Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.mft
File:                     wsFz12JIhbwL1vwZPvvO6VQ_okM.mft (raw, json)
Hash identifier:          H8zvh3IeQ1E7qRZ5Puc1BmDw6fvPFmoRtBnF2wY6UtA=
Subject key identifier:   23:48:F5:6E:97:BB:CA:81:D8:16:BE:4C:D8:A2:5C:DC:99:06:89:99
Authority key identifier: C2:C1:73:D7:62:48:85:BC:0B:D6:FC:19:3E:FB:CE:E9:54:3F:A2:43
Certificate issuer:       /CN=A91C8DF1/serialNumber=C2C173D7624885BC0BD6FC193EFBCEE9543FA243
Certificate serial:       5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsFz12JIhbwL1vwZPvvO6VQ_okM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.mft
Manifest number:          56
Signing time:             Fri 27 Mar 2026 07:40:56 +0000
Manifest this update:     Fri 27 Mar 2026 07:40:55 +0000
Manifest next update:     Fri 03 Apr 2026 07:40:55 +0000
Files and hashes:         1: wsFz12JIhbwL1vwZPvvO6VQ_okM.crl (hash: svH2UY8cz3Md+P2HOcQKMNZ5HPBcyd5Qo9WN56xczQQ=)
                          2: BD37307CAAD011F0ACA9F95DC4F9AE02.roa (hash: Pzx4cLp6LQnYJAZ7Og6n8jVJWupopojg1hWD2Hxu8W4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.crl
                          rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsFz12JIhbwL1vwZPvvO6VQ_okM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 07:40:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8DF1, serialNumber=C2C173D7624885BC0BD6FC193EFBCEE9543FA243
        Validity
            Not Before: Mar 27 07:40:55 2026 GMT
            Not After : Apr  3 07:40:55 2026 GMT
        Subject: CN=69c63488-67a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:3d:dd:21:26:9f:4f:32:36:8d:ef:42:a5:2b:
                    57:be:3d:a0:f4:6d:90:e8:19:c3:6b:8f:38:df:d3:
                    dc:cf:cb:53:f3:3a:87:86:e8:55:2b:01:85:ca:c5:
                    a3:23:e0:db:2e:0c:e5:a0:34:a5:a7:09:67:ed:77:
                    f4:16:fc:ec:84:37:33:c5:1e:b3:01:cc:42:a8:67:
                    80:bc:32:d7:9f:b7:a5:96:10:ed:ff:2e:fb:a4:f2:
                    48:29:74:37:1d:0a:8b:cc:32:94:1b:59:51:37:04:
                    2c:dc:e1:be:77:01:4c:2b:dd:7c:52:65:cd:da:cb:
                    5c:0e:31:54:34:19:92:12:6f:39:92:b7:07:03:48:
                    c8:01:f7:a7:3e:0f:3e:4a:7e:f1:dc:e6:4c:75:cc:
                    54:66:c8:aa:41:cf:3f:d4:a9:46:4d:82:70:b2:c5:
                    ef:ac:1c:35:dd:99:9f:84:70:94:fc:a1:96:c0:84:
                    a8:32:aa:d9:f7:c2:09:1d:81:3f:09:78:8a:c2:c6:
                    da:a5:ff:73:bb:15:7f:f4:50:fa:4f:b5:a0:ad:40:
                    24:eb:50:45:01:b5:58:6e:68:cc:f4:18:a4:53:75:
                    aa:4f:8e:60:f6:f4:9b:02:ef:b2:01:40:05:84:40:
                    52:03:84:85:4f:d9:e9:e3:ed:75:f7:76:60:90:06:
                    a1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:48:F5:6E:97:BB:CA:81:D8:16:BE:4C:D8:A2:5C:DC:99:06:89:99
