Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/wUJMTMxZyaAxvhrN95gth6tX0Gg.mft
File:                     wUJMTMxZyaAxvhrN95gth6tX0Gg.mft (raw, json)
Hash identifier:          ccbG7hEMfmGNYHtPoHUfAYSCDViOhhY08vU2JHRexPQ=
Subject key identifier:   E9:E2:AA:D2:5A:43:22:BD:F6:21:B8:22:E4:F8:F0:7A:9E:63:40:19
Authority key identifier: C1:42:4C:4C:CC:59:C9:A0:31:BE:1A:CD:F7:98:2D:87:AB:57:D0:68
Certificate issuer:       /CN=A91139AB/serialNumber=C1424C4CCC59C9A031BE1ACDF7982D87AB57D068
Certificate serial:       62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUJMTMxZyaAxvhrN95gth6tX0Gg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/wUJMTMxZyaAxvhrN95gth6tX0Gg.mft
Manifest number:          0A23
Signing time:             Sat 04 Apr 2026 21:01:23 +0000
Manifest this update:     Sat 04 Apr 2026 21:01:23 +0000
Manifest next update:     Sat 11 Apr 2026 21:01:23 +0000
Files and hashes:         1: wUJMTMxZyaAxvhrN95gth6tX0Gg.crl (hash: IvtWO7MU91BIrUSbTx0sY2hABU9a8ACVmOAtzK9Wx4w=)
                          2: 96AD16C6B5FA11F0A1583C84C4F9AE02.roa (hash: SXJt4LBTuAz2nJWEzDtyLdnG6MS+qN5y5TbtbC3BcFU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/wUJMTMxZyaAxvhrN95gth6tX0Gg.crl
                          rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/wUJMTMxZyaAxvhrN95gth6tX0Gg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUJMTMxZyaAxvhrN95gth6tX0Gg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 21:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91139AB, serialNumber=C1424C4CCC59C9A031BE1ACDF7982D87AB57D068
        Validity
            Not Before: Apr  4 21:01:23 2026 GMT
            Not After : Apr 11 21:01:23 2026 GMT
        Subject: CN=69d17c23-be98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:aa:66:71:5c:6d:fe:e2:87:56:f8:0b:95:82:
                    fe:a0:9d:56:0d:d2:b3:4f:c8:08:9f:9d:4e:43:58:
                    a7:4f:14:6c:b6:a5:d9:02:f7:b8:de:00:8a:7d:13:
                    a3:21:a4:0d:bb:88:c1:d8:10:d8:22:3f:0a:ec:c1:
                    8f:f0:55:d6:a7:3e:b2:9f:4f:d5:fa:27:f5:cd:e2:
                    a0:51:e4:af:f2:22:61:f2:3c:cd:e3:24:83:27:eb:
                    33:14:40:0f:56:83:c6:45:c4:a9:73:74:97:23:92:
                    c8:f0:1f:c1:d9:8c:1f:9e:c0:92:ef:60:01:95:d8:
                    1a:c3:10:7c:fa:29:6d:9c:b3:f3:83:36:ca:ad:5d:
                    23:1a:6f:cd:90:66:a7:77:1d:48:18:b4:c1:24:3c:
                    07:f4:9f:17:9c:0c:f5:37:4b:93:fb:30:2a:d7:80:
                    4d:ca:02:fc:30:28:1a:9b:a5:bb:95:91:79:e5:8d:
                    3c:1d:58:58:6d:cc:75:0b:74:0a:4c:c0:5f:cc:bb:
                    36:1e:4e:b3:6c:81:ca:d4:37:1f:e5:aa:92:66:73:
                    86:05:c1:a4:27:a8:c8:b6:00:3d:98:16:a2:d6:a6:
                    76:27:f4:fc:27:91:01:fd:b0:ca:c4:39:23:5a:50:
                    62:5b:4c:c9:3e:a5:34:93:4e:85:1e:3f:85:54:5e:
                    31:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E2:AA:D2:5A:43:22:BD:F6:21:B8:22:E4:F8:F0:7A:9E:63:40:19
            X509v3 Authority Key Identifier:
                keyid:C1:42:4C:4C:CC:59:C9:A0:31:BE:1A:CD:F7:98:2D:87:AB:57:D0:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/wUJMTMxZyaAxvhrN95gth6tX0Gg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUJMTMxZyaAxvhrN95gth6tX0Gg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/wUJMTMxZyaAxvhrN95gth6tX0Gg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:2e:d5:4e:e5:7e:de:dc:c3:cf:cd:c8:b7:2d:52:e3:dc:8f:
         af:7a:d6:cf:f8:b6:aa:45:c2:58:d7:1c:11:67:a4:a4:93:33:
         4d:45:c7:e8:89:49:76:a8:79:ad:7d:d3:93:67:1b:fc:99:15:
         8b:41:d8:fe:12:da:ff:fa:6b:73:dc:54:fe:9c:dd:27:30:63:
         4b:c0:61:cb:8a:da:2d:6d:e9:4a:fb:a9:56:b4:c0:9b:52:1b:
         3a:1d:4d:83:87:0b:c7:16:73:f9:a8:61:bd:a9:ea:29:e8:a0:
         cf:ce:a1:3f:6f:de:1a:86:98:57:f5:d0:e7:32:1a:3e:aa:be:
         8c:dc:e7:38:62:34:ee:ae:2b:4b:59:87:a6:3d:f1:c3:01:08:
         28:f3:26:36:1a:4d:bd:50:e0:61:87:40:75:e9:1f:ce:cb:99:
         4f:b3:3b:0a:2d:d1:e9:e3:eb:86:ca:ec:c3:7e:dd:94:3b:27:
         27:d9:a6:7d:fa:a8:c6:d5:c5:7a:b7:6a:87:4c:44:9e:8c:e7:
         2e:fc:2f:7b:90:3c:9c:e7:1e:38:f0:4d:6e:a3:ca:55:45:11:
         dd:0f:90:b6:f3:ad:c6:6d:73:a0:10:8c:1b:b2:8e:7d:c0:98:
         8d:df:ff:88:95:8e:30:fe:07:e2:2f:e2:1c:58:cd:5d:2e:b3:
         5d:3e:75:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:54:10 2026 by rpki-client