Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft
File:                     wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft (raw, json)
Hash identifier:          IJdp5VAEAgKrbZGRVw33Gxa5qFBf+lTwDO30SUIwvzw=
Subject key identifier:   99:0C:64:C9:B2:DA:FF:A3:4F:19:3C:C2:A8:A8:F8:60:EE:DA:FA:6D
Authority key identifier: C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1
Certificate issuer:       /CN=A91E54CF/serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1
Certificate serial:       0910
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft
Manifest number:          08F6
Signing time:             Sat 04 Apr 2026 20:09:36 +0000
Manifest this update:     Sat 04 Apr 2026 20:09:35 +0000
Manifest next update:     Sat 11 Apr 2026 20:09:35 +0000
Files and hashes:         1: wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl (hash: ruJj78OleHucYXiSpV0MutwsWRygOj0bRTY4DQ+Jpjk=)
                          2: 12789D14F82E11F09E4CD127396F56BC.roa (hash: 0lQm90IuI3a5EcWOhbRW2oYdVmTwAF33dV4T2vGRc30=)
                          3: 37A30AA2157A11F1B5E2F6BC3D3D8C67.roa (hash: uAPz3oqpyV8H/ba3OsJeuX8/ZXubOJrKDa3EJe/hGAk=)
                          4: C2D58A40182311F1A32496671A3D8C67.roa (hash: Vjii/cMW7dxLjA293RnTQH1E8e35be6igTOo7WebE5o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl
                          rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 20:09:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2320 (0x910)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E54CF, serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1
        Validity
            Not Before: Apr  4 20:09:35 2026 GMT
            Not After : Apr 11 20:09:35 2026 GMT
        Subject: CN=69d17000-5976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3b:47:43:dd:21:e7:60:7c:55:5d:78:44:c9:
                    8e:3a:0a:fa:b6:a0:51:e0:69:c2:24:86:de:e5:98:
                    6b:5b:fe:75:1b:b8:03:a3:0a:11:60:14:0d:e9:b1:
                    9f:2b:f9:0b:7a:2d:4f:36:dc:3b:3b:ba:fd:bd:60:
                    20:37:b6:29:f1:5d:35:06:35:c4:98:81:6d:52:4b:
                    78:f3:2c:75:52:0d:64:e5:eb:1c:5f:13:a4:fd:b5:
                    1d:05:8c:76:7a:2b:40:8e:89:78:4b:dd:5a:b7:df:
                    0b:8e:5f:bc:42:dc:1a:74:4f:1a:c3:67:4a:97:ad:
                    03:55:55:2f:9f:62:11:5a:c2:73:7a:55:78:72:b8:
                    c1:3c:b5:05:2a:95:00:b0:09:9e:e9:fe:48:38:5a:
                    04:3b:01:e4:42:84:bf:3e:a0:b5:42:5c:46:8a:48:
                    e4:95:c1:f5:a6:1f:a2:08:29:21:1f:f7:01:78:31:
                    88:33:e7:e4:03:c2:85:0d:18:ee:82:09:85:eb:66:
                    96:f2:fc:68:02:57:c8:86:46:9f:40:e6:69:38:4e:
                    71:fb:b5:88:3d:65:67:88:15:6a:c1:0e:2d:ce:bf:
                    86:98:9a:39:4e:34:46:49:ad:f9:39:d9:2f:80:a1:
                    31:0e:83:17:3b:67:1a:3b:87:69:62:63:12:b1:2f:
                    fa:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:0C:64:C9:B2:DA:FF:A3:4F:19:3C:C2:A8:A8:F8:60:EE:DA:FA:6D
            X509v3 Authority Key Identifier:
                keyid:C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:33:17:67:48:4d:f9:f8:c2:d5:d6:6b:c9:b4:68:04:6e:69:
         c4:6b:ae:28:70:f5:db:31:c5:39:bb:45:4d:5d:0e:75:6a:d0:
         30:14:fe:e6:c8:39:7a:36:82:55:64:c2:33:db:99:e0:d6:aa:
         c5:2d:25:ed:d3:05:a3:59:d4:91:67:b6:ae:86:73:5c:43:e8:
         93:76:1f:2c:92:9f:93:d7:f9:2c:6f:a1:a2:d1:42:5d:c7:58:
         35:ac:5e:e9:d1:6e:60:11:8c:08:f8:69:df:c5:09:11:ed:c4:
         83:0e:a3:0c:e8:7d:e3:82:b3:5d:57:54:65:62:b3:2b:25:23:
         8f:59:23:6d:f4:5c:4d:25:27:82:c6:18:f9:a4:1a:98:67:57:
         a0:85:d0:59:77:d2:8b:ca:b8:18:04:2e:00:60:24:9d:c0:d9:
         71:a6:da:1a:63:28:3f:32:2b:47:f8:c0:a4:63:48:59:d7:08:
         74:60:e1:9e:ac:66:0b:8b:8c:a9:d6:dc:07:d6:ba:19:01:9f:
         36:d0:cc:a3:f4:24:c8:04:53:e8:04:2c:5c:51:9f:51:47:17:
         25:4d:fa:c2:8a:2d:67:f3:07:ed:83:8b:6b:08:65:b6:82:03:
         a2:8a:0c:91:4f:a3:51:e4:82:e2:a9:63:0c:b6:80:a5:2a:ba:
         f6:db:40:00
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCRAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTU0Q0YxMTAvBgNVBAUTKEMxQkVDRjk3Q0E5NUUwNkRDMDZFMDBDMjM5RjYyQ0M2
OTQyNDE2RDEwHhcNMjYwNDA0MjAwOTM1WhcNMjYwNDExMjAwOTM1WjAYMRYwFAYD
VQQDEw02OWQxNzAwMC01OTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtztHQ90h52B8VV14RMmOOgr6tqBR4GnCJIbe5ZhrW/51G7gDowoRYBQN6bGf
K/kLei1PNtw7O7r9vWAgN7Yp8V01BjXEmIFtUkt48yx1Ug1k5escXxOk/bUdBYx2
eitAjol4S91at98Ljl+8QtwadE8aw2dKl60DVVUvn2IRWsJzelV4crjBPLUFKpUA
sAme6f5IOFoEOwHkQoS/PqC1QlxGikjklcH1ph+iCCkhH/cBeDGIM+fkA8KFDRju
ggmF62aW8vxoAlfIhkafQOZpOE5x+7WIPWVniBVqwQ4tzr+GmJo5TjRGSa35Odkv
gKExDoMXO2caO4dpYmMSsS/6JwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJkMZMmy
2v+jTxk8wqio+GDu2vptMB8GA1UdIwQYMBaAFMG+z5fKleBtwG4Awjn2LMaUJBbR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTRDRi9EOEYzQUNBQ0ND
OEYxMUVBQkMxRjE0NDJDNEY5QUUwMi93YjdQbDhxVjRHM0FiZ0RDT2ZZc3hwUWtG
dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3diN1BsOHFWNEczQWJnRENPZllzeHBRa0Z0RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NTRDRi9EOEYzQUNBQ0NDOEYxMUVBQkMxRjE0NDJDNEY5QUUwMi93YjdQbDhxVjRH
M0FiZ0RDT2ZZc3hwUWtGdEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADDMXZ0hN+fjC1dZrybRoBG5pxGuuKHD12zHFObtFTV0OdWrQMBT+5sg5ejaC
VWTCM9uZ4NaqxS0l7dMFo1nUkWe2roZzXEPok3YfLJKfk9f5LG+hotFCXcdYNaxe
6dFuYBGMCPhp38UJEe3Egw6jDOh944KzXVdUZWKzKyUjj1kjbfRcTSUngsYY+aQa
mGdXoIXQWXfSi8q4GAQuAGAkncDZcabaGmMoPzIrR/jApGNIWdcIdGDhnqxmC4uM
qdbcB9a6GQGfNtDMo/QkyART6AQsXFGfUUcXJU36wootZ/MH7YOLawhltoIDoooM
kU+jUeSC4qljDLaApSq69ttAAA==
-----END CERTIFICATE-----
Generated at Sun Apr 5 19:58:12 2026 by rpki-client