Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft
File:                     WF3cT9n54xQAXzcZj9HiLmgknes.mft (raw, json)
Hash identifier:          x4LNl0mUnb8Rdv5o3fIc8wt+G3eQ6dBJg0bVTD+LWQc=
Subject key identifier:   51:02:91:63:6D:5A:B5:B0:85:08:25:23:62:F7:D0:3D:A0:34:CB:86
Authority key identifier: 58:5D:DC:4F:D9:F9:E3:14:00:5F:37:19:8F:D1:E2:2E:68:24:9D:EB
Certificate issuer:       /CN=A912871A/serialNumber=585DDC4FD9F9E314005F37198FD1E22E68249DEB
Certificate serial:       04F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WF3cT9n54xQAXzcZj9HiLmgknes.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft
Manifest number:          04F2
Signing time:             Sun 22 Mar 2026 23:17:17 +0000
Manifest this update:     Sun 22 Mar 2026 23:17:17 +0000
Manifest next update:     Sun 29 Mar 2026 23:17:17 +0000
Files and hashes:         1: WF3cT9n54xQAXzcZj9HiLmgknes.crl (hash: hNEpc3Hszfn7rM9KjQCjI8IjsAyoZQcVEIgsQ+R4V+4=)
                          2: 5431D022524211ECA52D990FC4F9AE02.roa (hash: OxBZXjM5WU3mTzBTkJpk2hM02aP7JRhZY0bot56cYO4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.crl
                          rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WF3cT9n54xQAXzcZj9HiLmgknes.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 29 Mar 2026 23:17:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1273 (0x4f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912871A, serialNumber=585DDC4FD9F9E314005F37198FD1E22E68249DEB
        Validity
            Not Before: Mar 22 23:17:17 2026 GMT
            Not After : Mar 29 23:17:17 2026 GMT
        Subject: CN=69c0787d-0e38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9c:4d:9a:c6:0d:32:f7:61:4f:c7:01:ef:f8:
                    4f:d5:0b:f5:b3:fb:00:de:65:89:6d:b4:a9:74:81:
                    f3:04:c4:8b:0c:bc:00:8e:ee:8c:44:8a:e0:de:0d:
                    7c:ec:9a:33:d5:bf:5e:16:a3:a4:ea:3c:7f:12:b8:
                    dc:bb:31:39:f1:0e:0b:31:cc:4e:27:d1:44:67:89:
                    06:ba:ca:9e:a3:53:2c:3c:06:ab:fa:d9:8d:cd:9b:
                    81:36:2a:3e:b0:55:1d:16:6a:9d:7f:5a:5a:2c:88:
                    17:ec:c2:63:3b:6a:a0:6d:80:ca:96:c4:6e:e7:c1:
                    b8:5b:86:4f:ba:56:d7:3c:ac:47:90:84:19:c6:80:
                    2d:ca:db:4d:f4:67:22:1e:c0:cb:45:43:1e:79:13:
                    2b:88:74:78:2a:a0:1b:e0:1a:2f:bc:25:0b:b6:57:
                    28:cb:96:19:87:82:04:dc:4c:a2:f0:a9:cf:93:82:
                    bb:3a:ad:1e:89:e5:3b:8b:43:31:fe:83:24:ff:eb:
                    a9:e9:5f:d2:8f:c3:bc:59:db:dd:19:46:59:56:4f:
                    7e:e6:8b:89:79:da:5b:b8:d5:a1:b7:9c:49:77:83:
                    62:39:f6:16:a1:c0:5f:09:69:16:e2:35:7c:f9:1f:
                    39:10:67:00:2c:5a:f8:57:cc:14:8a:ba:ed:84:0f:
                    9e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:02:91:63:6D:5A:B5:B0:85:08:25:23:62:F7:D0:3D:A0:34:CB:86
            X509v3 Authority Key Identifier:
                keyid:58:5D:DC:4F:D9:F9:E3:14:00:5F:37:19:8F:D1:E2:2E:68:24:9D:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WF3cT9n54xQAXzcZj9HiLmgknes.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:ef:14:4d:32:2d:ce:c2:07:f7:79:4f:c2:fc:69:fe:60:3f:
         fe:e9:9b:82:8b:32:a2:6a:75:ea:80:05:c8:91:c5:65:db:1c:
         88:16:a2:a5:49:4e:29:7e:26:99:3a:ec:1c:5b:ed:6e:43:f0:
         ea:5f:39:16:b7:6e:d9:77:0d:c2:48:39:8f:35:9e:f9:c3:fa:
         41:7d:28:20:b5:00:ff:e5:02:c5:3a:41:7b:22:d7:f5:b3:2c:
         7c:c7:fe:a8:9b:a8:b2:5c:21:62:e2:d5:2e:a8:21:b7:8a:02:
         0a:52:43:3b:62:0f:0b:a4:60:9d:2d:9b:26:7b:e7:01:8e:29:
         70:1a:a1:c5:f2:bc:dc:68:05:90:f1:5e:a8:c6:b7:c0:29:0c:
         0c:ac:0e:cf:4d:ed:35:2d:6c:5b:20:62:32:03:4b:d4:b4:49:
         ea:9b:9c:53:64:54:83:0b:f6:b8:bd:58:cb:9d:61:19:c6:7c:
         72:0f:6a:e1:c4:ea:c7:46:f0:9f:e1:16:de:ce:d8:ca:12:54:
         a5:d2:be:cb:39:c7:45:92:57:d2:fe:fb:91:f8:e8:bc:77:84:
         e6:fa:23:fc:a2:8c:4b:64:3d:f6:00:34:d6:b7:2a:aa:21:b8:
         ce:69:9a:78:ad:49:0c:ee:f3:ec:90:88:dd:b3:ee:f3:b5:76:
         32:9f:24:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 06:47:46 2026 by rpki-client