Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.mft
File:                     wsFz12JIhbwL1vwZPvvO6VQ_okM.mft (raw, json)
Hash identifier:          mLMI1wIvyCEFSLmcu1vJHQzY/GYtcmBreXZsPH+yITA=
Subject key identifier:   E2:2A:A1:34:9C:FC:F7:AA:41:CF:5A:C2:9C:39:F8:DC:34:3D:35:6F
Authority key identifier: C2:C1:73:D7:62:48:85:BC:0B:D6:FC:19:3E:FB:CE:E9:54:3F:A2:43
Certificate issuer:       /CN=A91C8DF1/serialNumber=C2C173D7624885BC0BD6FC193EFBCEE9543FA243
Certificate serial:       5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsFz12JIhbwL1vwZPvvO6VQ_okM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.mft
Manifest number:          5B
Signing time:             Sun 05 Apr 2026 07:25:40 +0000
Manifest this update:     Sun 05 Apr 2026 07:25:39 +0000
Manifest next update:     Sun 12 Apr 2026 07:25:39 +0000
Files and hashes:         1: wsFz12JIhbwL1vwZPvvO6VQ_okM.crl (hash: cArMnYl8Ma5W+gSihrVSytejkj1k/ayQAyc5ubiamH4=)
                          2: BD37307CAAD011F0ACA9F95DC4F9AE02.roa (hash: Pzx4cLp6LQnYJAZ7Og6n8jVJWupopojg1hWD2Hxu8W4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.crl
                          rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsFz12JIhbwL1vwZPvvO6VQ_okM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 07:25:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8DF1, serialNumber=C2C173D7624885BC0BD6FC193EFBCEE9543FA243
        Validity
            Not Before: Apr  5 07:25:39 2026 GMT
            Not After : Apr 12 07:25:39 2026 GMT
        Subject: CN=69d20e73-0c4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d7:e8:c1:8d:7b:46:98:6e:67:e5:d5:e9:16:
                    05:3a:6c:6d:91:8d:7f:89:bd:e1:37:35:e5:0e:38:
                    73:49:18:40:2e:13:34:51:23:06:97:42:b3:40:ff:
                    de:ce:43:fe:65:e2:6a:e3:3e:ae:2c:c0:e4:e8:59:
                    6e:98:13:df:81:98:00:51:00:1e:5a:a5:e9:c1:04:
                    e7:01:d5:ea:bf:2c:20:16:09:cc:d2:39:74:ab:23:
                    ff:1e:9c:4f:7a:39:11:e7:7e:f3:a3:62:f1:f4:7e:
                    4b:bf:e7:69:f4:97:fa:ed:90:79:55:be:df:23:cf:
                    b4:a6:cb:6b:c6:c8:6c:64:af:4c:74:c1:5d:92:c5:
                    94:f5:41:9e:df:ae:75:2b:18:4f:9d:21:9f:bf:7b:
                    57:f7:b2:8c:e1:1b:bd:5e:91:36:52:bb:d9:d9:f0:
                    33:32:fa:54:5b:b4:2a:c0:dd:a9:d4:cd:e6:2c:ed:
                    e1:ac:f2:d3:d5:f3:4a:7d:2f:bb:d5:23:ff:5f:56:
                    ce:83:30:5b:99:04:1e:3f:e9:f2:69:70:3b:1e:36:
                    b2:d5:29:fd:4f:d4:ab:29:81:f0:85:0d:04:69:29:
                    3d:b7:fd:d3:86:5c:c9:92:41:9c:76:1d:f9:d3:b5:
                    e6:98:f3:9f:1c:51:15:3b:7d:fd:05:57:46:eb:a9:
                    24:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:2A:A1:34:9C:FC:F7:AA:41:CF:5A:C2:9C:39:F8:DC:34:3D:35:6F
            X509v3 Authority Key Identifier:
                keyid:C2:C1:73:D7:62:48:85:BC:0B:D6:FC:19:3E:FB:CE:E9:54:3F:A2:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsFz12JIhbwL1vwZPvvO6VQ_okM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:c9:4d:f9:e2:3a:4f:74:a0:60:55:71:33:98:41:53:53:37:
         98:b8:e9:a3:63:54:85:e3:39:b9:31:59:a6:9f:20:ec:00:ea:
         0f:ed:6b:0d:0e:b5:75:03:0c:fb:4a:25:47:b2:e5:01:4a:01:
         59:d0:b2:eb:ad:35:42:51:3a:92:c6:40:32:3d:15:24:b2:fb:
         a8:28:75:d8:36:81:bd:dc:6a:fb:32:04:0b:fc:fc:96:ac:bd:
         4a:67:af:54:45:a1:78:ea:77:d5:58:bb:38:dd:bd:8f:d5:98:
         f2:46:2b:0c:7c:2c:c6:25:83:ea:02:d4:d1:9f:be:75:cc:52:
         1c:14:2e:ac:3b:b3:1a:a2:be:63:75:c5:56:83:f6:a5:da:8f:
         03:b0:76:cc:3f:77:71:32:68:68:4e:89:96:2d:1a:f1:4e:8c:
         84:17:e3:78:94:ad:25:20:ef:4e:6f:8c:14:db:cf:cd:1a:8a:
         b6:5e:46:0d:87:b7:a2:1b:1c:da:c7:cd:16:6f:fb:8a:6b:9d:
         fc:f3:8c:29:2b:a6:bf:7d:60:0a:90:f3:d6:63:b6:8c:99:7b:
         d0:16:3f:27:4f:53:39:06:9d:cd:d9:d8:10:12:38:8d:42:cd:
         87:57:3b:97:39:2f:d2:2e:80:92:18:a2:da:fa:fc:46:17:c0:
         b8:84:7e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:57:55 2026 by rpki-client