:58:53:BE:2F:AB:CA:9F:26:F0:ED
Certificate issuer:       /CN=A91AA618/serialNumber=C13A8ABD57043AAFA58F5853BE2FABCA9F26F0ED
Certificate serial:       0100
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wTqKvVcEOq-lj1hTvi-ryp8m8O0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft
Manifest number:          F5
Signing time:             Wed 25 Mar 2026 04:30:09 +0000
Manifest this update:     Wed 25 Mar 2026 04:30:08 +0000
Manifest next update:     Wed 01 Apr 2026 04:30:08 +0000
Files and hashes:         1: wTqKvVcEOq-lj1hTvi-ryp8m8O0.crl (hash: rDBjNNVLBh6taIMRkzKuWtJxZjqiqMnzzDw6yiiUXt8=)
                          2: 1C236FDEE51411EFA6CE3C1EC4F9AE02.roa (hash: TIsKjJzrbOzkAiPTqrGyxy2WFsJF/otDJhibNIRui4Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.crl
                          rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wTqKvVcEOq-lj1hTvi-ryp8m8O0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:30:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 256 (0x100)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AA618, serialNumber=C13A8ABD57043AAFA58F5853BE2FABCA9F26F0ED
        Validity
            Not Before: Mar 25 04:30:08 2026 GMT
            Not After : Apr  1 04:30:08 2026 GMT
        Subject: CN=69c364d1-bfe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f4:87:6a:7f:26:71:60:7b:e2:91:61:ac:78:
                    19:c2:51:a8:1a:12:2c:99:94:d3:89:28:87:4c:1d:
                    5b:d0:27:8a:a1:7e:a7:87:53:d3:03:1e:2d:40:95:
                    11:56:63:b7:fe:ab:b9:9f:92:98:30:cb:59:eb:9d:
                    e1:e6:57:93:65:99:61:7b:3f:78:ae:7a:2f:db:5e:
                    63:b6:84:46:55:53:67:6f:01:cc:5a:27:dc:86:97:
                    b2:79:c9:e8:56:97:b5:66:b0:24:3c:c5:80:9c:c9:
                    f4:0d:0e:ab:4d:9d:32:08:15:74:93:03:ce:3a:af:
                    b9:21:ea:72:41:8d:7b:a0:d3:ce:8b:1b:bf:d4:65:
                    24:34:10:d0:b7:74:aa:8a:be:ff:35:ee:43:32:0a:
                    e8:76:45:e4:1d:e9:37:67:bc:2f:6d:f9:64:f4:31:
                    14:c6:6c:04:5a:22:bb:b9:12:ef:fa:27:80:29:28:
                    b8:59:13:ca:c9:b3:ef:0f:5f:2f:4a:b0:1a:d8:c1:
                    7e:22:10:a2:69:59:72:1b:1f:99:80:6c:14:39:35:
                    7d:e4:4b:18:da:53:6c:81:20:e7:ec:7f:7f:bd:fc:
                    63:7e:8f:1a:67:25:9e:18:bc:84:63:67:74:75:ff:
                    92:d0:a7:95:e3:59:35:b0:4f:1e:c4:62:ff:dd:8a:
                    94:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:2A:F4:E7:4E:60:1A:89:5E:E5:24:2F:96:0E:FB:1A:10:6B:27:3F
            X509v3 Authority Key Identifier:
                keyid:C1:3A:8A:BD:57:04:3A:AF:A5:8F:58:53:BE:2F:AB:CA:9F:26:F0:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wTqKvVcEOq-lj1hTvi-ryp8m8O0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:70:aa:cc:e2:77:26:1a:65:e3:10:eb:7f:2b:4d:5c:48:1d:
         d3:69:88:82:f1:c6:a1:ed:bc:f1:e5:db:25:22:5e:a1:46:09:
         6e:3c:41:0d:cc:89:23:7a:23:6d:33:28:ac:f0:86:89:7a:54:
         30:9e:76:10:36:27:7b:b4:05:49:d0:fb:ac:ce:6e:94:49:58:
         5a:51:6b:62:34:41:e9:72:c6:5d:84:e6:1d:27:77:ad:74:82:
         54:d1:89:7c:a8:73:48:b7:44:c4:a2:06:fc:67:05:e8:3d:48:
         81:e5:89:4c:fc:41:37:25:74:c5:b4:76:99:c6:2c:b3:ec:89:
         66:05:d1:9f:7c:5b:96:70:5e:7e:ab:5f:ab:17:37:6f:2b:49:
         00:10:f5:04:1f:a8:02:de:a0:f2:f7:d2:69:c9:4f:45:4f:4c:
         ca:56:f7:1f:a1:e8:47:e5:26:a0:6f:3f:6a:93:e0:34:83:32:
         cb:44:75:b3:de:15:6b:99:61:58:aa:ca:86:1f:28:0f:d0:25:
         55:86:e3:de:95:57:00:50:31:12:3c:d2:24:1b:26:e1:ad:99:
         58:a8:0d:1e:b8:53:6d:1a:6c:3a:b2:e0:d7:6a:8f:3c:47:ef:
         c0:26:a7:da:df:86:59:4d:d4:50:be:4e:a2:c0:86:c3:5e:c1:
         4c:ad:7f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:24:41 2026 by rpki-client