Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.mft
File:                     WothvFOjJNeitPQVPQd0bsKjNdI.mft (raw, json)
Hash identifier:          M5oaNsH9B0Pr3RJyQunXFQcKl9vH9dVCo9uBWfvo22Y=
Subject key identifier:   31:69:93:48:81:C7:81:E8:86:11:24:7F:09:D0:D8:2C:05:A6:03:49
Authority key identifier: 5A:8B:61:BC:53:A3:24:D7:A2:B4:F4:15:3D:07:74:6E:C2:A3:35:D2
Certificate issuer:       /CN=A9173D12/serialNumber=5A8B61BC53A324D7A2B4F4153D07746EC2A335D2
Certificate serial:       015E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.mft
Manifest number:          013D
Signing time:             Sun 05 Apr 2026 04:46:40 +0000
Manifest this update:     Sun 05 Apr 2026 04:46:40 +0000
Manifest next update:     Sun 12 Apr 2026 04:46:40 +0000
Files and hashes:         1: WothvFOjJNeitPQVPQd0bsKjNdI.crl (hash: qDug2r2VGkHbP+q7AGk4RmcbjLUhMJSLiBmBG8IEaEU=)
                          2: AEDDE1EE556B11EFA5FB1569C4F9AE02.roa (hash: ythUy6jha8ZpiLWstgCdl1/wIV+MID0Znxjj8d0P078=)
                          3: AE51756A556B11EFA5FB1569C4F9AE02.roa (hash: OXZUA/R674i71lZEtBVgVcJtlxJ6yaOTGWgOVRPEFYs=)
                          4: 014A2E90BC5C11EF9108934FC4F9AE02.roa (hash: 5mI5iLsJ/T2fZGeMI3zRSHtjx0hZAzxh+aJrfrQ7jGE=)
                          5: 02A3523ABC5C11EF9108934FC4F9AE02.roa (hash: 5JXzFCyibCyq2fa3F79OvI6v/hGcm9VVM6RcX/Kchp4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.crl
                          rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 04:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 350 (0x15e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173D12, serialNumber=5A8B61BC53A324D7A2B4F4153D07746EC2A335D2
        Validity
            Not Before: Apr  5 04:46:40 2026 GMT
            Not After : Apr 12 04:46:40 2026 GMT
        Subject: CN=69d1e930-dcdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a4:41:a1:14:86:3a:9b:92:01:2e:8d:88:2e:
                    14:db:ea:3a:e6:8a:44:59:23:48:40:3a:e1:83:b5:
                    5b:3e:81:41:bd:a9:70:58:6b:1a:15:96:f3:71:10:
                    98:2a:59:8a:f8:19:ea:da:65:8d:4e:9b:fd:b3:25:
                    ff:32:1d:ac:d2:51:d6:e6:a9:1b:4b:22:ea:ba:12:
                    3a:90:ef:a3:5a:77:0d:59:25:69:cc:73:b0:f2:b9:
                    5f:ff:c1:b9:1d:40:6f:c1:e9:45:93:6f:21:d0:8f:
                    e9:28:cf:08:f1:76:1a:50:39:f2:24:a8:a0:3b:24:
                    ea:f0:d9:d1:eb:22:ff:1c:43:dc:c5:78:a7:6b:d5:
                    d0:42:94:a7:8e:b7:cb:3b:eb:da:a2:03:31:89:2a:
                    55:be:f0:d1:14:25:d3:d3:c5:30:8f:44:f9:35:0f:
                    08:53:f0:d7:5b:0f:b9:9c:59:fe:e8:3f:57:72:3a:
                    57:d1:1a:f4:1b:9b:27:c4:35:db:cf:9a:86:7f:b7:
                    5c:a4:f7:20:92:2c:11:03:e1:e5:1c:bd:21:a3:2b:
                    f7:16:f0:b4:5b:22:2c:79:50:1b:4a:f1:de:c5:ed:
                    05:7d:9d:03:b4:be:51:f5:8a:92:20:ab:5b:23:27:
                    1b:56:f9:0e:ad:d5:2e:70:46:49:86:ba:16:5c:f6:
                    d7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:69:93:48:81:C7:81:E8:86:11:24:7F:09:D0:D8:2C:05:A6:03:49
            X509v3 Authority Key Identifier:
                keyid:5A:8B:61:BC:53:A3:24:D7:A2:B4:F4:15:3D:07:74:6E:C2:A3:35:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:9a:de:27:ce:d8:9e:3a:5f:32:90:3f:cf:11:eb:6d:1e:02:
         3f:90:c6:6f:64:77:25:4b:c2:a4:ac:28:73:d0:a2:cd:ba:65:
         39:f2:50:ae:85:3d:b4:94:ee:44:bd:21:79:b0:e0:5a:01:7f:
         2e:86:05:e4:5f:ee:b2:83:70:f4:f4:af:92:b8:c4:14:6c:d6:
         68:9b:da:f2:3a:ea:01:31:21:76:6d:be:5f:16:f7:ec:a2:7c:
         de:af:17:87:50:c0:24:1d:bd:d0:69:f1:44:46:62:8f:bb:77:
         10:50:82:8f:54:a9:8a:be:8a:3e:ef:b9:c9:a7:90:91:40:9c:
         35:d9:6b:cb:95:a0:16:db:a2:a0:b9:ff:e0:6d:5d:d3:28:10:
         9a:b1:c2:1a:79:02:61:27:f1:bb:68:3f:09:3d:63:47:48:af:
         69:45:a1:7c:5f:c8:64:6c:8c:3b:b9:b1:4b:5f:51:e5:30:d4:
         d2:22:7a:a1:e6:8b:af:86:c0:f5:89:95:19:f3:21:54:59:7a:
         46:f3:20:95:e6:8b:24:fc:56:71:2f:72:4d:e8:cd:c7:7b:28:
         e6:1c:b3:95:99:e5:83:88:24:db:e3:5f:33:a7:e1:8d:8b:57:
         c0:b2:57:98:30:d3:da:4b:e6:cf:ce:6c:cb:51:4b:ef:a7:80:
         92:24:fa:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:59:02 2026 by rpki-client