Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft
File:                     wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft (raw, json)
Hash identifier:          hc2Y+c+HS3vA+okCjUh956lkp8NVl86mTTgjolWEWYE=
Subject key identifier:   6F:F8:4F:C1:45:88:7A:0E:CB:B4:32:25:12:A3:20:ED:68:18:3A:88
Authority key identifier: C0:AE:F6:25:AF:9D:50:4A:E8:47:F6:92:3D:A8:91:06:9C:90:03:F4
Certificate issuer:       /CN=A9111D36/serialNumber=C0AEF625AF9D504AE847F6923DA891069C9003F4
Certificate serial:       0277
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK72Ja-dUEroR_aSPaiRBpyQA_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft
Manifest number:          026E
Signing time:             Sun 19 Apr 2026 01:54:16 +0000
Manifest this update:     Sun 19 Apr 2026 01:54:16 +0000
Manifest next update:     Sun 26 Apr 2026 01:54:16 +0000
Files and hashes:         1: wK72Ja-dUEroR_aSPaiRBpyQA_Q.crl (hash: 0hhQdttwm3TfWW/bu+pHQKFTftngu1cQvHSlQfTWVm4=)
                          2: 949A543291B011EDA9CB747CC4F9AE02.roa (hash: PkOsF2hTQSh3buTiKCZldxs2u/9datFbcXQ9jZ+jT/0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.crl
                          rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK72Ja-dUEroR_aSPaiRBpyQA_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 01:54:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 631 (0x277)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111D36, serialNumber=C0AEF625AF9D504AE847F6923DA891069C9003F4
        Validity
            Not Before: Apr 19 01:54:16 2026 GMT
            Not After : Apr 26 01:54:16 2026 GMT
        Subject: CN=69e435c8-0e4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6f:5e:b1:6c:5a:7b:99:a3:53:79:70:a0:53:
                    88:1d:75:c8:fa:58:fc:86:ce:bd:e2:4f:e0:28:6b:
                    45:a1:8c:d6:53:ca:06:b1:7a:44:a5:17:1b:b4:2b:
                    ad:42:8f:7c:92:39:ee:84:fc:95:f0:95:4c:0c:95:
                    3d:54:71:42:75:d0:3d:82:8f:4c:21:7b:fc:21:18:
                    e5:95:77:b5:77:eb:c8:a6:ab:47:11:30:0b:c0:67:
                    cf:18:e3:16:13:64:74:8f:a4:34:47:e9:ec:24:51:
                    2b:be:9a:21:df:a0:5c:e5:0e:2f:d2:84:be:d0:23:
                    50:92:5b:64:64:80:76:10:76:59:d0:07:2d:96:81:
                    6a:19:ad:c4:d2:bb:54:ea:50:c7:5a:1d:93:7e:dc:
                    39:af:92:76:a3:7c:e9:66:8f:1d:47:98:6b:b1:b2:
                    c0:60:95:de:b9:15:b3:00:60:25:f5:68:ac:a8:73:
                    27:79:31:34:c9:f9:d3:84:10:7e:c7:77:7a:c0:2d:
                    fc:31:ed:0c:91:b2:9b:68:29:44:a6:3e:78:91:73:
                    cf:54:df:a3:c5:a1:4a:b7:34:52:ad:cc:77:29:ae:
                    fc:7e:8c:b0:2e:ae:7b:d3:20:a0:09:76:c6:3b:e9:
                    35:24:7c:02:96:f3:b2:2e:54:53:47:e2:81:62:42:
                    8d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:F8:4F:C1:45:88:7A:0E:CB:B4:32:25:12:A3:20:ED:68:18:3A:88
            X509v3 Authority Key Identifier:
                keyid:C0:AE:F6:25:AF:9D:50:4A:E8:47:F6:92:3D:A8:91:06:9C:90:03:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK72Ja-dUEroR_aSPaiRBpyQA_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:9a:e9:7b:01:82:37:07:6b:e6:ba:d7:51:ce:4a:3d:1c:d1:
         f9:9d:a6:f6:1c:68:bd:23:c0:ad:10:78:d8:a3:ef:2b:6b:cb:
         67:75:09:17:08:e9:2b:3b:86:56:38:8f:3b:f8:08:b0:75:7d:
         32:19:85:24:dd:fd:05:0e:9c:b4:a4:5b:b7:dd:55:d7:c4:fa:
         18:dd:d8:45:38:65:ad:e6:a7:f4:dd:8c:f4:50:11:e8:c1:e9:
         55:1b:35:66:c7:c1:ea:9b:a4:3b:c1:16:ac:00:70:54:d0:44:
         a1:e2:29:05:d0:b6:2f:f0:e4:37:b6:6e:da:72:d5:b6:a7:7d:
         ef:56:9b:e4:82:56:f6:b3:a8:33:e2:71:a2:2c:9d:30:de:9a:
         f4:f2:73:63:aa:e7:f5:8c:58:d3:e9:e3:d5:2e:64:69:8f:2b:
         7b:9b:dd:26:71:c0:b0:eb:93:8b:5b:49:c5:0f:7b:84:04:89:
         1f:68:b5:46:55:f4:59:ff:1d:b0:c3:09:22:26:d9:45:bb:f5:
         e1:d5:b3:00:c0:10:be:ad:2d:73:f0:39:8a:59:d6:c4:d0:df:
         c5:cf:b2:05:9b:2e:d3:4b:c3:48:61:0b:0f:0d:aa:35:f7:4f:
         af:e8:d1:60:b3:e9:ae:89:d3:8a:db:c9:ca:ae:7e:c1:31:df:
         f1:85:a2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 04:49:06 2026 by rpki-client