Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E8B/FC75386ABE2111F0AFD5B519C4F9AE02/whcUQpGt4TEa-2LQLllQN8jatdw.mft
File:                     whcUQpGt4TEa-2LQLllQN8jatdw.mft (raw, json)
Hash identifier:          5+iesjZ47Mcc2TQhbneV/yG9kQ+as//8blla1THkKjE=
Subject key identifier:   5B:F1:50:75:BC:70:FE:F3:58:D5:EC:9C:E7:BC:14:C1:C3:8A:06:D2
Authority key identifier: C2:17:14:42:91:AD:E1:31:1A:FB:62:D0:2E:59:50:37:C8:DA:B5:DC
Certificate issuer:       /CN=A91E3E8B/serialNumber=C217144291ADE1311AFB62D02E595037C8DAB5DC
Certificate serial:       49
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/whcUQpGt4TEa-2LQLllQN8jatdw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3E8B/FC75386ABE2111F0AFD5B519C4F9AE02/whcUQpGt4TEa-2LQLllQN8jatdw.mft
Manifest number:          47
Signing time:             Wed 25 Mar 2026 07:30:31 +0000
Manifest this update:     Wed 25 Mar 2026 07:30:31 +0000
Manifest next update:     Wed 01 Apr 2026 07:30:31 +0000
Files and hashes:         1: whcUQpGt4TEa-2LQLllQN8jatdw.crl (hash: qb3N4eFOkim/jaqpIx6PeYCeHAej0dtUF0FCaEjjZJ4=)
                          2: 0359510CBE2711F08C3BFC4DC4F9AE02.roa (hash: bg9OdmypdtmkD01MhIR8EeLLWoS84maV/i45F72hbDo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3E8B/FC75386ABE2111F0AFD5B519C4F9AE02/whcUQpGt4TEa-2LQLllQN8jatdw.crl
                          rsync://rpki.apnic.net/member_repository/A91E3E8B/FC75386ABE2111F0AFD5B519C4F9AE02/whcUQpGt4TEa-2LQLllQN8jatdw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/whcUQpGt4TEa-2LQLllQN8jatdw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:30:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3E8B, serialNumber=C217144291ADE1311AFB62D02E595037C8DAB5DC
        Validity
            Not Before: Mar 25 07:30:31 2026 GMT
            Not After : Apr  1 07:30:31 2026 GMT
        Subject: CN=69c38f17-05e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:de:f5:28:33:96:f9:3a:c4:46:7e:7e:d0:95:
                    47:ad:a5:f5:b4:28:a6:b6:d9:42:0f:20:61:99:22:
                    b5:27:c0:e4:cb:3b:f1:29:7d:a4:41:fd:d2:2e:77:
                    0f:95:72:9e:ca:a5:d3:2c:32:08:75:bb:81:b1:f4:
                    d3:e3:69:58:db:e7:67:6d:91:2a:a2:1f:61:be:f4:
                    85:ab:73:b7:7b:86:ba:62:1a:c5:50:f9:76:d2:dc:
                    3a:90:b7:87:2b:10:64:99:16:fd:cb:5e:1c:c5:93:
                    a3:28:35:e5:5d:4a:a2:b4:bf:19:83:58:cf:63:b8:
                    49:9f:02:5c:58:66:95:84:6f:26:aa:45:31:ab:e7:
                    60:51:87:66:8f:12:39:4f:8a:e9:fb:e5:fb:58:64:
                    55:91:30:a7:37:dd:11:08:9f:6f:e2:16:64:4d:e2:
                    6a:5a:f8:54:59:a3:b8:f4:c1:f9:6c:fd:7e:37:05:
                    e6:21:65:90:45:b6:09:a0:4f:7b:a6:d0:0d:2e:74:
                    9e:70:5e:36:83:e0:f4:7e:15:7e:ab:11:0f:7d:b0:
                    f6:d0:96:37:a1:6a:6f:7c:3d:bd:a1:03:3a:8e:b1:
                    67:ae:79:3a:67:e0:b4:43:40:a1:2f:a2:f3:04:09:
                    44:2c:78:22:13:be:4c:8a:eb:cc:ef:af:ec:88:3d:
