Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft
File:                     WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft (raw, json)
Hash identifier:          MmaHm/R9rdv7E6qQbfvZszIfgcushCsabxLVDDDXO0w=
Subject key identifier:   32:FA:A7:47:89:BA:8A:FE:45:8A:01:49:0C:F6:FF:A4:E0:A1:9D:5F
Authority key identifier: 5A:68:44:1F:B9:D1:B7:90:FC:6C:79:9E:39:51:01:D9:27:60:96:7D
Certificate issuer:       /CN=A91C5F25/serialNumber=5A68441FB9D1B790FC6C799E395101D92760967D
Certificate serial:       0639
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft
Manifest number:          0631
Signing time:             Thu 26 Mar 2026 22:35:44 +0000
Manifest this update:     Thu 26 Mar 2026 22:35:43 +0000
Manifest next update:     Thu 02 Apr 2026 22:35:43 +0000
Files and hashes:         1: WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl (hash: mzpNyAAf6iiaZD6RaalszNXiCxGHkSAf40B1a6Ky6FI=)
                          2: 92C1EB1E044111ECA6AF2D4BC4F9AE02.roa (hash: Tt66YBhWZceD9xi7CJ59HIwrlysDS4oNkVI5X7bqodQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl
                          rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 22:35:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1593 (0x639)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5F25, serialNumber=5A68441FB9D1B790FC6C799E395101D92760967D
        Validity
            Not Before: Mar 26 22:35:43 2026 GMT
            Not After : Apr  2 22:35:43 2026 GMT
        Subject: CN=69c5b4c0-b0ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b1:21:77:21:f0:50:87:1e:66:e0:2f:71:92:
                    0d:a2:e8:c1:f0:4c:aa:0b:3b:f2:56:4a:d8:00:4b:
                    a9:94:69:07:39:f8:f5:8b:ff:64:18:f8:1a:ac:f4:
                    d7:1d:3c:56:5d:ce:c0:58:75:b6:36:9b:0a:92:f4:
                    ea:3a:9a:41:dc:87:a2:cb:4b:71:ac:54:ec:c8:c4:
                    02:2d:be:f5:45:7c:7c:33:c1:32:1a:f1:a0:70:aa:
                    b1:1a:f6:76:80:55:f4:31:42:d6:cf:a1:a2:0a:58:
                    9d:34:6b:ac:3b:9f:b1:21:ee:06:f4:06:d0:3f:4c:
                    c5:e4:f0:11:43:b1:9c:6b:47:a0:6c:e6:d7:6b:31:
                    ad:d9:d6:bf:00:ee:d6:58:51:3b:92:47:22:65:be:
                    9b:42:4b:8f:d6:57:83:3f:f8:68:77:df:24:7f:e0:
                    0b:2c:53:cb:1e:b2:32:d7:d6:80:ad:cf:16:e1:15:
                    78:bd:fc:88:f3:60:3e:9b:86:a3:06:c7:7f:9c:86:
                    1d:7e:d2:38:55:0b:c1:dc:86:2e:31:52:c8:ce:4e:
                    13:85:c0:37:bf:d2:60:cd:31:d0:be:8c:e2:29:fb:
                    50:a1:f0:bb:3b:95:32:17:4a:91:35:00:eb:81:4f:
                    a7:60:0f:73:55:56:11:63:f8:f2:a7:3c:cf:46:0d:
                    53:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:FA:A7:47:89:BA:8A:FE:45:8A:01:49:0C:F6:FF:A4:E0:A1:9D:5F
            X509v3 Authority Key Identifier:
                keyid:5A:68:44:1F:B9:D1:B7:90:FC:6C:79:9E:39:51:01:D9:27:60:96:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:4e:eb:63:51:01:30:d8:d2:23:70:ae:71:f2:6a:72:0d:40:
         21:be:a8:cf:5e:f6:f5:dc:de:8b:f1:99:c7:9a:54:d0:20:a8:
         a8:7b:fe:b2:08:34:f3:df:0a:a7:9b:76:18:9b:62:c9:a2:bf:
         95:88:f2:a4:5c:fd:95:31:2e:aa:ec:62:ee:bf:bc:59:00:0f:
         da:20:d3:45:1e:ec:a7:21:ee:b4:19:f5:81:16:5f:1d:0a:e9:
         e0:d9:79:5b:99:cc:12:e8:f0:a3:dd:39:ce:17:2a:b4:0d:47:
         9e:91:d2:ba:af:21:74:cf:28:ba:dc:01:62:7f:b5:d2:9c:fa:
         f5:f4:28:f3:55:05:13:4f:b6:e6:20:b2:f0:cf:cf:20:58:32:
         87:3d:e7:9b:fb:05:9f:6f:e1:46:31:76:db:26:eb:86:ae:e7:
         8a:30:2f:0e:10:09:f0:89:f4:d5:5f:76:46:80:d8:90:31:38:
         12:8b:c4:cb:32:a5:44:4a:ef:6d:7d:12:cd:08:52:51:c1:9c:
         c8:a1:f6:97:73:81:6e:87:fd:7d:4d:94:d1:d3:00:bf:68:05:
         8e:1c:ad:c2:1c:75:c6:e8:2e:e4:95:da:3c:96:c7:12:d4:1a:
         97:e2:be:0f:14:47:7d:33:ce:63:2f:7b:cc:da:d0:a0:9b:4c:
         2b:fb:b6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:13:09 2026 by rpki-client