Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft
File:                     Wsl8kSmaL6nIztiqxnD_78e2mhs.mft (raw, json)
Hash identifier:          BBscizSYwzdkkbv7AtfAvGlOZk3JZZfQABHjgBwi1CM=
Subject key identifier:   AB:00:D4:21:A1:4A:04:CC:AB:90:7F:75:D2:0F:75:17:B8:23:FA:AC
Authority key identifier: 5A:C9:7C:91:29:9A:2F:A9:C8:CE:D8:AA:C6:70:FF:EF:C7:B6:9A:1B
Certificate issuer:       /CN=A91F3260/serialNumber=5AC97C91299A2FA9C8CED8AAC670FFEFC7B69A1B
Certificate serial:       0745
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft
Manifest number:          072E
Signing time:             Tue 24 Mar 2026 21:32:29 +0000
Manifest this update:     Tue 24 Mar 2026 21:32:29 +0000
Manifest next update:     Tue 31 Mar 2026 21:32:29 +0000
Files and hashes:         1: Wsl8kSmaL6nIztiqxnD_78e2mhs.crl (hash: 5hf+yAkKBNb2QRZq32Q/2LgY9vcp1sHtExvnn+ZF0XE=)
                          2: C5058712A3B911EC9709462AC4F9AE02.roa (hash: TbGbT+LPow5rz8JGgfsHT1Q0vL5d/bm4eFUkOIio6DA=)
                          3: 36F318D0890A11EE9F4C014DC4F9AE02.roa (hash: cxuC5mt/lZwqNGffF4CA11kwoRK1UHDLlLVN+mB5XQU=)
                          4: 8B75957671A811EB8698AD67C4F9AE02.roa (hash: 7rQsxODOe8S8wCpj2cJIytKVy/MVPp6W4O54/79yfuw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.crl
                          rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:32:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1861 (0x745)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3260, serialNumber=5AC97C91299A2FA9C8CED8AAC670FFEFC7B69A1B
        Validity
            Not Before: Mar 24 21:32:29 2026 GMT
            Not After : Mar 31 21:32:29 2026 GMT
        Subject: CN=69c302ed-24c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ce:c8:db:b4:a7:7d:b9:da:29:73:d8:e2:5c:
                    2d:b9:b5:71:84:41:e7:ef:a9:0e:09:e0:4e:f6:3a:
                    7a:86:11:f8:1f:fb:07:af:7f:a0:c1:1f:45:c8:94:
                    59:01:67:24:e4:1d:57:ed:d3:db:0e:b9:66:50:3f:
                    0c:d8:2a:01:f8:5d:56:da:90:32:cc:d5:8a:02:20:
                    7a:9f:86:e9:af:e2:1e:9b:43:9b:57:4d:7b:f9:51:
                    23:e5:a3:5e:c8:42:3e:56:65:3c:f0:db:4a:4c:c0:
                    f1:c0:da:2b:55:21:35:50:00:81:0d:d5:b9:dd:1a:
                    dc:c5:ec:4e:cc:dc:d5:56:95:60:0c:50:61:3e:cb:
                    fc:37:6a:0d:d5:e1:83:75:05:16:22:83:2c:5b:95:
                    fc:03:84:ae:bd:9d:55:83:a9:2b:88:c4:23:be:06:
                    38:74:9e:e2:9a:fc:69:8c:81:6a:c8:7b:3b:04:b1:
                    04:28:cc:c0:b5:f2:92:e5:00:c5:23:66:8e:f5:fb:
                    3a:1d:df:3f:f9:b8:aa:c1:1c:b2:81:fb:c7:05:a5:
                    af:4a:a6:f0:c8:c1:85:2e:eb:9d:71:53:6b:43:37:
                    f3:77:e8:06:11:a0:f4:b4:cf:1d:f0:87:80:49:51:
                    58:1a:ec:52:b9:7a:e1:95:4b:7d:99:f6:56:de:1a:
                    70:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:00:D4:21:A1:4A:04:CC:AB:90:7F:75:D2:0F:75:17:B8:23:FA:AC
            X509v3 Authority Key Identifier:
                keyid:5A:C9:7C:91:29:9A:2F:A9:C8:CE:D8:AA:C6:70:FF:EF:C7:B6:9A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:72:7a:68:f5:40:31:62:79:f3:4c:53:55:99:6d:b6:09:ca:
         80:18:4c:fd:4c:f9:d7:d8:36:b0:7a:82:3e:e5:72:39:1d:7a:
         2d:55:3b:3b:30:6c:2d:52:f0:79:5e:ba:6c:58:4c:c0:74:2a:
         de:2c:49:26:63:fe:72:3f:44:cb:14:ca:ec:35:b8:a7:61:62:
         ab:a6:63:91:1f:88:58:14:2b:a6:7d:67:dd:fe:eb:d7:0c:03:
         fd:26:c3:a9:55:7f:e8:c0:16:06:f3:6b:1e:a2:bf:70:36:86:
         7c:b2:42:91:48:7f:b6:df:27:6a:9e:73:b4:76:bf:2a:ad:d1:
         71:21:4b:b4:ba:80:6c:84:9e:ea:19:76:de:9c:ab:4d:7b:9a:
         8d:f0:e5:9e:34:f0:a0:74:99:64:d2:02:d8:9c:1e:41:87:84:
         a1:67:39:58:bc:47:68:5e:ea:d3:a4:a3:c7:a6:89:40:21:c2:
         96:38:71:9c:ec:6c:86:e1:41:57:83:e0:8d:00:72:4c:da:ef:
         af:61:ae:e8:75:17:02:4c:20:96:09:13:2e:98:a0:33:c5:28:
         3d:6b:54:59:2a:a0:d6:57:25:ea:c3:d9:48:70:50:37:b8:b3:
         e7:c8:91:be:3c:73:c8:ca:fe:b5:d8:2e:93:3b:ea:a3:86:b3:
         90:e4:c3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:58:05 2026 by rpki-client