Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.mft
File:                     wDVFC9Gi1EsVHuOMCJiIpa9LgFk.mft (raw, json)
Hash identifier:          ZbKUFvX0DOxFGXBeSkpR4a+EEpEhmxsGPmzl4Iircnc=
Subject key identifier:   5A:A9:DF:B9:E2:8F:4C:4C:54:79:DB:92:78:F4:87:96:3F:38:E8:B9
Authority key identifier: C0:35:45:0B:D1:A2:D4:4B:15:1E:E3:8C:08:98:88:A5:AF:4B:80:59
Certificate issuer:       /CN=A91ED931/serialNumber=C035450BD1A2D44B151EE38C089888A5AF4B8059
Certificate serial:       059A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.mft
Manifest number:          0586
Signing time:             Tue 24 Mar 2026 22:57:36 +0000
Manifest this update:     Tue 24 Mar 2026 22:57:36 +0000
Manifest next update:     Tue 31 Mar 2026 22:57:36 +0000
Files and hashes:         1: wDVFC9Gi1EsVHuOMCJiIpa9LgFk.crl (hash: T4p6YGyzuRAXv9MGBTQFIDOzLNX0iOJg2pMJIdqTjcg=)
                          2: 7273624619B511EC98D2A883C4F9AE02.roa (hash: FBbiY2Z7A2gvB+/P385wAa7i305YOeNtcXS/9FCiDPc=)
                          3: 387C18C819B811EC841B010DC4F9AE02.roa (hash: cO+o3Y1UXcuuxZYV6QVRRJQ+0dW/JHVUCXusTAIueTk=)
                          4: 7EE93AAC893111EF824EA948C4F9AE02.roa (hash: PJ438y1c6II0FXqv0r3FpWjrqzyZo7X27AzYDDSNdT8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.crl
                          rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:57:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1434 (0x59a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED931, serialNumber=C035450BD1A2D44B151EE38C089888A5AF4B8059
        Validity
            Not Before: Mar 24 22:57:36 2026 GMT
            Not After : Mar 31 22:57:36 2026 GMT
        Subject: CN=69c316e0-8e68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:6b:dd:90:1e:ad:4e:f8:a1:9c:0b:68:c8:5e:
                    06:8a:4e:6b:19:53:2f:85:96:05:e4:45:9c:12:78:
                    ea:70:33:40:57:27:96:83:8e:27:73:c7:17:da:99:
                    3c:25:99:06:b4:a5:20:38:a6:20:4a:1b:2e:39:0a:
                    79:45:90:f5:de:73:9b:25:24:3e:ba:8e:6a:a2:c5:
                    c4:cd:d2:43:e9:76:38:35:d4:cf:17:f7:40:fa:cd:
                    27:d9:f8:36:62:67:8e:43:7c:b3:af:fd:b8:0a:0e:
                    f3:48:dc:25:44:1e:a9:fe:7c:56:ff:21:5d:55:a4:
                    45:44:bc:ed:5a:ff:b6:7e:32:23:0c:70:1d:73:46:
                    0c:74:12:25:99:6a:7e:48:df:48:e8:8b:21:22:77:
                    9a:04:ba:67:98:e6:bf:c9:1f:b0:2d:ea:f3:40:29:
                    18:56:f7:14:a3:b0:5b:84:59:88:92:d8:f1:cf:f7:
                    5e:48:26:68:33:06:fa:d7:32:f3:97:b3:54:c7:94:
                    b0:cb:86:a8:ce:e3:9b:12:4e:3c:a9:ab:31:93:7b:
                    00:e2:3c:98:f5:51:bf:50:b0:fb:d8:b5:02:f6:97:
                    56:df:3c:1d:4c:da:0e:23:6a:7f:ed:3c:47:f5:9c:
                    26:81:47:62:2e:20:d5:99:a1:49:6c:e6:81:cb:63:
                    36:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:A9:DF:B9:E2:8F:4C:4C:54:79:DB:92:78:F4:87:96:3F:38:E8:B9
            X509v3 Authority Key Identifier:
                keyid:C0:35:45:0B:D1:A2:D4:4B:15:1E:E3:8C:08:98:88:A5:AF:4B:80:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:b2:3c:85:d6:cc:ed:41:2b:3f:32:50:66:bf:14:ad:3f:71:
         d9:49:84:20:77:6b:2c:9e:66:af:2d:e9:be:b9:fe:bf:24:e9:
         38:12:c5:f5:63:a4:34:8b:13:ba:53:55:c1:81:90:f8:76:08:
         0b:df:ca:51:d3:21:c5:b3:6b:3c:9c:80:f7:77:fc:cd:27:71:
         da:66:1f:9f:44:97:38:f5:c2:7b:82:90:4a:5f:4c:e3:23:5b:
         43:1a:c1:85:a1:d9:e7:b1:29:55:79:c8:87:76:58:09:4d:96:
         50:14:2c:10:87:57:99:a5:bf:d0:b8:2e:11:68:be:22:af:69:
         8b:45:89:03:83:90:55:67:a9:17:5e:f8:43:34:7a:7f:c1:60:
         ad:38:e5:e3:22:e8:d7:fe:e7:3e:97:2f:e2:7c:42:bc:85:72:
         42:bc:d7:91:e3:bc:06:81:49:e5:f2:ee:3e:0a:b7:7a:7e:0a:
         69:50:09:13:fd:a4:b3:be:1b:b3:13:99:e5:41:c8:63:84:1f:
         21:09:8c:8b:36:8a:f8:99:85:71:b1:7a:b6:f2:d6:d7:2a:51:
         0f:69:34:4d:9f:e9:0a:d8:45:06:48:6f:c6:cf:4b:d9:ee:a8:
         91:ac:96:2e:9a:67:73:00:00:8a:3e:db:bb:4d:29:7e:d9:0f:
         c6:1d:40:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:04:19 2026 by rpki-client