Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft
File:                     wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft (raw, json)
Hash identifier:          BorzCjiGJKY43gjUw5+oRTrx1uDOJ66U3meyiNmGUaQ=
Subject key identifier:   C4:90:62:5D:4A:26:36:01:B9:BC:95:4D:07:7A:6C:77:FF:FF:1E:8D
Authority key identifier: C2:7A:E1:D1:64:72:9F:43:D9:E0:FA:64:BE:51:D0:B6:AE:09:EB:99
Certificate issuer:       /CN=A91DD1F9/serialNumber=C27AE1D164729F43D9E0FA64BE51D0B6AE09EB99
Certificate serial:       015A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wnrh0WRyn0PZ4PpkvlHQtq4J65k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft
Manifest number:          0152
Signing time:             Wed 13 May 2026 05:10:34 +0000
Manifest this update:     Wed 13 May 2026 05:10:34 +0000
Manifest next update:     Wed 20 May 2026 05:10:34 +0000
Files and hashes:         1: wnrh0WRyn0PZ4PpkvlHQtq4J65k.crl (hash: 2CCvPTNtCAgrUoPL214Cdmr37x7Ika6X32KLl71weFI=)
                          2: 36CFD1EE4AD011EF9B941D17C4F9AE02.roa (hash: clS3RHmScKkM+hzQIw2kWZ7VMnwlrU8+cVWCy3qYMaI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.crl
                          rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wnrh0WRyn0PZ4PpkvlHQtq4J65k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 05:10:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 346 (0x15a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD1F9, serialNumber=C27AE1D164729F43D9E0FA64BE51D0B6AE09EB99
        Validity
            Not Before: May 13 05:10:34 2026 GMT
            Not After : May 20 05:10:34 2026 GMT
        Subject: CN=6a0407ca-606c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f8:27:10:fe:80:de:f8:08:49:25:55:28:c5:
                    6e:3e:8b:a8:b6:8f:e3:05:79:c4:94:87:7c:f6:94:
                    7d:3d:82:58:c8:04:fc:fa:e2:a7:f6:cd:46:c3:23:
                    c9:46:c3:2d:12:c3:73:72:03:1f:c0:69:30:d2:25:
                    c4:d9:b3:0a:0f:a8:14:5c:8e:7b:ed:4c:f0:5c:e0:
                    1f:97:92:00:93:07:f6:8a:11:ae:fe:79:da:25:36:
                    4e:50:70:64:97:63:fc:29:71:66:35:8e:8a:58:c2:
                    a1:0f:e3:37:ae:31:c5:4b:01:9e:9d:f9:b4:39:a5:
                    4a:60:bd:f6:f1:37:6e:83:25:a0:ac:9b:4b:56:15:
                    f0:3f:f3:09:6f:be:ea:65:1e:2c:58:63:11:45:a0:
                    25:6b:4a:28:d8:91:00:58:d2:40:95:9c:5a:15:7c:
                    b0:e7:f8:48:45:f4:03:89:2f:34:88:eb:34:2d:99:
                    95:bc:6c:d9:a7:ad:d0:13:d3:96:4a:29:d7:8a:8d:
                    9f:52:67:15:de:61:b6:11:af:85:0d:f1:a5:a6:23:
                    a7:a5:34:8a:ef:a8:e5:23:08:21:ed:bc:45:28:e0:
                    cf:f0:be:74:f8:d8:0b:e6:0e:33:cd:9e:66:05:32:
                    e3:15:a1:39:96:98:e8:72:b8:3f:95:32:cf:26:e6:
