Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.mft
File:                     Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.mft (raw, json)
Hash identifier:          uVaP+k5XNMmhKerUa2xCGD7jZcgttgPoKZF8VkVxaFE=
Subject key identifier:   E8:4C:08:F6:51:E7:15:0F:52:7F:55:BE:14:15:C0:36:AA:65:EC:41
Authority key identifier: 5A:7D:C0:A4:61:6B:07:D1:F8:5E:2D:59:0F:DD:5F:40:67:D0:BB:C4
Certificate issuer:       /CN=A91C62D3/serialNumber=5A7DC0A4616B07D1F85E2D590FDD5F4067D0BBC4
Certificate serial:       0BA0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.mft
Manifest number:          0B95
Signing time:             Tue 24 Mar 2026 18:54:33 +0000
Manifest this update:     Tue 24 Mar 2026 18:54:32 +0000
Manifest next update:     Tue 31 Mar 2026 18:54:32 +0000
Files and hashes:         1: Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.crl (hash: gPkKlmIMqmCZLcBnjGvPaZlH2/ZOm1bZkaXle65mJMQ=)
                          2: 47BBB5E4465311EA85CB607EC4F9AE02.roa (hash: jGy6HhewZ+sqaP4jZOOyB8CNY5nLRPGvb+oLKqY0UVY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.crl
                          rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:54:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2976 (0xba0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C62D3, serialNumber=5A7DC0A4616B07D1F85E2D590FDD5F4067D0BBC4
        Validity
            Not Before: Mar 24 18:54:32 2026 GMT
            Not After : Mar 31 18:54:32 2026 GMT
        Subject: CN=69c2dde8-a5ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ed:72:64:a9:8e:3d:80:81:fa:3f:25:2a:a3:
                    fb:32:83:0a:9a:74:dd:d3:15:85:42:85:0d:bd:c9:
                    ac:3a:d4:bc:cb:38:14:ce:8d:7c:82:f9:a0:0f:9c:
                    c2:a3:c4:bb:68:b0:1a:44:1f:33:1f:f0:3f:60:73:
                    90:2a:60:fb:bd:61:0f:54:07:06:e8:8e:f7:1c:57:
                    fb:64:9c:17:2f:42:61:8f:38:6c:1b:61:1b:d4:1e:
                    90:7e:c8:67:af:45:36:c9:c8:04:5d:fe:d3:72:50:
                    be:ac:64:76:6a:6d:68:ad:16:49:00:e0:11:1c:68:
                    f1:eb:f6:3d:27:eb:8f:a6:ff:e7:b1:23:22:00:85:
                    78:8f:76:4b:f2:7a:e2:53:51:64:43:98:e7:5b:bf:
                    57:55:31:7e:1e:70:98:e9:21:f2:a9:4e:c5:e7:94:
                    96:7d:0b:ad:44:71:a8:22:f2:d9:ba:e5:09:c0:37:
                    77:19:d8:84:c2:fd:c2:fb:b7:36:de:3c:17:23:55:
                    2d:74:ae:d8:9a:0e:fa:cc:00:a0:0d:80:03:2c:6e:
                    a3:f2:fc:6e:08:58:96:d3:97:c5:3e:e5:31:60:f6:
                    0e:b9:98:e3:c2:d0:22:e4:f8:56:0c:12:24:bd:51:
                    54:db:63:17:06:b5:a0:5e:f2:ae:50:04:62:47:69:
                    e4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:4C:08:F6:51:E7:15:0F:52:7F:55:BE:14:15:C0:36:AA:65:EC:41
