Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft
File:                     wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft (raw, json)
Hash identifier:          cV1KXe42UBbua1Y0NvM2graugl4D/itftGJ/Kvn5HqY=
Subject key identifier:   26:D0:3A:38:A5:BE:FC:7C:92:00:ED:5E:D9:CC:C7:7E:22:C9:E2:BE
Authority key identifier: C0:30:56:F6:80:99:64:7A:F7:58:5E:53:F6:A9:8E:CF:F3:D9:88:DF
Certificate issuer:       /CN=A911EB2D/serialNumber=C03056F68099647AF7585E53F6A98ECFF3D988DF
Certificate serial:       0957
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDBW9oCZZHr3WF5T9qmOz_PZiN8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft
Manifest number:          0A60
Signing time:             Sat 04 Apr 2026 20:00:24 +0000
Manifest this update:     Sat 04 Apr 2026 20:00:23 +0000
Manifest next update:     Sat 11 Apr 2026 20:00:23 +0000
Files and hashes:         1: wDBW9oCZZHr3WF5T9qmOz_PZiN8.crl (hash: s3zKt1273WIar0Cr+XLtmsxcv7+yvW+wJ9cqfMmH3cU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.crl
                          rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDBW9oCZZHr3WF5T9qmOz_PZiN8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 20:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2391 (0x957)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911EB2D, serialNumber=C03056F68099647AF7585E53F6A98ECFF3D988DF
        Validity
            Not Before: Apr  4 20:00:23 2026 GMT
            Not After : Apr 11 20:00:23 2026 GMT
        Subject: CN=69d16dd7-62f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cf:e4:7e:17:8d:2a:8f:99:df:1d:9a:a4:d4:
                    62:75:f7:fb:93:a4:fb:01:47:f4:0a:9d:c5:2d:52:
                    8b:b1:03:c0:14:cc:73:74:9c:a0:22:e5:76:a1:14:
                    da:1a:9e:f7:d7:cf:a0:b4:f3:4f:bf:60:c8:ca:2a:
                    63:9f:45:b8:40:b9:af:ea:44:8e:d4:d4:89:e4:19:
                    96:86:00:a1:2b:65:82:e7:c7:d7:21:50:54:f8:19:
                    6b:8f:1c:60:b1:a9:61:e2:c1:ba:fd:44:94:3c:74:
                    7e:f1:b8:0c:eb:77:9b:2f:ad:57:94:2b:df:16:f9:
                    74:05:f9:b7:18:05:c3:99:c4:c6:2a:33:03:c8:57:
                    4b:b5:fa:b9:20:68:cf:76:4c:4b:9f:b1:b0:a9:50:
                    dd:f3:c3:77:17:83:7b:cf:df:35:57:eb:41:ae:0f:
                    51:a4:14:ce:91:24:7d:4b:d2:69:b2:90:37:71:9a:
                    d5:36:7c:88:94:1b:ae:7c:2f:30:fd:50:bc:c7:2a:
                    81:3d:0b:1f:b1:4d:f6:dd:51:42:e4:f9:56:56:3f:
                    4b:a0:38:d9:12:74:e3:06:7f:80:db:83:49:36:9a:
                    d4:4d:4d:37:3d:01:51:ff:aa:c5:de:52:f3:c6:db:
                    e8:0b:20:77:7f:91:43:8e:6a:0f:f9:bf:9d:7e:17:
                    bc:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:D0:3A:38:A5:BE:FC:7C:92:00:ED:5E:D9:CC:C7:7E:22:C9:E2:BE
            X509v3 Authority Key Identifier:
                keyid:C0:30:56:F6:80:99:64:7A:F7:58:5E:53:F6:A9:8E:CF:F3:D9:88:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDBW9oCZZHr3WF5T9qmOz_PZiN8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:36:80:24:47:94:73:25:4b:64:64:a2:c6:ee:c4:c0:89:b9:
         e2:49:95:f3:ae:ca:9f:c8:e7:54:97:bf:7f:90:f4:a7:3a:33:
         6c:31:f7:40:9a:91:ac:38:8e:84:a7:92:57:80:81:9e:b9:70:
         b7:0d:30:96:0d:88:34:fa:b8:90:ee:29:1f:2c:fc:5a:84:a0:
         9b:ef:ec:dd:79:c1:a8:6a:2e:22:ac:e9:cf:62:89:ad:8c:36:
         1e:db:10:28:d1:ee:bf:dd:57:cf:68:a9:4f:8b:fd:3b:ba:d5:
         3f:21:05:dd:46:51:90:c6:db:18:98:9f:d3:b2:fd:dd:64:6e:
         95:7f:8a:cf:e6:01:8e:b5:83:e1:91:9a:62:d7:f4:8f:1a:d6:
         7b:eb:d2:67:a8:f6:58:db:f5:e1:98:cc:ad:ae:87:0e:50:8a:
         32:fe:44:a3:5e:d8:68:7f:c7:60:eb:e5:a3:1b:6e:65:64:b8:
         dd:61:8c:a5:45:56:bf:3c:2c:76:f3:e2:0a:48:35:cb:68:aa:
         bc:85:7a:be:ae:fd:e8:29:90:3b:83:85:5d:98:14:b8:81:29:
         a9:98:3e:37:c0:33:81:fa:a3:d5:1d:42:79:ae:b9:d9:9d:63:
         59:6f:ea:d4:e9:d7:41:da:6b:10:cf:77:00:37:cd:d5:f0:9b:
         18:52:d6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:01:22 2026 by rpki-client