Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.mft
File:                     wuC1g9pA223YMwUcBSRZnhpZAsY.mft (raw, json)
Hash identifier:          qK9eTO1VXAbFVfkj8IJq++0fpnOCfCIPg4wGWj7V4+Q=
Subject key identifier:   FD:0B:41:4D:EA:EC:82:75:A0:68:62:09:C9:4E:7E:0E:06:B2:D3:71
Authority key identifier: C2:E0:B5:83:DA:40:DB:6D:D8:33:05:1C:05:24:59:9E:1A:59:02:C6
Certificate issuer:       /CN=A91CCDD3/serialNumber=C2E0B583DA40DB6DD833051C0524599E1A5902C6
Certificate serial:       08FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuC1g9pA223YMwUcBSRZnhpZAsY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.mft
Manifest number:          08E4
Signing time:             Tue 24 Mar 2026 20:10:57 +0000
Manifest this update:     Tue 24 Mar 2026 20:10:57 +0000
Manifest next update:     Tue 31 Mar 2026 20:10:57 +0000
Files and hashes:         1: wuC1g9pA223YMwUcBSRZnhpZAsY.crl (hash: MuBcyV1sNoBrn66vr0ips8Y/SKS6NPXqzTdeQG+ejb4=)
                          2: 68EAE318D09411EA9D19403FC4F9AE02.roa (hash: q/oc0cGn2MfOaCmSdVgqQshKMKW0SHP1XAjaEsK7Ucc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.crl
                          rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuC1g9pA223YMwUcBSRZnhpZAsY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:10:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2300 (0x8fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCDD3, serialNumber=C2E0B583DA40DB6DD833051C0524599E1A5902C6
        Validity
            Not Before: Mar 24 20:10:57 2026 GMT
            Not After : Mar 31 20:10:57 2026 GMT
        Subject: CN=69c2efd1-ba64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:79:2e:11:8a:3c:ac:67:aa:a7:44:40:2d:5e:
                    03:05:e9:e6:54:b2:97:8f:29:79:65:fc:13:64:bd:
                    27:9b:7a:45:43:39:a6:41:a3:e3:83:19:24:a3:3a:
                    d9:4f:34:12:4e:da:db:85:fd:33:e2:a8:f8:71:38:
                    24:54:e3:b2:d0:10:d2:c7:47:76:4a:17:60:57:e7:
                    ec:09:19:34:f0:77:5b:84:70:75:8b:45:3e:bf:8b:
                    66:b9:41:80:33:91:f7:69:76:5f:6b:c1:ca:ea:ab:
                    2c:35:66:12:b5:b4:82:04:cb:ec:5e:e2:f8:2e:4f:
                    6b:55:5d:4b:d1:ac:df:ff:1e:f8:f2:8f:3e:6c:10:
                    7b:f5:e6:86:8a:b9:15:a2:d3:1f:98:31:bd:8f:f1:
                    8f:b5:78:03:7e:a5:d4:09:ca:8f:94:47:1c:f3:e8:
                    78:85:a0:fd:2d:a4:f2:66:00:05:2b:53:c5:48:28:
                    5d:e8:dd:1e:30:e1:8a:d3:d0:7b:e2:86:80:d3:fc:
                    4e:4e:5c:04:c9:8c:d1:1c:8f:22:a5:04:36:0a:50:
                    22:09:c5:01:85:ee:43:55:a7:83:c3:21:81:f6:85:
                    76:97:ce:74:54:34:bf:e9:bc:70:8e:b0:61:20:c8:
                    75:72:d8:18:36:6a:eb:96:f7:cf:3e:70:16:29:a3:
                    e7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:0B:41:4D:EA:EC:82:75:A0:68:62:09:C9:4E:7E:0E:06:B2:D3:71
            X509v3 Authority Key Identifier:
                keyid:C2:E0:B5:83:DA:40:DB:6D:D8:33:05:1C:05:24:59:9E:1A:59:02:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuC1g9pA223YMwUcBSRZnhpZAsY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:c4:a0:f5:90:1d:03:eb:c0:2b:86:da:32:4a:f8:29:64:82:
         c9:52:e3:83:94:4c:52:01:f3:67:82:24:28:d3:26:49:7a:46:
         ab:b5:66:55:32:80:15:74:ed:7c:d0:5b:80:ff:3f:1c:6c:9f:
         38:27:59:e9:95:37:e1:f3:d6:16:99:f1:ff:e3:4d:e0:be:66:
         ba:8f:53:7a:48:8b:af:5f:ac:73:ca:51:d2:33:ef:23:2a:8b:
         81:76:f7:1e:95:9b:4b:39:5c:cf:99:8c:f5:9b:fc:23:00:2a:
         01:ba:f2:c8:54:d3:db:94:93:a3:fc:b4:7f:35:93:1b:6b:a8:
         6c:66:48:db:ed:95:82:01:0f:70:49:68:34:4b:ad:ee:2f:b8:
         05:df:b6:f5:5f:03:7b:5a:bf:a6:5c:4e:ac:8d:fb:07:ef:e7:
         50:7f:53:24:f6:43:61:fb:e6:f7:0c:a3:ae:96:d5:a3:b6:a7:
         94:56:23:5c:fa:24:00:a6:f8:4f:b4:62:48:1d:0d:a3:10:58:
         a1:09:78:99:54:b1:aa:76:29:3d:76:85:bc:b6:60:3f:4a:2a:
         88:ff:2e:de:83:5f:4e:72:1a:9b:ef:9d:0f:e2:10:f7:ed:72:
         da:b9:32:18:6f:a7:78:e4:e7:dd:47:30:8d:cb:90:29:18:3f:
         e3:82:9a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:57:12 2026 by rpki-client