Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft
File:                     wKVDSTesKQBoKRal--4VQ84LCKc.mft (raw, json)
Hash identifier:          r+GSoEbOHS9PEzj8y8nzfFKO1AEc2j7U0BfrLY9Qjjs=
Subject key identifier:   27:14:DF:DA:47:3D:BE:78:51:4D:BB:78:F7:FB:CD:C5:21:1A:FC:3A
Authority key identifier: C0:A5:43:49:37:AC:29:00:68:29:16:A5:FB:EE:15:43:CE:0B:08:A7
Certificate issuer:       /CN=A91EF73C/serialNumber=C0A5434937AC2900682916A5FBEE1543CE0B08A7
Certificate serial:       09DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft
Manifest number:          09AE
Signing time:             Tue 24 Mar 2026 19:43:41 +0000
Manifest this update:     Tue 24 Mar 2026 19:43:41 +0000
Manifest next update:     Tue 31 Mar 2026 19:43:41 +0000
Files and hashes:         1: wKVDSTesKQBoKRal--4VQ84LCKc.crl (hash: tzXdpcLwPUnXBs6g5s6cCqeUw1oNICwd3qLDwdaH6S8=)
                          2: FD55206821DE11EBA27D251CC4F9AE02.roa (hash: +q1/Z0Gbv09SPM+cE3PEwTTEu2R3d9XHswraJOVO5w8=)
                          3: 8B3FB092C2AC11EAB23E1C3AC4F9AE02.roa (hash: Fd1Tf/S90EhmoaFhI4h+ZhWQUJ40Q/83oW0JuW1LVTs=)
                          4: FCA6CE3221DE11EBA27D251CC4F9AE02.roa (hash: lwb4D6wTQBfjbmXTI8Z//lyrBHKyL8sazKScgUSsnjE=)
                          5: 8BD44914C2AC11EAB23E1C3AC4F9AE02.roa (hash: 86fiv+ToJ8E+95Mhatj4DQQCxzIT6kPR/i0pwYtFn6s=)
                          6: 6B641F14232411EB87A6CB0DC4F9AE02.roa (hash: aGGIYu/7r8bbBJz8mmriyFLWLYpIceyB24QlB1GUQUo=)
                          7: 87A141747A5511EBA4258A7DC4F9AE02.roa (hash: RrvKz+k3BpE474LEsBiK8GJqBSWh6Od/xbLaF5t2LA4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.crl
                          rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:43:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2526 (0x9de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF73C, serialNumber=C0A5434937AC2900682916A5FBEE1543CE0B08A7
        Validity
            Not Before: Mar 24 19:43:41 2026 GMT
            Not After : Mar 31 19:43:41 2026 GMT
        Subject: CN=69c2e96d-a666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:ba:e3:c6:de:b7:05:08:80:37:47:11:63:48:
                    d6:79:65:79:87:3e:db:92:cb:86:35:65:eb:07:c8:
                    ea:b4:e0:c7:1e:ec:db:a2:8a:42:9f:61:17:2c:b4:
                    62:74:98:75:1e:7e:25:30:d8:e3:8c:85:0f:a7:bc:
                    90:36:43:c8:fe:fb:55:61:d7:da:02:c7:b4:8c:fa:
                    ee:70:a1:da:25:99:5a:c7:53:c7:24:c1:e3:45:64:
                    ea:73:f0:3e:dd:6c:e7:ac:a2:22:55:2e:b9:de:5f:
                    dd:3e:54:54:9c:c8:3a:8e:be:a8:6e:63:4a:df:fe:
                    a9:68:1b:bb:b7:9d:ba:89:b1:b9:07:b6:f0:6a:57:
                    f9:fc:98:88:38:40:86:0e:ee:a1:c7:19:56:db:81:
                    1a:56:55:6d:51:6b:52:21:80:4a:6a:d9:00:70:ac:
                    66:2a:f6:61:d0:b7:d9:5f:d8:99:85:e4:b7:32:c3:
                    c0:82:f7:1e:33:2c:57:40:5f:61:64:9d:15:70:27:
                    1d:c3:36:fb:f2:62:e7:74:6f:47:89:7f:97:b0:08:
                    75:7b:11:51:7c:f0:98:c2:b6:bd:ca:05:69:36:8b:
                    91:53:6b:87:91:c6:3d:8b:aa:bb:8a:d4:df:a7:9b:
                    ca:e6:9d:84:81:2f:01:38:8e:5c:90:17:70:9d:40:
                    a6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:14:DF:DA:47:3D:BE:78:51:4D:BB:78:F7:FB:CD:C5:21:1A:FC:3A
            X509v3 Authority Key Identifier:
                keyid:C0:A5:43:49:37:AC:29:00:68:29:16:A5:FB:EE:15:43:CE:0B:08:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:d8:b5:40:50:99:e5:d6:af:03:c2:c8:58:76:7d:ff:18:5b:
         5c:92:42:cd:00:e1:56:6d:08:22:19:37:72:d9:b4:20:6f:18:
         fb:93:3a:38:a5:9c:0d:e9:8c:8c:23:86:c0:cd:c9:a7:28:d9:
         b8:5d:3d:e9:e2:9a:75:2f:36:04:fc:00:2b:b4:24:c9:9c:ec:
         a8:88:da:57:cc:c7:34:d0:30:1b:d9:1f:20:2c:b2:e8:48:f0:
         fe:ad:b1:de:29:9b:fd:3e:55:cc:6b:09:55:b1:5b:75:4f:da:
         cd:74:08:27:9a:75:c9:71:e4:77:79:b4:bb:76:88:f5:60:b7:
         28:10:02:a2:4d:39:55:8e:99:0a:36:1c:b5:aa:e5:05:3d:ca:
         0c:30:cb:54:43:d0:d5:f7:6c:eb:d4:52:b9:f4:7d:62:59:90:
         69:a8:31:dc:a6:b9:e7:5a:48:de:c8:7a:a8:ba:af:6f:00:e4:
         4b:4f:d7:72:92:79:b2:24:0b:06:8a:08:68:1f:04:ce:d8:b7:
         1e:7f:ba:f5:46:da:28:1d:c3:63:9f:7f:0b:a5:17:f9:94:6d:
         ba:fb:b2:37:78:6b:1c:5d:15:c9:d1:6d:17:2e:37:3e:bf:67:
         ca:db:36:e4:4b:0d:7e:29:a7:bd:87:36:3f:d3:c2:a1:b8:d4:
         38:b7:12:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:51:24 2026 by rpki-client