Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.mft
File:                     woYQciwbyJvjK01LiizCHeZxfMg.mft (raw, json)
Hash identifier:          qp5UgQqo1FVPqBnRQkCo/KA4EN74Xz94DyvUtP5b9l8=
Subject key identifier:   1B:FD:6A:F5:C5:AA:45:6B:60:54:58:6A:BA:AA:C4:4C:28:7E:5D:E5
Authority key identifier: C2:86:10:72:2C:1B:C8:9B:E3:2B:4D:4B:8A:2C:C2:1D:E6:71:7C:C8
Certificate issuer:       /CN=A91E11D6/serialNumber=C28610722C1BC89BE32B4D4B8A2CC21DE6717CC8
Certificate serial:       0337
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woYQciwbyJvjK01LiizCHeZxfMg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.mft
Manifest number:          032E
Signing time:             Wed 25 Mar 2026 00:44:07 +0000
Manifest this update:     Wed 25 Mar 2026 00:44:06 +0000
Manifest next update:     Wed 01 Apr 2026 00:44:06 +0000
Files and hashes:         1: woYQciwbyJvjK01LiizCHeZxfMg.crl (hash: yLo0toSoKP1OF1r6IWDDcacB7hF+OP6az8bdCyofnn4=)
                          2: 782DB69017A911F192949DC6333D8C67.roa (hash: Mv+E4tW4XYVYr1mpUCzDscto72w/c2g7B6/yB5ClYE0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.crl
                          rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woYQciwbyJvjK01LiizCHeZxfMg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 823 (0x337)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E11D6, serialNumber=C28610722C1BC89BE32B4D4B8A2CC21DE6717CC8
        Validity
            Not Before: Mar 25 00:44:06 2026 GMT
            Not After : Apr  1 00:44:06 2026 GMT
        Subject: CN=69c32fd6-1af2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:24:f8:0e:1d:d1:1d:cd:82:49:fe:c5:51:23:
                    f1:a2:f0:2a:94:12:95:0c:fe:89:d1:0c:13:35:68:
                    7c:c0:e5:bc:03:3b:b5:02:71:a5:e3:59:67:63:28:
                    42:bd:4f:f7:bd:22:d6:55:20:40:4d:36:62:6a:a5:
                    7c:b5:1d:6a:c8:16:17:b8:01:bd:5f:8c:54:1c:4e:
                    12:2c:4c:7d:9a:e1:2e:23:82:63:0d:ef:c1:ce:f0:
                    26:99:12:e2:a7:d4:0b:f3:9e:74:68:fc:a7:91:23:
                    be:cf:d1:93:cc:9b:b8:0e:c6:95:81:dd:f5:e3:7a:
                    d4:a5:48:c0:c7:5f:41:3a:f3:2b:cc:b2:7b:dd:95:
                    0f:29:32:cd:76:60:69:77:13:32:56:fd:e4:04:0c:
                    c0:42:b8:18:01:a3:16:ec:01:b0:60:62:29:3a:de:
                    5e:77:03:86:91:de:1f:03:b1:e9:8b:c9:22:0c:f7:
                    a6:e9:49:dd:84:bb:9b:c9:c8:13:3d:97:9c:07:a5:
                    e6:2b:d4:f8:21:cc:e0:a4:bd:a0:a9:37:ef:47:42:
                    21:f5:4c:74:e1:81:47:0b:42:0d:8c:16:9a:5a:1d:
                    d3:55:e7:7a:7a:e4:e1:9e:80:e0:ea:61:9d:0e:fb:
                    88:a7:d1:6b:09:a2:1d:8a:31:0d:2e:c9:2b:a0:10:
                    c0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:FD:6A:F5:C5:AA:45:6B:60:54:58:6A:BA:AA:C4:4C:28:7E:5D:E5
