Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft
File:                     wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft (raw, json)
Hash identifier:          ZHdcyl53L6Wj3tOKhRoX5eYVG3WbtEFRy5KXIZ0svmU=
Subject key identifier:   19:FE:07:3D:3D:1D:28:D3:96:D0:46:A3:C5:5C:9D:F9:74:D3:8D:E1
Authority key identifier: C2:4D:8E:A7:6B:CA:64:98:3F:53:2A:4C:DB:B2:CC:F1:9B:06:25:0D
Certificate issuer:       /CN=A91EF24F/serialNumber=C24D8EA76BCA64983F532A4CDBB2CCF19B06250D
Certificate serial:       084F
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/wk2Op2vKZJg_UypM27LM8ZsGJQ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft
Manifest number:          0846
Signing time:             Tue 24 Mar 2026 20:35:53 +0000
Manifest this update:     Tue 24 Mar 2026 20:35:53 +0000
Manifest next update:     Tue 31 Mar 2026 20:35:53 +0000
Files and hashes:         1: wk2Op2vKZJg_UypM27LM8ZsGJQ0.crl (hash: pmvYJADizIdV71WkGwFOrYh+fJR8p1+Ye2Qj3DBZiWA=)
                          2: 47D255C8572811ECBE150619C4F9AE02.roa (hash: uWkp09s7yGSzXGuY3Dy3+U0rw2K9bYSVVtki+9GQvL0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.crl
                          rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/wk2Op2vKZJg_UypM27LM8ZsGJQ0.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:35:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2127 (0x84f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF24F, serialNumber=C24D8EA76BCA64983F532A4CDBB2CCF19B06250D
        Validity
            Not Before: Mar 24 20:35:53 2026 GMT
            Not After : Mar 31 20:35:53 2026 GMT
        Subject: CN=69c2f5a9-fe03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a2:62:22:50:ec:85:04:4d:99:22:2b:fe:64:
                    0a:7f:36:54:66:20:ba:a2:2f:00:bc:ab:8e:5f:ae:
                    10:f3:9d:79:fa:cd:d2:33:ba:40:54:c4:ff:cf:9d:
                    bc:ce:b9:f9:ec:a5:93:5a:d4:ce:21:9d:4e:bc:e0:
                    65:b6:14:cb:fc:29:53:c6:02:37:96:b8:1c:95:64:
                    6e:dc:5b:36:b3:5e:e6:68:40:03:9b:73:ca:84:88:
                    5b:9b:7b:44:4f:e1:67:a2:8a:a4:bc:0a:9a:ab:19:
                    21:ad:11:4d:40:4b:12:a2:34:d5:35:f3:75:84:fb:
                    b9:f8:8a:cc:8d:dc:51:2b:8c:4b:60:89:28:3f:1c:
                    d7:dd:6e:35:f5:ac:7b:19:fd:9f:58:25:44:67:e7:
                    3c:ec:68:86:3e:97:a1:2d:fb:9d:00:aa:d3:d8:af:
                    71:f4:90:55:1b:07:b7:fd:d5:2b:84:1b:b7:8f:12:
                    de:53:16:1f:93:3b:e1:7e:f3:2b:fd:08:53:da:27:
                    6b:11:e5:56:93:76:8d:c0:c0:8c:48:27:f4:8a:63:
                    8f:6c:16:d8:4b:3e:3a:f3:7d:99:dc:e4:0c:0a:d8:
                    fd:ed:22:40:86:3a:d9:f9:68:e0:32:c9:84:ca:97:
                    48:32:43:5c:7e:0a:f5:cd:b4:cc:13:7c:f1:6c:26:
                    90:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:FE:07:3D:3D:1D:28:D3:96:D0:46:A3:C5:5C:9D:F9:74:D3:8D:E1
            X509v3 Authority Key Identifier:
                keyid:C2:4D:8E:A7:6B:CA:64:98:3F:53:2A:4C:DB:B2:CC:F1:9B:06:25:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/wk2Op2vKZJg_UypM27LM8ZsGJQ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:53:08:00:d6:5c:0a:f7:d4:f8:a2:32:1e:52:bd:e0:3b:80:
         90:08:14:8e:2d:c2:80:27:9a:30:f3:9b:72:37:3f:0a:5a:37:
         23:94:8b:2c:0e:a8:8c:fd:0f:be:f7:a4:9a:b1:ef:5a:47:e5:
         0a:63:d9:cc:0c:f9:a1:10:09:53:fe:d5:48:04:39:62:6f:84:
         44:e1:56:3b:b8:4e:75:61:46:cb:52:65:9e:99:d8:c2:93:7e:
         6c:88:cc:4e:58:96:73:f7:71:4e:c9:48:18:1a:a5:73:b4:e6:
         71:b8:d7:51:c8:ca:eb:c0:f7:f0:6f:6f:20:3f:9b:25:7f:15:
         7c:f2:7c:a5:3d:ef:28:04:6b:85:e9:cf:c6:4a:63:0f:26:b6:
         f5:38:10:49:c3:dc:4c:8e:14:f0:a2:5f:26:e7:ae:58:5b:b7:
         ae:aa:4b:e5:7e:d2:d8:6c:d6:ad:19:23:5f:f5:fd:bb:be:a6:
         6e:35:29:02:7a:39:e7:7d:f4:24:18:bf:53:18:14:4b:f3:cf:
         c3:de:e1:25:0c:63:46:0c:e3:a1:d7:d0:db:12:a6:23:13:92:
         fb:1e:5a:ea:56:16:0c:91:39:85:ef:0f:84:21:e2:9e:9c:f1:
         ae:3b:59:b9:dd:79:ec:29:51:64:d3:e4:37:65:0b:d2:42:12:
         3d:24:98:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:55:40 2026 by rpki-client