Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D594/6B01D5C6C41311F0835DDA71C4F9AE02/WQ7DC8ELPV581YJhihmywXBLBRE.mft
File:                     WQ7DC8ELPV581YJhihmywXBLBRE.mft (raw, json)
Hash identifier:          I1y4cxl6Ulg6wCqNvZqM+taaa2aRUsBls6SUG0fOxOM=
Subject key identifier:   AE:F2:96:B9:EF:24:A1:DB:22:9A:FE:F4:A3:B1:1F:F5:F0:B4:6E:80
Authority key identifier: 59:0E:C3:0B:C1:0B:3D:5E:7C:D5:82:61:8A:19:B2:C1:70:4B:05:11
Certificate issuer:       /CN=A919D594/serialNumber=590EC30BC10B3D5E7CD582618A19B2C1704B0511
Certificate serial:       4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ7DC8ELPV581YJhihmywXBLBRE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D594/6B01D5C6C41311F0835DDA71C4F9AE02/WQ7DC8ELPV581YJhihmywXBLBRE.mft
Manifest number:          4A
Signing time:             Sun 05 Apr 2026 07:37:15 +0000
Manifest this update:     Sun 05 Apr 2026 07:37:15 +0000
Manifest next update:     Sun 12 Apr 2026 07:37:15 +0000
Files and hashes:         1: WQ7DC8ELPV581YJhihmywXBLBRE.crl (hash: Sq3CRh5mj616o6ZZMZI03tvvFQtruiu8vNhfo0Sjc58=)
                          2: 61D451B2C41411F097D26439C4F9AE02.roa (hash: 5J05zGqiuT/+vfDhFz2r16F45jTWcRTmOCPn9Z7NfRU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D594/6B01D5C6C41311F0835DDA71C4F9AE02/WQ7DC8ELPV581YJhihmywXBLBRE.crl
                          rsync://rpki.apnic.net/member_repository/A919D594/6B01D5C6C41311F0835DDA71C4F9AE02/WQ7DC8ELPV581YJhihmywXBLBRE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ7DC8ELPV581YJhihmywXBLBRE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 07:37:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D594, serialNumber=590EC30BC10B3D5E7CD582618A19B2C1704B0511
        Validity
            Not Before: Apr  5 07:37:15 2026 GMT
            Not After : Apr 12 07:37:15 2026 GMT
        Subject: CN=69d2112b-1e5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ef:61:4c:de:21:b6:0a:2f:77:95:a3:57:90:
                    77:f7:d2:b0:42:8a:3d:26:ee:21:86:96:e3:8e:b8:
                    a4:1e:04:6d:e7:00:0c:b3:4c:be:1f:b1:cd:a5:8e:
                    58:c1:d2:17:cf:c9:f0:ce:fb:e8:ea:e2:a1:50:a2:
                    07:db:ef:73:af:7e:6f:d8:a0:b3:a7:2a:ba:9a:ac:
                    ee:1d:e9:5f:1f:c8:58:46:99:62:07:d7:7c:71:fe:
                    e1:5a:f1:7b:23:c4:37:00:64:ac:72:56:6b:30:07:
                    42:82:88:3a:07:24:6d:60:4d:e0:b5:3b:13:d6:19:
                    f6:e1:86:62:73:bd:59:01:0d:c9:a0:20:35:17:09:
                    aa:e3:1f:af:33:1f:c0:66:4f:da:ec:fc:3f:e6:c1:
                    f5:8d:d6:04:25:e0:ad:35:25:97:24:a6:f2:9c:ac:
                    67:02:be:ae:44:43:36:9d:a5:f7:33:0a:70:ed:19:
                    b1:29:d3:d6:66:24:3a:83:5e:9c:aa:93:3f:c9:33:
                    4f:43:51:ed:57:d5:21:ca:f7:56:ea:c8:2d:5f:f7:
                    0c:b0:16:97:a2:f7:d4:43:03:8a:9a:cc:12:73:11:
                    d5:53:3a:a3:5d:12:ca:ba:42:d3:7f:49:ff:fe:7b:
                    29:a9:da:ff:39:05:c1:c8:49:0f:e5:fc:34:81:aa:
                    49:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F2:96:B9:EF:24:A1:DB:22:9A:FE:F4:A3:B1:1F:F5:F0:B4:6E:80
            X509v3 Authority Key Identifier:
                keyid:59:0E:C3:0B:C1:0B:3D:5E:7C:D5:82:61:8A:19:B2:C1:70:4B:05:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D594/6B01D5C6C41311F0835DDA71C4F9AE02/WQ7DC8ELPV581YJhihmywXBLBRE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ7DC8ELPV581YJhihmywXBLBRE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D594/6B01D5C6C41311F0835DDA71C4F9AE02/WQ7DC8ELPV581YJhihmywXBLBRE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:fe:1e:8e:f7:66:74:d1:47:a5:d4:8a:38:0b:b5:26:5d:50:
         53:a1:9c:78:5d:67:cd:99:22:66:1a:a9:75:7d:34:a3:0a:9a:
         92:9b:06:3c:40:9b:10:3f:bf:34:09:da:80:73:0a:21:ee:ef:
         82:d7:a1:f9:4e:bd:ce:86:ee:7c:b1:6c:2f:28:e2:a6:72:e6:
         02:ac:4f:5e:dc:75:97:bc:8c:6d:85:37:37:3b:cd:64:4d:8f:
         28:f3:ae:15:fe:a1:e4:56:b0:52:09:3d:7d:1f:30:74:4d:c1:
         b2:a4:e1:af:28:96:9f:a3:1a:7f:95:82:8e:d0:75:9e:d6:34:
         80:ae:af:18:13:08:98:09:24:ee:cc:97:1f:3f:4d:ee:80:cc:
         86:fd:76:4e:56:1a:cc:d7:09:fa:99:d8:18:2f:19:ef:38:7e:
         3d:a3:85:27:f8:0f:15:31:3a:c1:ad:ba:9a:d1:6c:d5:9d:d1:
         cc:1f:dc:c7:49:6f:dd:ee:bc:0e:a9:29:1e:07:08:bc:4f:7a:
         b3:83:8a:b7:96:5b:8f:17:2b:53:29:75:05:33:c2:45:55:fd:
         7f:f3:22:72:4c:ff:6d:30:18:8d:d1:cd:b2:3d:8f:e7:c6:73:
         94:35:f2:a6:26:7e:ac:41:a5:37:13:a0:c1:1f:cc:99:24:3f:
         2f:f0:9c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:42:30 2026 by rpki-client