            X509v3 Authority Key Identifier:
                keyid:C2:86:10:72:2C:1B:C8:9B:E3:2B:4D:4B:8A:2C:C2:1D:E6:71:7C:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woYQciwbyJvjK01LiizCHeZxfMg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:12:63:8d:22:ec:98:1f:80:a1:33:f8:f4:68:41:c9:42:8a:
         69:db:0d:cf:d5:b6:ba:16:a4:07:f3:6c:cb:69:a2:86:b5:fd:
         12:4e:11:bf:3d:3d:c8:8f:f1:e9:31:a8:f2:d3:6c:ff:9a:eb:
         44:39:10:2e:9b:e0:13:a3:95:11:00:3e:2c:06:87:c3:00:b8:
         2d:3c:d2:71:54:f8:34:68:38:74:78:9e:60:9a:9f:dd:09:e7:
         28:f7:39:2c:95:ff:a2:fc:07:0b:84:50:d1:d9:54:33:c3:5a:
         b5:08:77:6e:ef:19:9f:af:b9:9f:ad:d0:f5:32:24:25:b1:3c:
         80:17:59:d8:f7:b4:5a:29:26:4e:94:93:1b:27:62:eb:75:e4:
         bc:2f:3b:87:f6:1e:01:20:11:74:3b:e1:c3:d9:de:0e:00:76:
         45:41:d4:ef:df:df:ec:61:3d:26:2e:b2:cc:f3:5f:4c:34:28:
         27:09:78:a8:8e:0d:26:86:a1:82:cb:c1:87:95:0f:e4:de:90:
         82:e8:37:dc:86:97:2a:de:1c:ca:66:c9:d9:64:be:08:9b:8e:
         cc:74:e6:81:d2:da:b0:42:6a:7a:55:5a:13:ff:c8:88:e0:83:
         80:02:ff:1a:46:c1:64:aa:a1:69:d4:b5:cb:ae:f0:ed:ef:4c:
         ed:37:76:dd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTExRDYxMTAvBgNVBAUTKEMyODYxMDcyMkMxQkM4OUJFMzJCNEQ0QjhBMkNDMjFE
RTY3MTdDQzgwHhcNMjYwMzI1MDA0NDA2WhcNMjYwNDAxMDA0NDA2WjAYMRYwFAYD
VQQDEw02OWMzMmZkNi0xYWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3ST4Dh3RHc2CSf7FUSPxovAqlBKVDP6J0QwTNWh8wOW8Azu1AnGl41lnYyhC
vU/3vSLWVSBATTZiaqV8tR1qyBYXuAG9X4xUHE4SLEx9muEuI4JjDe/BzvAmmRLi
p9QL8550aPynkSO+z9GTzJu4DsaVgd3143rUpUjAx19BOvMrzLJ73ZUPKTLNdmBp
dxMyVv3kBAzAQrgYAaMW7AGwYGIpOt5edwOGkd4fA7Hpi8kiDPem6UndhLubycgT
PZecB6XmK9T4IczgpL2gqTfvR0Ih9Ux04YFHC0INjBaaWh3TVed6euThnoDg6mGd
DvuIp9FrCaIdijENLskroBDA3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBv9avXF
qkVrYFRYarqqxEwofl3lMB8GA1UdIwQYMBaAFMKGEHIsG8ib4ytNS4oswh3mcXzI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTFENi83N0RFRkQzMjA2
MzkxMUVEODE4QzQwMTZDNEY5QUUwMi93b1lRY2l3YnlKdmpLMDFMaWl6Q0hlWnhm
TWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dvWVFjaXdieUp2akswMUxpaXpDSGVaeGZNZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MTFENi83N0RFRkQzMjA2MzkxMUVEODE4QzQwMTZDNEY5QUUwMi93b1lRY2l3YnlK
dmpLMDFMaWl6Q0hlWnhmTWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmhJjjSLsmB+AoTP49GhByUKKadsNz9W2uhakB/Nsy2mihrX9Ek4Rvz09yI/x
6TGo8tNs/5rrRDkQLpvgE6OVEQA+LAaHwwC4LTzScVT4NGg4dHieYJqf3QnnKPc5
LJX/ovwHC4RQ0dlUM8NatQh3bu8Zn6+5n63Q9TIkJbE8gBdZ2Pe0WikmTpSTGydi
63XkvC87h/YeASARdDvhw9neDgB2RUHU79/f7GE9Ji6yzPNfTDQoJwl4qI4NJoah
gsvBh5UP5N6Qgug33IaXKt4cymbJ2WS+CJuOzHTmgdLasEJqelVaE//IiOCDgAL/
GkbBZKqhadS1y67w7e9M7Td23Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:59:56 2026 by rpki-client