                    e7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F1:50:75:BC:70:FE:F3:58:D5:EC:9C:E7:BC:14:C1:C3:8A:06:D2
            X509v3 Authority Key Identifier:
                keyid:C2:17:14:42:91:AD:E1:31:1A:FB:62:D0:2E:59:50:37:C8:DA:B5:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3E8B/FC75386ABE2111F0AFD5B519C4F9AE02/whcUQpGt4TEa-2LQLllQN8jatdw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/whcUQpGt4TEa-2LQLllQN8jatdw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E8B/FC75386ABE2111F0AFD5B519C4F9AE02/whcUQpGt4TEa-2LQLllQN8jatdw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:8c:25:78:89:dc:88:8f:58:cd:f8:ba:b4:bf:14:50:09:9b:
         b7:c2:96:b4:ae:f8:5c:e2:f6:53:f6:07:eb:72:d7:4d:fe:f2:
         27:99:ca:ba:7a:08:86:1e:ee:9d:23:91:9e:f2:b7:9f:80:30:
         c5:c9:05:0c:d7:05:07:da:22:5b:0a:b5:be:40:19:56:f0:02:
         89:df:ff:0d:c1:03:8f:3d:70:1c:f3:79:ae:53:6f:97:8e:27:
         f8:10:ea:44:79:23:8a:cb:ca:48:02:e5:da:c8:7b:10:aa:ab:
         e8:e8:3e:e2:f5:7c:d6:d1:7f:38:54:67:af:7c:66:a7:24:d7:
         27:07:25:3e:61:97:a5:fe:6b:e0:26:8e:28:07:49:3e:34:ad:
         9e:ce:80:d3:27:e5:56:af:40:f1:bb:1f:8a:da:92:4e:ba:a7:
         de:ac:e3:bc:ba:4a:c8:37:b9:36:49:b6:49:d7:60:c1:e8:c9:
         3b:aa:82:ee:d9:9e:93:f9:e5:9f:5d:2b:7f:0e:7e:08:4c:2b:
         15:27:44:de:ff:82:97:67:03:e3:28:37:ff:b4:d3:8a:62:2e:
         cf:76:cc:e0:71:9f:d7:bf:cd:be:27:f2:17:f9:71:71:1f:8a:
         60:7b:62:d7:ff:fb:0a:92:d4:f4:31:0d:c8:46:92:8b:19:e3:
         ec:f4:6c:14
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
M0U4QjExMC8GA1UEBRMoQzIxNzE0NDI5MUFERTEzMTFBRkI2MkQwMkU1OTUwMzdD
OERBQjVEQzAeFw0yNjAzMjUwNzMwMzFaFw0yNjA0MDEwNzMwMzFaMBgxFjAUBgNV
BAMTDTY5YzM4ZjE3LTA1ZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCD3vUoM5b5OsRGfn7QlUetpfW0KKa22UIPIGGZIrUnwOTLO/EpfaRB/dIudw+V
cp7KpdMsMgh1u4Gx9NPjaVjb52dtkSqiH2G+9IWrc7d7hrpiGsVQ+XbS3DqQt4cr
EGSZFv3LXhzFk6MoNeVdSqK0vxmDWM9juEmfAlxYZpWEbyaqRTGr52BRh2aPEjlP
iun75ftYZFWRMKc33REIn2/iFmRN4mpa+FRZo7j0wfls/X43BeYhZZBFtgmgT3um
0A0udJ5wXjaD4PR+FX6rEQ99sPbQljeham98Pb2hAzqOsWeueTpn4LRDQKEvovME
CUQseCITvkyK68zvr+yIPed1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUW/FQdbxw
/vNY1eyc57wUwcOKBtIwHwYDVR0jBBgwFoAUwhcUQpGt4TEa+2LQLllQN8jatdww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzRThCL0ZDNzUzODZBQkUy
MTExRjBBRkQ1QjUxOUM0RjlBRTAyL3doY1VRcEd0NFRFYS0yTFFMbGxRTjhqYXRk
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvd2hjVVFwR3Q0VEVhLTJMUUxsbFFOOGphdGR3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUz
RThCL0ZDNzUzODZBQkUyMTExRjBBRkQ1QjUxOUM0RjlBRTAyL3doY1VRcEd0NFRF
YS0yTFFMbGxRTjhqYXRkdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAejCV4idyIj1jN+Lq0vxRQCZu3wpa0rvhc4vZT9gfrctdN/vInmcq6egiGHu6d
I5Ge8refgDDFyQUM1wUH2iJbCrW+QBlW8AKJ3/8NwQOPPXAc83muU2+Xjif4EOpE
eSOKy8pIAuXayHsQqqvo6D7i9XzW0X84VGevfGanJNcnByU+YZel/mvgJo4oB0k+
NK2ezoDTJ+VWr0Dxux+K2pJOuqferOO8ukrIN7k2SbZJ12DB6Mk7qoLu2Z6T+eWf
XSt/Dn4ITCsVJ0Te/4KXZwPjKDf/tNOKYi7PdszgcZ/Xv82+J/IX+XFxH4pge2LX
//sKktT0MQ3IRpKLGePs9GwU
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:47:54 2026 by rpki-client