Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.mft
File:                     wxT-rYcguxji2eIkk4K433VEbYs.mft (raw, json)
Hash identifier:          T4m3r1UDJY5G0noUcCuglpzBNoMobBhPDND8p7zodFU=
Subject key identifier:   68:5D:AC:86:A9:13:B2:9A:79:8E:D8:75:D3:DE:2A:5E:D9:02:56:3D
Authority key identifier: C3:14:FE:AD:87:20:BB:18:E2:D9:E2:24:93:82:B8:DF:75:44:6D:8B
Certificate issuer:       /CN=A91CFCD3/serialNumber=C314FEAD8720BB18E2D9E2249382B8DF75446D8B
Certificate serial:       05F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxT-rYcguxji2eIkk4K433VEbYs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.mft
Manifest number:          05ED
Signing time:             Tue 24 Mar 2026 22:39:14 +0000
Manifest this update:     Tue 24 Mar 2026 22:39:14 +0000
Manifest next update:     Tue 31 Mar 2026 22:39:14 +0000
Files and hashes:         1: wxT-rYcguxji2eIkk4K433VEbYs.crl (hash: ldpmKu/GAzflzBL8DD+mx2ORe8+mw0FhPkpPvvznYKI=)
                          2: 5058C6EEA53C11F096F1C284C4F9AE02.roa (hash: 3JM2acvcDIocyJks0EoakV6p4uSNGRyTdD0cztbL25s=)
                          3: 30D58974A53C11F0A057C775C4F9AE02.roa (hash: Yla+AjYYhaBJGPhIpeI0a0ImOXfa/xKKshsCr7MtLNw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.crl
                          rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxT-rYcguxji2eIkk4K433VEbYs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:39:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1528 (0x5f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFCD3, serialNumber=C314FEAD8720BB18E2D9E2249382B8DF75446D8B
        Validity
            Not Before: Mar 24 22:39:14 2026 GMT
            Not After : Mar 31 22:39:14 2026 GMT
        Subject: CN=69c31292-4c75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:70:82:bf:cf:c8:cf:75:b5:f6:cf:3a:36:99:
                    e8:b9:f8:6e:d0:dc:2a:62:26:d3:65:51:22:f3:6c:
                    99:60:01:dd:71:6a:a7:ad:e3:f1:d8:e6:4d:3a:e8:
                    19:a2:b7:f2:23:4d:6f:30:12:52:ff:72:e5:e4:67:
                    32:99:7a:db:c9:50:43:9c:41:ec:88:75:b5:57:59:
                    df:ed:77:92:f0:48:06:71:a2:55:51:16:be:a4:ee:
                    6b:1f:78:32:cc:61:a9:7c:99:19:0a:22:f6:c9:cc:
                    1b:7b:f0:6c:2b:4a:09:45:d1:aa:1c:1d:0a:1c:60:
                    2b:9e:14:1d:8a:51:b5:71:46:b0:ab:62:35:2e:66:
                    d4:59:16:a9:f5:0b:62:7c:99:39:19:9b:02:4d:60:
                    58:e5:42:a0:04:fa:26:5d:b2:de:e5:d0:b1:89:13:
                    55:3e:26:05:a2:0b:92:2b:96:69:a0:7d:f5:b8:4d:
                    54:f3:28:df:3f:38:fb:f8:d9:90:4e:30:44:7d:45:
                    69:4f:b7:cc:89:20:4a:f0:4a:aa:3a:3f:0f:1e:5c:
                    25:15:2b:40:ce:e3:72:b3:dd:2d:bc:4f:01:c7:bd:
                    86:e7:50:de:00:da:0e:4d:cd:7a:76:ed:e9:b1:6a:
                    c8:6a:f8:00:21:78:b0:b3:31:d2:92:03:2f:92:45:
                    33:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:5D:AC:86:A9:13:B2:9A:79:8E:D8:75:D3:DE:2A:5E:D9:02:56:3D
            X509v3 Authority Key Identifier:
                keyid:C3:14:FE:AD:87:20:BB:18:E2:D9:E2:24:93:82:B8:DF:75:44:6D:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxT-rYcguxji2eIkk4K433VEbYs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:39:1a:c6:85:0a:9f:a9:70:dd:63:f0:7e:8f:83:ec:f2:06:
         e3:6e:af:34:c6:e6:2d:be:66:90:f8:09:36:55:42:43:89:da:
         bc:33:26:61:62:39:c0:4b:3d:f6:9f:0a:61:9e:5b:c0:23:4d:
         80:d4:ad:88:c7:18:11:fd:78:02:7b:23:3e:97:a9:c6:62:b1:
         27:68:1f:65:5d:fc:43:0a:ad:36:c5:b6:e3:09:22:0b:f5:c6:
         35:a0:2f:08:79:d6:c2:59:b8:ce:d4:9e:32:73:2e:5f:0c:7b:
         8e:5c:51:fa:c3:cf:c4:44:28:94:db:28:e3:08:66:e5:e3:c4:
         d2:d7:8a:67:f9:63:b7:62:ae:49:95:8b:11:a8:b7:6c:6a:ed:
         0c:47:c8:74:de:1d:3e:ba:ec:63:b4:01:a1:e8:97:f8:2e:70:
         02:8a:f4:54:85:f7:17:2f:54:43:e5:66:06:2b:76:f7:2c:a2:
         da:53:37:78:c6:2a:fc:de:b8:7d:a5:40:0a:43:24:ff:cd:50:
         29:f6:a4:a5:a2:38:2b:57:f5:09:fa:77:59:8f:9b:48:ee:bc:
         79:97:aa:6b:8b:98:c9:e2:be:b1:77:4a:69:d6:6e:6a:c0:eb:
         a6:43:04:19:19:64:36:b2:98:f5:41:55:42:40:fb:29:be:2c:
         65:96:12:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:31:23 2026 by rpki-client