Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft
File:                     WkoaHy2STehVVccdPbZrm7DkNkM.mft (raw, json)
Hash identifier:          LtKc4DDmrd949trMpLjKMrGttkg13hmkFRrkHC22ZTk=
Subject key identifier:   E1:DA:94:F3:0C:EB:CE:60:6C:02:92:7D:DB:29:99:E7:D5:84:DE:0A
Authority key identifier: 5A:4A:1A:1F:2D:92:4D:E8:55:55:C7:1D:3D:B6:6B:9B:B0:E4:36:43
Certificate issuer:       /CN=A91C2E87/serialNumber=5A4A1A1F2D924DE85555C71D3DB66B9BB0E43643
Certificate serial:       0CDA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WkoaHy2STehVVccdPbZrm7DkNkM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft
Manifest number:          0CB9
Signing time:             Tue 12 May 2026 18:32:26 +0000
Manifest this update:     Tue 12 May 2026 18:32:26 +0000
Manifest next update:     Tue 19 May 2026 18:32:26 +0000
Files and hashes:         1: WkoaHy2STehVVccdPbZrm7DkNkM.crl (hash: 5E0L0SM0ywX5qct+4OplpPqJ/bQ+GdmrXT+JUY9ABYc=)
                          2: 4F4A22E23CDE11EAB553996BC4F9AE02.roa (hash: HZYyafIDcbCm3jYO+u2UG1J/QSznk0TLPVrt1UYauvc=)
                          3: 4EB9FBD63CDE11EAB553996BC4F9AE02.roa (hash: Okct4v/9F3FMQPT9GrE+GqX5m6ZwHVEGNg/r2lmDu6k=)
                          4: 504C179A3CDE11EAB553996BC4F9AE02.roa (hash: tnKzNTdY3kOa3JgIyvO979Ve1nnZLeLTMwODS3F4o5I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.crl
                          rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WkoaHy2STehVVccdPbZrm7DkNkM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:32:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3290 (0xcda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2E87, serialNumber=5A4A1A1F2D924DE85555C71D3DB66B9BB0E43643
        Validity
            Not Before: May 12 18:32:26 2026 GMT
            Not After : May 19 18:32:26 2026 GMT
        Subject: CN=6a03723a-db97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b7:2c:20:b7:c7:77:37:d1:f7:99:85:71:71:
                    f9:e4:30:9a:bc:66:b4:9a:54:57:87:b3:56:2e:c8:
                    6e:62:13:38:d2:31:40:5d:20:50:c4:65:cb:59:a7:
                    1c:d1:b4:ab:8a:87:75:d1:45:81:1a:af:e3:62:79:
                    da:ad:60:e4:d8:8e:05:aa:db:59:ae:25:f4:38:06:
                    53:b8:0c:97:6e:fa:30:0f:72:f9:3a:aa:ad:aa:59:
                    93:b7:ca:30:56:ba:ce:f3:c0:26:f8:1d:f5:22:7d:
                    e8:9f:54:bd:60:69:77:3a:dc:da:0e:91:40:df:23:
                    01:be:ac:54:49:a2:ce:fe:b0:17:dc:93:b1:2f:34:
                    e7:cc:bd:bf:f1:52:f3:00:96:32:d2:23:a2:84:fa:
                    70:40:3e:24:2b:11:d6:80:8e:1d:0a:66:37:58:49:
                    e6:c3:06:2e:b7:20:e6:39:4e:64:71:49:7f:77:81:
                    99:26:02:8f:35:51:77:6a:fb:37:dc:a0:c7:f5:f8:
                    2f:92:84:3d:a8:bd:7e:9f:8f:d5:47:d3:e5:32:46:
                    8b:63:cd:56:47:27:fc:5b:ac:95:5e:b6:2f:5c:62:
                    b3:e8:15:36:82:60:4d:c4:d0:1f:75:53:3a:8d:30:
                    19:05:51:9c:bc:81:ab:06:a8:aa:7c:db:bb:cf:6b:
                    4d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:DA:94:F3:0C:EB:CE:60:6C:02:92:7D:DB:29:99:E7:D5:84:DE:0A
            X509v3 Authority Key Identifier:
                keyid:5A:4A:1A:1F:2D:92:4D:E8:55:55:C7:1D:3D:B6:6B:9B:B0:E4:36:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WkoaHy2STehVVccdPbZrm7DkNkM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:5e:0c:8c:a4:5b:3d:c7:3b:e9:52:a2:29:c3:bc:ca:9d:56:
         7f:e6:99:e7:95:11:9f:76:2f:ef:a7:01:85:00:1f:91:9e:c7:
         27:22:8d:00:ce:66:1e:1d:ce:bc:24:72:ac:50:41:73:6b:ac:
         68:cb:ea:7b:41:0a:69:63:63:7a:74:6e:7e:d3:88:56:06:e8:
         df:3f:76:5b:d2:bf:e8:0f:e4:b3:4e:ca:57:de:80:27:e8:4b:
         fa:89:45:45:49:17:37:7d:bd:d7:98:86:5c:20:e4:e7:d8:8f:
         64:20:6b:c0:59:df:b7:f0:83:83:4b:68:d5:6e:7a:1c:53:53:
         dc:6f:dd:2f:f4:be:0f:cf:dc:46:a4:f0:30:96:e2:47:0a:21:
         7f:6a:6f:dd:66:0f:5e:9c:05:e7:51:2b:f7:c3:85:90:f0:95:
         cb:b4:23:c3:82:dd:d9:cd:9a:78:76:b1:96:73:be:19:60:1c:
         20:4c:a7:62:c5:d6:c7:3f:cd:69:26:e0:9c:b4:0f:5c:c4:d6:
         f5:e9:3b:f7:53:de:c5:b4:dc:d4:2f:a5:66:e5:d6:c6:34:aa:
         9a:01:9f:c3:5a:62:ca:f3:f7:b0:13:11:4b:0a:01:fe:56:f4:
         73:86:ab:95:98:56:21:36:76:0c:5e:a7:1b:47:e5:1b:c5:4a:
         c9:ce:1a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:30:35 2026 by rpki-client