            X509v3 Authority Key Identifier:
                keyid:C2:C1:73:D7:62:48:85:BC:0B:D6:FC:19:3E:FB:CE:E9:54:3F:A2:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsFz12JIhbwL1vwZPvvO6VQ_okM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:39:00:e9:48:19:c7:68:6e:83:c2:33:c4:f3:a1:a6:ec:38:
         36:08:2d:49:06:27:7d:df:91:ac:e2:9f:af:9e:bd:b1:f4:4d:
         40:d0:d7:d3:47:70:bc:30:e7:dd:3f:67:67:b1:82:f5:36:b7:
         2d:be:0a:ec:be:65:5b:a1:45:be:cd:8a:e3:c6:ac:2e:5a:6b:
         d9:4f:8b:87:ce:ad:9f:05:8c:e7:3b:af:75:ce:55:93:ee:32:
         0a:d5:ef:2b:6e:32:66:62:98:5c:80:f6:73:2e:0d:17:d1:7b:
         8b:39:fe:d5:0b:0b:82:d2:69:7f:05:85:fe:b0:cf:9e:67:99:
         59:ec:67:b4:93:c8:67:c7:bf:fb:00:f1:91:c0:0f:78:5e:f3:
         fb:c3:db:c6:ab:30:3c:7c:27:06:68:0d:81:fa:98:58:83:24:
         0b:eb:ec:c4:2e:d3:fc:cb:07:d7:86:b5:6b:4c:c5:c8:cb:d3:
         ed:42:0a:0d:0f:15:98:e7:78:de:48:71:6d:7f:67:33:c7:1b:
         02:43:fb:e5:b6:32:fc:0a:11:f5:68:54:c1:84:bc:1a:48:61:
         94:2f:a5:d0:91:f1:5b:23:64:7e:76:1f:67:f6:e7:2d:99:38:
         33:28:f6:4c:37:dd:4a:84:a5:0c:cb:78:f3:9f:ab:52:b6:a2:
         d9:c2:52:c0
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
OERGMTExMC8GA1UEBRMoQzJDMTczRDc2MjQ4ODVCQzBCRDZGQzE5M0VGQkNFRTk1
NDNGQTI0MzAeFw0yNjAzMjcwNzQwNTVaFw0yNjA0MDMwNzQwNTVaMBgxFjAUBgNV
BAMTDTY5YzYzNDg4LTY3YTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDwPd0hJp9PMjaN70KlK1e+PaD0bZDoGcNrjzjf09zPy1PzOoeG6FUrAYXKxaMj
4NsuDOWgNKWnCWftd/QW/OyENzPFHrMBzEKoZ4C8Mteft6WWEO3/Lvuk8kgpdDcd
CovMMpQbWVE3BCzc4b53AUwr3XxSZc3ay1wOMVQ0GZISbzmStwcDSMgB96c+Dz5K
fvHc5kx1zFRmyKpBzz/UqUZNgnCyxe+sHDXdmZ+EcJT8oZbAhKgyqtn3wgkdgT8J
eIrCxtql/3O7FX/0UPpPtaCtQCTrUEUBtVhuaMz0GKRTdapPjmD29JsC77IBQAWE
QFIDhIVP2enj7XX3dmCQBqEVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUI0j1bpe7
yoHYFr5M2KJc3JkGiZkwHwYDVR0jBBgwFoAUwsFz12JIhbwL1vwZPvvO6VQ/okMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4REYxL0U2MTdBRDkyQUFD
RjExRjBCQjExRkI1QkM0RjlBRTAyL3dzRnoxMkpJaGJ3TDF2d1pQdnZPNlZRX29r
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvd3NGejEySkloYndMMXZ3WlB2dk82VlFfb2tNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4
REYxL0U2MTdBRDkyQUFDRjExRjBCQjExRkI1QkM0RjlBRTAyL3dzRnoxMkpJaGJ3
TDF2d1pQdnZPNlZRX29rTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCUOQDpSBnHaG6DwjPE86Gm7Dg2CC1JBid935Gs4p+vnr2x9E1A0NfTR3C8MOfd
P2dnsYL1NrctvgrsvmVboUW+zYrjxqwuWmvZT4uHzq2fBYznO691zlWT7jIK1e8r
bjJmYphcgPZzLg0X0XuLOf7VCwuC0ml/BYX+sM+eZ5lZ7Ge0k8hnx7/7APGRwA94
XvP7w9vGqzA8fCcGaA2B+phYgyQL6+zELtP8ywfXhrVrTMXIy9PtQgoNDxWY53je
SHFtf2czxxsCQ/vltjL8ChH1aFTBhLwaSGGUL6XQkfFbI2R+dh9n9uctmTgzKPZM
N91KhKUMy3jzn6tStqLZwlLA
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:14:12 2026 by rpki-client