Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft
File:                     WYxfzqVVrllcyel2HA-y3q6kRR8.mft (raw, json)
Hash identifier:          wKvp4hA4OmaC2O4ehasCADUszDZKVqyOwHqob7IwLoQ=
Subject key identifier:   5C:56:2F:BD:6A:82:70:8D:03:CA:16:65:00:E5:50:0C:6B:7C:AB:E7
Authority key identifier: 59:8C:5F:CE:A5:55:AE:59:5C:C9:E9:76:1C:0F:B2:DE:AE:A4:45:1F
Certificate issuer:       /CN=A91FB880/serialNumber=598C5FCEA555AE595CC9E9761C0FB2DEAEA4451F
Certificate serial:       0255
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft
Manifest number:          024F
Signing time:             Wed 13 May 2026 02:23:39 +0000
Manifest this update:     Wed 13 May 2026 02:23:38 +0000
Manifest next update:     Wed 20 May 2026 02:23:38 +0000
Files and hashes:         1: WYxfzqVVrllcyel2HA-y3q6kRR8.crl (hash: eov7lDQxLOofUbZGiuHDomfA2xPpsPHw9eCAWkY+1Fw=)
                          2: 50A5B1ACC75911EDBFF7200BC4F9AE02.roa (hash: 8F41x2fmLZ5M8u7RlY+aL2kU1d0Mkh7PiR5sgAseHxg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.crl
                          rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 02:23:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 597 (0x255)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB880, serialNumber=598C5FCEA555AE595CC9E9761C0FB2DEAEA4451F
        Validity
            Not Before: May 13 02:23:38 2026 GMT
            Not After : May 20 02:23:38 2026 GMT
        Subject: CN=6a03e0ab-7a6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ca:3f:d0:fb:7e:b0:d9:dd:3d:9b:85:1f:b0:
                    12:a8:2a:a1:14:3e:33:b7:32:61:08:c4:3b:91:90:
                    d3:9a:e1:d8:a3:9a:10:76:a2:6e:18:0a:e3:f7:cb:
                    cb:b0:23:34:cd:cf:39:d4:88:7c:5c:ce:16:aa:92:
                    d0:6c:42:ee:03:74:b0:12:a6:08:ee:e6:0e:fd:d1:
                    44:1f:db:15:b1:28:72:a1:3f:6a:67:6c:90:bd:76:
                    c4:c6:cd:7e:2a:ae:01:ca:0b:06:97:61:0a:6d:2a:
                    33:3e:33:ec:69:6a:ba:82:e9:79:3f:72:a4:15:67:
                    da:b1:90:99:28:31:28:29:f2:e9:fd:99:d8:55:66:
                    28:44:b6:1a:aa:37:a7:9f:b8:27:0b:19:c6:af:35:
                    6d:78:da:81:89:2e:f2:ab:03:c6:02:e4:07:86:93:
                    3f:98:e1:dd:58:0c:25:f8:6b:2d:9b:26:6d:60:ea:
                    70:3a:46:53:c8:6d:b7:a1:48:92:fb:61:7d:2f:73:
                    66:b0:fb:02:9d:a0:1f:39:7a:f1:c7:59:fd:e6:28:
                    03:21:da:4e:56:8b:50:54:f2:dd:86:3d:c7:86:41:
                    68:d4:2f:c6:ea:22:27:c8:5e:85:46:35:a7:d3:78:
                    cb:14:7a:38:3c:06:68:39:d9:48:32:29:37:3f:da:
                    41:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:56:2F:BD:6A:82:70:8D:03:CA:16:65:00:E5:50:0C:6B:7C:AB:E7
            X509v3 Authority Key Identifier:
                keyid:59:8C:5F:CE:A5:55:AE:59:5C:C9:E9:76:1C:0F:B2:DE:AE:A4:45:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:9a:79:9c:7c:78:94:13:04:49:9a:8e:89:61:15:01:ba:7c:
         3e:d3:d8:de:ef:ea:b4:ae:34:b0:7b:30:3c:bc:c4:12:ad:60:
         fe:15:7b:86:3d:82:79:49:99:52:8b:a6:1a:23:f4:af:0f:0f:
         ba:49:f4:b0:a0:2c:60:c6:29:36:4f:86:83:3f:53:5d:f7:44:
         37:66:37:4f:f0:9d:12:be:f5:7f:c2:d9:a3:d4:bf:1f:f4:9f:
         d1:84:45:e9:d6:ed:97:d4:c3:c4:c5:68:64:31:4c:2c:58:50:
         c9:01:4a:5a:47:e5:ef:4e:96:6f:61:09:49:c5:3e:9b:f3:c3:
         60:8c:51:18:3a:b8:5d:17:36:73:37:f4:fe:50:f7:af:84:6b:
         a7:54:cc:34:bf:fb:38:f4:12:2d:3d:05:8a:1d:64:5a:16:3e:
         87:95:59:33:a1:f2:cb:ab:53:ad:dc:aa:7a:3a:58:d0:9d:1c:
         47:c9:35:40:72:dc:e7:20:7c:36:9d:d3:a1:de:6b:3f:2c:71:
         05:74:fd:49:e9:07:ab:cf:67:e2:bd:08:e6:b0:49:da:3e:2b:
         6e:80:3c:9f:09:63:e9:c7:8c:b5:b0:33:0b:0d:2f:21:9c:37:
         7c:b2:18:06:35:cc:c3:a4:0f:2e:3e:95:22:93:91:41:e2:99:
         21:74:a8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:45:36 2026 by rpki-client