Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft
File:                     Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft (raw, json)
Hash identifier:          2BqXBaBw+ipUkDwVaEw/5qpYepEfRGQ54Ofc+UFxOgE=
Subject key identifier:   C4:AC:F2:1F:04:8E:07:73:77:A2:A7:D5:EA:26:77:44:4C:24:E5:35
Authority key identifier: 5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9
Certificate issuer:       /CN=A911F8BC/serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9
Certificate serial:       0649
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft
Manifest number:          0637
Signing time:             Sat 04 Apr 2026 22:32:07 +0000
Manifest this update:     Sat 04 Apr 2026 22:32:07 +0000
Manifest next update:     Sat 11 Apr 2026 22:32:07 +0000
Files and hashes:         1: Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl (hash: Vk2KCxPQKKeoVzhakInE8GLMv7JviGt3vpCkYMcvnJo=)
                          2: 5284A644D3DC11EB9FCD6135C4F9AE02.roa (hash: j5ZJEpzdtOEiGnvXhEWjzNgokm2dtSBgk89RWseZw8s=)
                          3: 99B4BAA6D3E411EBB67F2616C4F9AE02.roa (hash: e7QKn7+kdQj0gCw0LNLlb5Q7271gVnMQQic/lrYBjOA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl
                          rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 22:32:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1609 (0x649)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F8BC, serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9
        Validity
            Not Before: Apr  4 22:32:07 2026 GMT
            Not After : Apr 11 22:32:07 2026 GMT
        Subject: CN=69d19167-5ff5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:81:d4:ba:bb:5d:fb:0d:6f:75:9d:dc:17:7e:
                    4f:32:3a:9d:5a:ea:c5:db:0b:df:03:b2:1c:12:b7:
                    f7:d1:10:a8:e5:b0:d0:cf:d8:8d:0c:20:c8:2b:7f:
                    50:f2:c3:ba:c9:9b:5b:63:b8:fe:36:86:38:bf:75:
                    4b:82:28:b4:59:a7:4b:0c:52:6d:17:92:ec:94:a3:
                    b6:7d:9d:7d:2b:7f:41:0c:59:64:17:de:bc:ba:60:
                    31:3c:de:41:ee:52:42:71:27:72:7a:d8:0d:d9:91:
                    7d:95:3e:96:7c:65:6f:91:4b:83:5e:75:a7:fe:fd:
                    ce:97:2f:1c:c0:c8:7b:6e:af:73:d5:d8:4c:8f:b0:
                    44:14:46:9b:88:29:52:e7:0f:59:16:9e:b9:a2:63:
                    76:4f:46:bb:50:e0:69:43:1a:64:0b:ed:d7:2d:17:
                    4d:ed:10:79:04:9e:6f:c8:67:af:b0:0e:b2:5e:49:
                    01:74:82:3d:f9:3d:52:b3:94:e0:5e:b0:a9:ce:07:
                    4a:2c:0b:14:26:b8:8d:d6:c5:d6:21:b0:91:d3:be:
                    56:06:be:8a:29:0e:8c:fa:79:60:af:8d:d2:ba:df:
                    91:83:05:73:62:c5:e2:68:a1:5b:c9:08:54:8a:8a:
                    3d:cb:e3:17:47:79:5c:b7:50:17:8d:16:57:08:67:
                    77:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:AC:F2:1F:04:8E:07:73:77:A2:A7:D5:EA:26:77:44:4C:24:E5:35
            X509v3 Authority Key Identifier:
                keyid:5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:8d:46:0f:a5:cd:c2:06:cd:9d:0a:a2:ed:65:2a:f5:13:4e:
         5f:e0:77:54:0c:40:8f:24:a6:98:ae:78:e3:e4:2e:55:bc:cc:
         2c:1d:ca:7c:4d:72:0b:e9:20:13:81:58:45:9e:93:a2:12:4b:
         30:65:1a:a0:bc:06:05:be:20:b5:21:c9:ca:7b:1f:e8:78:36:
         10:85:be:f0:4d:d2:fc:18:e4:f0:09:ec:40:e5:39:82:ee:ba:
         70:b6:11:ba:94:bf:f4:f8:72:2d:67:95:be:75:ee:78:d8:93:
         54:0c:e2:cc:40:69:71:98:4d:48:b1:e5:54:c1:c4:a9:dd:95:
         64:1a:e9:e6:66:a5:7d:db:59:17:50:2f:a1:17:9e:e8:be:bd:
         8f:46:9f:58:3a:e4:d9:95:6c:2d:e8:e6:c9:a2:f6:cf:49:91:
         8a:68:01:5d:59:32:48:be:d4:24:b7:88:db:13:1c:23:30:22:
         cf:d5:00:66:5e:37:6f:bc:da:44:31:40:ec:7f:3b:67:30:71:
         17:b0:51:78:68:99:c1:d0:88:69:89:9e:47:68:25:1a:62:99:
         71:ee:20:fc:5d:be:3c:2b:87:40:98:10:0d:8b:5a:b6:42:3d:
         80:f1:a4:84:d0:f4:6e:cb:ff:6a:9f:ed:38:d9:f5:67:fb:b8:
         05:10:6a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:48:33 2026 by rpki-client