Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.mft
File:                     WlbE3pQjueK4AKt-BA3KPgnyNHU.mft (raw, json)
Hash identifier:          e9XExB4juVaeogb9f6yEGZRPjylG5Dq9q+n2FgTOAhA=
Subject key identifier:   9C:CD:F7:AA:5B:E6:6B:89:A2:05:35:10:63:B9:D7:6B:3A:87:36:2F
Authority key identifier: 5A:56:C4:DE:94:23:B9:E2:B8:00:AB:7E:04:0D:CA:3E:09:F2:34:75
Certificate issuer:       /CN=A91B165F/serialNumber=5A56C4DE9423B9E2B800AB7E040DCA3E09F23475
Certificate serial:       0117
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WlbE3pQjueK4AKt-BA3KPgnyNHU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.mft
Manifest number:          0109
Signing time:             Wed 25 Mar 2026 05:22:51 +0000
Manifest this update:     Wed 25 Mar 2026 05:22:51 +0000
Manifest next update:     Wed 01 Apr 2026 05:22:51 +0000
Files and hashes:         1: WlbE3pQjueK4AKt-BA3KPgnyNHU.crl (hash: PYNXNJImg1T7I3PyM2iR+MBEE48ypsEhnDE+HYBOSN0=)
                          2: 25BD1CFA3D6311F0AF2C2257C4F9AE02.roa (hash: U6Y/nX3Jtl3rEFZwVX5gsCWqYiv3TD88GNE6/3uIcfc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.crl
                          rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WlbE3pQjueK4AKt-BA3KPgnyNHU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 279 (0x117)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B165F, serialNumber=5A56C4DE9423B9E2B800AB7E040DCA3E09F23475
        Validity
            Not Before: Mar 25 05:22:51 2026 GMT
            Not After : Apr  1 05:22:51 2026 GMT
        Subject: CN=69c3712b-fad4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ce:1a:85:f0:20:37:67:e7:a3:67:e4:22:ea:
                    e7:c4:ea:cf:3e:dd:93:f2:a8:89:d0:ec:ac:f7:15:
                    8a:29:db:cd:26:3b:c1:5b:f9:55:ab:1a:c1:c1:ab:
                    ca:bf:a5:59:ca:22:75:3d:92:6a:49:1a:1c:71:cc:
                    0b:36:38:cb:67:9b:b4:b6:ac:2c:d0:bd:5d:db:56:
                    2d:01:28:a6:1d:68:66:72:91:68:2b:2e:40:c0:19:
                    b4:32:c0:16:58:22:6a:09:80:90:8c:15:f7:f6:a3:
                    6a:89:b0:2c:a4:bc:7f:bc:0b:90:3b:a5:d1:63:e2:
                    ce:3a:51:e7:f8:58:a5:b3:1a:70:e8:99:c9:16:e5:
                    2f:d5:ce:d7:20:b6:e5:23:c4:a5:1a:de:d5:c1:8f:
                    c7:54:b8:55:73:d5:41:96:63:a4:db:5d:e7:d7:0a:
                    54:02:03:03:09:b7:c3:06:f4:83:c8:74:d1:19:be:
                    d2:4f:7d:17:49:83:3b:6d:8e:11:61:76:db:7d:2c:
                    5c:15:9c:85:de:35:59:e7:66:93:a3:7d:28:ca:92:
                    e6:74:c7:86:47:e9:87:10:ea:16:05:1a:40:d2:c1:
                    93:57:02:54:cd:3a:56:37:27:33:b8:b7:f9:0c:27:
                    17:10:23:19:fb:64:da:ac:d1:c6:55:cf:01:19:0a:
                    73:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:CD:F7:AA:5B:E6:6B:89:A2:05:35:10:63:B9:D7:6B:3A:87:36:2F
            X509v3 Authority Key Identifier:
                keyid:5A:56:C4:DE:94:23:B9:E2:B8:00:AB:7E:04:0D:CA:3E:09:F2:34:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WlbE3pQjueK4AKt-BA3KPgnyNHU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:95:72:6c:8c:4a:24:1b:d9:e3:cb:29:0b:4d:45:ed:cf:14:
         7d:9f:2a:a5:7f:09:82:1e:ab:cb:79:51:f9:ff:a5:3e:85:b5:
         f9:0f:b9:93:bf:9c:5c:91:43:40:10:eb:93:26:0f:2e:be:c7:
         d5:29:a1:66:a5:0f:63:a3:01:a1:14:87:3e:5e:8b:00:98:f7:
         9d:01:77:8d:49:30:14:79:41:92:d3:d8:83:8f:8f:50:d6:3d:
         16:11:f1:02:7a:3b:be:94:88:e6:85:c0:9b:c9:30:df:b6:68:
         df:8c:a2:86:81:78:95:f3:0e:74:1b:b8:a6:7c:c8:46:43:05:
         59:00:f2:15:a4:76:54:f6:41:01:d7:4d:cd:b5:e0:e2:1d:db:
         f8:00:14:2a:24:86:9f:27:fd:ff:46:cd:bc:5d:13:c3:f4:b1:
         06:81:c5:f1:6f:71:f9:09:f5:29:d3:25:ea:a5:82:86:8e:0f:
         e0:79:5b:b3:a1:b8:68:61:4b:61:f5:0c:5d:1d:b6:a6:1b:c4:
         04:7b:16:f4:3e:f5:c7:d2:79:d3:dc:03:48:fa:f8:e5:09:53:
         3e:c7:95:ff:55:58:5c:2a:3c:24:a0:10:bc:01:84:dd:20:4d:
         c3:b7:e4:f7:c0:1e:42:92:85:8b:a3:1d:82:40:66:d9:bf:3d:
         b2:0a:c7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:44:05 2026 by rpki-client