            X509v3 Authority Key Identifier:
                keyid:5A:7D:C0:A4:61:6B:07:D1:F8:5E:2D:59:0F:DD:5F:40:67:D0:BB:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:d5:94:c1:8d:61:25:a9:66:84:87:2b:5b:57:a1:20:62:ef:
         d4:b1:27:0d:5e:72:ba:4d:9f:9c:56:a0:64:6a:11:5c:72:aa:
         c3:c2:c9:1e:8b:f0:2c:ff:6a:f5:3b:89:40:28:4c:f0:a0:0f:
         fd:58:ad:1f:40:7d:24:79:6a:47:8a:34:10:d6:03:5b:de:9e:
         31:85:0f:51:59:59:0f:e5:d5:c0:3e:29:cb:83:4a:7c:27:38:
         6a:61:2c:68:34:54:09:49:93:ed:8a:ba:44:6b:30:ee:06:64:
         a6:f0:ea:1c:2e:f1:91:f0:86:2f:ac:c7:8d:b0:15:ec:b4:ef:
         dc:06:07:a0:bb:7f:dc:b7:e6:e1:0e:4d:97:0a:a8:b4:5a:b0:
         52:4b:b0:b5:1a:7b:01:11:92:e7:fa:8b:5e:15:20:30:d6:cc:
         7a:28:2f:94:0e:24:3b:8d:e0:f2:12:ed:21:32:77:e8:49:23:
         7c:4d:42:6e:71:ae:d4:de:b3:61:a0:ca:50:15:46:97:df:84:
         b7:d4:91:3f:0d:a4:86:a3:3f:a5:97:d4:c7:f2:4e:89:52:47:
         89:17:fe:61:3e:5a:5d:09:1e:99:e3:84:dd:f9:25:f6:de:4f:
         92:6e:22:55:f5:cb:7f:c1:4c:1e:c8:c3:c6:bb:a3:f9:24:83:
         63:df:e7:82
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC6AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzYyRDMxMTAvBgNVBAUTKDVBN0RDMEE0NjE2QjA3RDFGODVFMkQ1OTBGREQ1RjQw
NjdEMEJCQzQwHhcNMjYwMzI0MTg1NDMyWhcNMjYwMzMxMTg1NDMyWjAYMRYwFAYD
VQQDEw02OWMyZGRlOC1hNWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAiu1yZKmOPYCB+j8lKqP7MoMKmnTd0xWFQoUNvcmsOtS8yzgUzo18gvmgD5zC
o8S7aLAaRB8zH/A/YHOQKmD7vWEPVAcG6I73HFf7ZJwXL0JhjzhsG2Eb1B6Qfshn
r0U2ycgEXf7TclC+rGR2am1orRZJAOARHGjx6/Y9J+uPpv/nsSMiAIV4j3ZL8nri
U1FkQ5jnW79XVTF+HnCY6SHyqU7F55SWfQutRHGoIvLZuuUJwDd3GdiEwv3C+7c2
3jwXI1UtdK7Ymg76zACgDYADLG6j8vxuCFiW05fFPuUxYPYOuZjjwtAi5PhWDBIk
vVFU22MXBrWgXvKuUARiR2nkYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOhMCPZR
5xUPUn9VvhQVwDaqZexBMB8GA1UdIwQYMBaAFFp9wKRhawfR+F4tWQ/dX0Bn0LvE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjJEMy9CRjlDNkQ5NDQ2
NTExMUVBODNGQ0E1N0JDNEY5QUUwMi9XbjNBcEdGckI5SDRYaTFaRDkxZlFHZlF1
OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1duM0FwR0ZyQjlINFhpMVpEOTFmUUdmUXU4US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NjJEMy9CRjlDNkQ5NDQ2NTExMUVBODNGQ0E1N0JDNEY5QUUwMi9XbjNBcEdGckI5
SDRYaTFaRDkxZlFHZlF1OFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAg9WUwY1hJalmhIcrW1ehIGLv1LEnDV5yuk2fnFagZGoRXHKqw8LJHovwLP9q
9TuJQChM8KAP/VitH0B9JHlqR4o0ENYDW96eMYUPUVlZD+XVwD4py4NKfCc4amEs
aDRUCUmT7Yq6RGsw7gZkpvDqHC7xkfCGL6zHjbAV7LTv3AYHoLt/3Lfm4Q5Nlwqo
tFqwUkuwtRp7ARGS5/qLXhUgMNbMeigvlA4kO43g8hLtITJ36EkjfE1CbnGu1N6z
YaDKUBVGl9+Et9SRPw2khqM/pZfUx/JOiVJHiRf+YT5aXQkemeOE3fkl9t5Pkm4i
VfXLf8FMHsjDxruj+SSDY9/ngg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:45:20 2026 by rpki-client