Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft
File:                     wzct4f6eU8GLMFFtlkxDZyLrPss.mft (raw, json)
Hash identifier:          FqimobUYQaD1BJ/UQ/8wPvUgctPX+R0b8OC+E57xYR0=
Subject key identifier:   00:14:95:44:0D:CA:97:AA:CB:FA:BE:AA:03:92:55:AC:2A:C3:31:4F
Authority key identifier: C3:37:2D:E1:FE:9E:53:C1:8B:30:51:6D:96:4C:43:67:22:EB:3E:CB
Certificate issuer:       /CN=A911C7CD/serialNumber=C3372DE1FE9E53C18B30516D964C436722EB3ECB
Certificate serial:       0130
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wzct4f6eU8GLMFFtlkxDZyLrPss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft
Manifest number:          0127
Signing time:             Tue 03 Mar 2026 05:17:02 +0000
Manifest this update:     Tue 03 Mar 2026 05:17:01 +0000
Manifest next update:     Tue 10 Mar 2026 05:17:01 +0000
Files and hashes:         1: wzct4f6eU8GLMFFtlkxDZyLrPss.crl (hash: GeT5XICE65yk7SZ2sDc0UrXC5K9fuIAc9u5MEHOsRkY=)
                          2: 5C8F0D505ECB11EFA4D8E07CC4F9AE02.roa (hash: fz5wGX8TCKnp2pv3oEZJbnk1JDuLkYxlHREJYhGasR8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.crl
                          rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wzct4f6eU8GLMFFtlkxDZyLrPss.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 05:17:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 304 (0x130)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C7CD, serialNumber=C3372DE1FE9E53C18B30516D964C436722EB3ECB
        Validity
            Not Before: Mar  3 05:17:01 2026 GMT
            Not After : Mar 10 05:17:01 2026 GMT
        Subject: CN=69a66ecd-7f68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:27:b0:bd:43:90:7c:72:94:f2:80:75:91:0a:
                    7e:18:f2:0f:47:52:c3:39:b4:c3:6e:f1:7c:f0:d1:
                    f6:20:f2:6a:36:7d:ca:35:0b:dc:df:4b:5c:52:56:
                    74:82:26:ef:ed:12:dc:0a:c2:d7:7d:0e:5d:87:a8:
                    63:b2:00:c0:b2:58:91:d7:a9:97:ef:d4:99:7e:8d:
                    fc:f0:ba:7c:b4:32:27:d7:30:7c:06:bb:2c:79:c8:
                    4d:d2:04:62:f4:20:08:01:1e:e2:2a:9b:a4:87:71:
                    bc:00:95:99:8a:d0:e6:12:83:a1:bb:52:6f:9c:06:
                    09:b6:62:d8:9c:91:6e:99:f1:13:f6:31:a6:dc:53:
                    1a:2b:9d:f1:ca:25:b4:9c:05:32:9c:b6:b8:de:28:
                    b1:22:28:06:6c:c3:71:c5:28:50:ee:fb:1d:6c:58:
                    2c:77:f3:eb:a8:57:11:e2:8a:44:f7:00:e6:43:18:
                    a4:e4:ae:39:92:fa:cb:b2:ab:92:57:bc:e3:11:83:
                    52:11:2b:a3:62:f7:f7:f2:37:42:4d:28:9f:e6:67:
                    67:63:83:d7:09:48:38:4b:5c:a6:0d:fe:f2:46:88:
                    6f:84:6d:f0:6c:e2:10:35:f6:6f:da:32:57:71:b5:
                    9e:3b:18:13:37:51:21:8f:65:23:d0:c0:d2:83:78:
                    30:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:14:95:44:0D:CA:97:AA:CB:FA:BE:AA:03:92:55:AC:2A:C3:31:4F
            X509v3 Authority Key Identifier:
                keyid:C3:37:2D:E1:FE:9E:53:C1:8B:30:51:6D:96:4C:43:67:22:EB:3E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wzct4f6eU8GLMFFtlkxDZyLrPss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:96:7b:eb:79:37:37:96:28:a2:fc:04:a9:49:90:c7:4f:a3:
         9c:29:3b:19:47:2a:fd:9a:24:31:aa:be:98:e8:3d:5b:09:1b:
         bb:8a:f5:0b:5f:3b:e4:5b:26:42:9e:e9:63:9a:35:30:64:27:
         52:cb:1e:a4:20:c0:08:b9:e2:a5:95:33:4d:0d:90:50:48:67:
         fa:c6:93:cf:c9:9f:b9:30:aa:0a:bc:3b:07:d2:59:57:3e:96:
         67:ae:6d:c3:77:8d:8e:17:31:37:48:94:6b:05:1e:7b:f8:79:
         d8:43:dc:15:9a:2b:f0:56:ca:5d:c9:dc:8d:3f:de:15:78:b7:
         cf:d5:04:a7:c9:6e:23:6e:c4:c0:02:f3:63:ff:2c:c4:f1:3a:
         50:d5:29:ba:70:f4:e4:c7:72:d2:93:b4:f3:a3:30:17:61:20:
         fc:1e:e8:22:e3:93:9c:4d:0d:c6:79:cb:59:e5:27:ee:d9:30:
         3b:47:85:15:8e:e7:64:3c:b5:1d:76:1b:83:34:a5:87:74:28:
         44:ea:f2:5a:f0:d6:d8:ae:86:35:9c:82:d6:ea:9d:72:d5:4e:
         5a:0f:8e:54:f2:47:9e:aa:b8:be:87:dc:fd:32:54:59:3e:9c:
         9b:b4:60:fb:5b:ff:26:87:fa:35:c0:e4:9a:db:86:01:a6:6d:
         e0:68:ca:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:38:29 2026 by rpki-client