Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft
File:                     WDy8e8lmFFeQyfbyI2iK2v5a07g.mft (raw, json)
Hash identifier:          o821CSUq9VLIHBVGD6YsiDCi9XyXdKPV1UbMI2a3fPY=
Subject key identifier:   36:E4:01:47:D2:CE:C6:CA:E6:72:DE:25:66:30:08:97:05:1E:81:DA
Authority key identifier: 58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8
Certificate issuer:       /CN=A91CFF62/serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8
Certificate serial:       01F1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft
Manifest number:          01D9
Signing time:             Wed 25 Mar 2026 02:56:26 +0000
Manifest this update:     Wed 25 Mar 2026 02:56:26 +0000
Manifest next update:     Wed 01 Apr 2026 02:56:26 +0000
Files and hashes:         1: WDy8e8lmFFeQyfbyI2iK2v5a07g.crl (hash: MAXqMjkQoPm8p3NrDuoHRTLsEa9rhRG238q2biAgKhM=)
                          2: 09820DBA626411EEB46F7861C4F9AE02.roa (hash: ZCeCkuNAMK9rwX4/TECTij2fUOVdG//HOrl/aGbqzoQ=)
                          3: 34509C1AF49D11EFBD8ACC0EC4F9AE02.roa (hash: A4JCozIWp8wr/poP9Jp6dNkVfMHGLYtzZMkqHhGl4c8=)
                          4: 35941A5CF49D11EFBD8ACC0EC4F9AE02.roa (hash: lnol3FDE+TIgmDpE8Hb5zoS0uAhkzs2Kf9xTWAAdaZg=)
                          5: 9AD1EA98626311EE8EE2D260C4F9AE02.roa (hash: TRYBWoWB1+O1h6++uHuCXlTu4HpKrVeUUMhvWRHclCc=)
                          6: 34F912AAF49D11EFBD8ACC0EC4F9AE02.roa (hash: j8XwNmKzHtxOYC1qN4eC3Mdd11Pr7Jsabm08Gp7iA9o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl
                          rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:56:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 497 (0x1f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFF62, serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8
        Validity
            Not Before: Mar 25 02:56:26 2026 GMT
            Not After : Apr  1 02:56:26 2026 GMT
        Subject: CN=69c34eda-bc09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:2a:50:1e:73:57:07:68:10:52:b9:58:2f:eb:
                    aa:8c:fb:b4:cf:85:1b:01:76:58:f8:52:2d:6b:a8:
                    6a:05:67:3c:19:ef:ec:d8:88:d7:a5:09:43:62:b8:
                    67:12:27:0c:18:b2:31:ec:e4:8a:1e:2f:43:9b:c6:
                    14:3c:31:b5:85:da:9b:a5:c7:98:ca:84:9d:bf:90:
                    22:e9:db:45:9a:5d:b8:b3:d1:5b:3e:ae:a6:d9:9f:
                    c5:2c:9d:c8:d1:eb:1f:90:6e:18:77:06:ff:db:32:
                    e0:dc:9d:0d:9b:cd:28:f3:00:f2:10:69:59:12:a2:
                    c1:69:76:d1:b1:42:64:23:37:f1:a7:1b:a7:78:b7:
                    a1:a9:c1:3a:14:13:74:41:37:34:6f:6a:a0:05:90:
                    fb:b9:5f:3e:39:2f:c4:3d:92:66:d7:7d:37:b3:51:
                    5c:a3:8e:f2:27:08:18:e4:0c:95:57:4c:b0:b7:35:
                    d9:a2:25:9c:0a:3d:f9:f3:6b:c5:14:a0:30:6e:da:
                    d7:6d:81:dd:69:01:d5:f3:68:2a:3a:1d:fd:f3:ac:
                    8b:ee:5c:51:07:77:37:2f:d9:aa:8b:60:9a:f1:f2:
                    6b:0b:c0:b9:4b:68:aa:ad:67:6e:74:bc:5c:d4:57:
                    2f:8c:08:be:34:80:4d:d6:55:bd:45:53:09:88:96:
                    a8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E4:01:47:D2:CE:C6:CA:E6:72:DE:25:66:30:08:97:05:1E:81:DA
            X509v3 Authority Key Identifier:
                keyid:58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:61:ab:5a:01:38:a5:34:6f:89:2e:ae:8e:54:4d:38:b6:47:
         cc:79:26:65:91:f0:8a:84:7f:6e:97:5a:e5:2c:a0:3f:eb:93:
         67:e6:ad:47:73:1b:b9:7c:f2:a9:83:3e:e1:b1:2a:20:ad:08:
         51:06:1a:82:cd:ab:5f:0b:4a:ec:8a:fc:1c:2a:dd:d9:10:01:
         dd:3a:3a:85:0f:e0:0d:69:c9:39:b3:ef:73:16:d1:49:7c:ae:
         f2:d0:fb:d7:ca:f4:d8:61:01:87:f6:e5:d3:88:b8:ad:7a:b1:
         bf:25:60:6d:75:2e:51:3f:6a:16:25:49:85:fb:7e:48:8f:0c:
         04:bd:5f:f5:cf:3a:26:88:83:c5:06:f7:51:23:04:2e:2b:e7:
         8b:4b:e9:b4:74:3c:8d:19:94:09:75:2a:9a:c5:59:e1:35:2d:
         a0:76:89:ec:5c:ae:3a:af:b5:f4:07:e3:89:bf:1d:7c:64:4f:
         a9:bc:70:17:3c:98:75:fa:2c:ff:04:10:39:5d:77:e5:da:26:
         e2:1f:5f:1f:83:cc:d9:d6:7f:dd:af:37:fc:a4:54:4c:09:94:
         6b:2d:3d:89:84:61:bc:50:80:f3:38:87:67:c9:d0:f3:59:7a:
         76:ef:66:2f:63:a0:e0:fa:2e:85:25:8b:5d:5d:1c:44:a7:c9:
         59:85:d4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:59:09 2026 by rpki-client