Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft
File:                     wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft (raw, json)
Hash identifier:          QhjlKmIipDIizH53CR0BBIL85w6Cg6VqsfwY5m38cJE=
Subject key identifier:   0D:CD:26:A5:B3:93:3E:8B:CE:77:98:2E:75:4F:9A:A5:94:1F:C0:DE
Authority key identifier: C1:BB:82:2B:25:8A:60:FC:D2:F6:C8:08:A5:51:67:49:8A:50:75:4C
Certificate issuer:       /CN=A91E1729/serialNumber=C1BB822B258A60FCD2F6C808A55167498A50754C
Certificate serial:       1D04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbuCKyWKYPzS9sgIpVFnSYpQdUw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft
Manifest number:          1CF3
Signing time:             Tue 24 Mar 2026 16:04:00 +0000
Manifest this update:     Tue 24 Mar 2026 16:03:59 +0000
Manifest next update:     Tue 31 Mar 2026 16:03:59 +0000
Files and hashes:         1: wbuCKyWKYPzS9sgIpVFnSYpQdUw.crl (hash: e+hCszVBECeNDq8BLv9QILUmHlsCo7tAjBxa8G5qmBU=)
                          2: FFA62018DF1811E6805D922AC4F9AE02.roa (hash: LosHJIBt5WarpW9JWkXHdELntSSpgp+cyDuKpJhnO9Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.crl
                          rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbuCKyWKYPzS9sgIpVFnSYpQdUw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 16:03:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7428 (0x1d04)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1729, serialNumber=C1BB822B258A60FCD2F6C808A55167498A50754C
        Validity
            Not Before: Mar 24 16:03:59 2026 GMT
            Not After : Mar 31 16:03:59 2026 GMT
        Subject: CN=69c2b5ef-e310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ec:7c:02:26:7e:63:e2:4f:63:97:21:e6:be:
                    0e:d3:75:f9:fc:e5:68:52:39:96:d0:21:60:9d:68:
                    68:b7:38:64:dc:2e:5d:a9:c5:14:d2:c9:a5:a0:21:
                    d7:72:03:4b:17:7b:2a:27:cd:20:ac:fc:ea:b7:da:
                    47:0b:07:49:33:d4:7f:ed:00:c9:56:8a:00:8e:2a:
                    c8:ac:d0:4c:75:cd:d1:5d:7a:fb:ff:36:e3:04:2b:
                    74:64:54:b8:bf:24:2c:d9:e9:59:c9:d9:e5:b6:1a:
                    66:45:b6:f8:9f:0f:c2:9b:3a:5c:95:a6:5a:b5:1e:
                    5c:84:e5:53:9a:a7:8c:6d:83:69:77:60:c8:7e:a0:
                    4d:45:8a:3c:e3:7a:9d:31:bf:5f:ea:32:77:f9:04:
                    0d:08:7c:bf:6a:87:be:a3:77:b4:d8:b7:98:43:03:
                    5a:d9:62:e7:d0:21:83:4f:ca:81:ba:ab:e4:b0:5e:
                    ae:2a:05:69:ba:40:c4:9a:68:47:8c:46:cc:f0:ef:
                    74:69:e9:96:e5:41:7b:be:f3:86:51:57:45:2c:f9:
                    87:4c:ea:17:42:72:9d:f1:ba:77:4c:7e:cd:d4:67:
                    40:00:74:fe:76:3c:44:ab:64:8b:c9:5f:27:70:11:
                    79:63:eb:1c:d6:45:91:db:66:7c:36:2a:ff:e3:65:
                    10:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:CD:26:A5:B3:93:3E:8B:CE:77:98:2E:75:4F:9A:A5:94:1F:C0:DE
            X509v3 Authority Key Identifier:
                keyid:C1:BB:82:2B:25:8A:60:FC:D2:F6:C8:08:A5:51:67:49:8A:50:75:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbuCKyWKYPzS9sgIpVFnSYpQdUw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:50:de:8b:f4:3f:98:4f:02:bc:7a:2e:9a:af:d9:ef:f0:71:
         bd:27:e1:8d:65:63:a9:32:2e:96:c7:bd:f7:f5:8e:c7:17:d0:
         07:81:4f:00:68:40:f7:87:48:18:c7:48:e2:f8:d8:4f:9c:6e:
         78:e6:b4:49:84:6c:3f:ca:a5:e4:2c:06:47:dc:e6:1c:92:1a:
         db:52:14:6c:4c:ca:e4:e7:dd:49:c0:22:19:c6:60:3f:e8:8c:
         45:07:65:a7:c8:7f:2a:ef:d5:9b:ad:36:3a:23:a2:78:21:52:
         90:98:aa:e8:61:60:be:d9:44:0c:8d:6d:6d:bb:33:e7:e8:53:
         14:a2:fe:22:df:d2:ba:7e:ab:69:6c:01:3c:ce:6c:81:42:1b:
         00:11:09:e5:48:93:49:8f:22:18:36:38:99:c0:f3:f4:ea:b0:
         cd:e4:6e:0e:64:74:a5:fc:dd:9b:cb:87:c3:55:7c:32:f7:61:
         69:c7:8e:1e:11:af:54:d4:15:c6:9e:47:bd:75:ee:13:c1:c3:
         0c:e2:3a:71:af:d1:9e:0d:54:96:a6:b8:1b:38:e4:b5:d5:7b:
         d8:af:b3:b1:09:cb:c0:d1:48:9d:b7:cd:57:b8:f8:58:20:0f:
         11:86:75:bb:07:94:da:f2:6f:7a:39:39:1e:1c:b3:6c:92:6e:
         7f:27:49:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:28:52 2026 by rpki-client