                    90:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:90:62:5D:4A:26:36:01:B9:BC:95:4D:07:7A:6C:77:FF:FF:1E:8D
            X509v3 Authority Key Identifier:
                keyid:C2:7A:E1:D1:64:72:9F:43:D9:E0:FA:64:BE:51:D0:B6:AE:09:EB:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wnrh0WRyn0PZ4PpkvlHQtq4J65k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:4d:72:2d:fe:00:9d:1f:36:5d:44:d7:c8:03:3c:59:84:5b:
         ba:cd:25:ab:7a:ad:15:1b:71:f2:8f:1c:ae:8f:78:fc:33:51:
         45:f1:cc:06:31:9a:ce:1d:bf:7d:66:b4:83:ef:01:ea:8e:c6:
         15:83:84:bb:5e:ae:18:07:37:af:5f:e4:01:b8:e6:7b:cb:7d:
         0c:c5:75:41:75:42:ce:cd:dc:a6:45:76:d2:ce:95:48:46:89:
         c7:4c:a3:4c:57:1f:dc:3c:55:c6:60:a7:45:02:02:00:68:1d:
         77:ae:21:18:5f:eb:75:0a:b3:d1:7a:e1:c6:1e:3e:49:2b:f0:
         b7:06:6f:21:82:0a:6f:30:f2:14:e9:1c:e1:e3:92:3e:12:be:
         4c:30:83:28:2d:a5:19:65:39:a6:50:a0:54:fa:2c:5b:bd:5e:
         53:b5:ec:62:1b:fe:69:45:51:20:2e:c3:5a:03:20:eb:e9:a4:
         c8:e7:e6:78:a9:d9:79:b5:28:eb:02:a7:e7:90:b7:63:14:c3:
         ce:04:d0:ae:bf:30:b5:9b:c3:74:b4:e1:ba:a7:5d:c4:46:7e:
         87:b2:0c:e0:19:67:36:67:41:6b:da:af:33:10:82:72:d1:48:
         4a:d6:97:da:0c:58:d8:bd:dc:5d:53:e5:84:80:00:5c:8c:ec:
         ec:67:f8:e6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REQxRjkxMTAvBgNVBAUTKEMyN0FFMUQxNjQ3MjlGNDNEOUUwRkE2NEJFNTFEMEI2
QUUwOUVCOTkwHhcNMjYwNTEzMDUxMDM0WhcNMjYwNTIwMDUxMDM0WjAYMRYwFAYD
VQQDEw02YTA0MDdjYS02MDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAj/gnEP6A3vgISSVVKMVuPouoto/jBXnElId89pR9PYJYyAT8+uKn9s1GwyPJ
RsMtEsNzcgMfwGkw0iXE2bMKD6gUXI577UzwXOAfl5IAkwf2ihGu/nnaJTZOUHBk
l2P8KXFmNY6KWMKhD+M3rjHFSwGenfm0OaVKYL328TdugyWgrJtLVhXwP/MJb77q
ZR4sWGMRRaAla0oo2JEAWNJAlZxaFXyw5/hIRfQDiS80iOs0LZmVvGzZp63QE9OW
SinXio2fUmcV3mG2Ea+FDfGlpiOnpTSK76jlIwgh7bxFKODP8L50+NgL5g4zzZ5m
BTLjFaE5lpjocrg/lTLPJuaQ7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMSQYl1K
JjYBubyVTQd6bHf//x6NMB8GA1UdIwQYMBaAFMJ64dFkcp9D2eD6ZL5R0LauCeuZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDFGOS80MDJFRDI3MjRB
Q0YxMUVGQjgyMThFMTVDNEY5QUUwMi93bnJoMFdSeW4wUFo0UHBrdmxIUXRxNEo2
NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3ducmgwV1J5bjBQWjRQcGt2bEhRdHE0SjY1ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RDFGOS80MDJFRDI3MjRBQ0YxMUVGQjgyMThFMTVDNEY5QUUwMi93bnJoMFdSeW4w
UFo0UHBrdmxIUXRxNEo2NWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlE1yLf4AnR82XUTXyAM8WYRbus0lq3qtFRtx8o8cro94/DNRRfHMBjGazh2/
fWa0g+8B6o7GFYOEu16uGAc3r1/kAbjme8t9DMV1QXVCzs3cpkV20s6VSEaJx0yj
TFcf3DxVxmCnRQICAGgdd64hGF/rdQqz0Xrhxh4+SSvwtwZvIYIKbzDyFOkc4eOS
PhK+TDCDKC2lGWU5plCgVPosW71eU7XsYhv+aUVRIC7DWgMg6+mkyOfmeKnZebUo
6wKn55C3YxTDzgTQrr8wtZvDdLThuqddxEZ+h7IM4BlnNmdBa9qvMxCCctFIStaX
2gxY2L3cXVPlhIAAXIzs7Gf45g==
-----END CERTIFICATE-----
Generated at Wed May 13 12:11:28 2026 by rpki-client