Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft
File:                     WZsF7zwJOSLemJvcc5k_RtYldUk.mft (raw, json)
Hash identifier:          UYS7nLu+06VpYy9tCW8F/Ia3mU6kIIOhM8Ve3CddGHY=
Subject key identifier:   D1:37:56:6A:54:04:2C:FD:73:56:56:60:16:A0:A4:D7:33:19:5A:C9
Authority key identifier: 59:9B:05:EF:3C:09:39:22:DE:98:9B:DC:73:99:3F:46:D6:25:75:49
Certificate issuer:       /CN=A91308CE/serialNumber=599B05EF3C093922DE989BDC73993F46D6257549
Certificate serial:       3514
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft
Manifest number:          3514
Signing time:             Mon 02 Mar 2026 14:57:36 +0000
Manifest this update:     Mon 02 Mar 2026 14:57:35 +0000
Manifest next update:     Mon 09 Mar 2026 14:57:35 +0000
Files and hashes:         1: WZsF7zwJOSLemJvcc5k_RtYldUk.crl (hash: DxHm9wM0Ade0+2+/TeUU42akROai2M9CLAjhNTTQujY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.crl
                          rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 14:57:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13588 (0x3514)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91308CE, serialNumber=599B05EF3C093922DE989BDC73993F46D6257549
        Validity
            Not Before: Mar  2 14:57:35 2026 GMT
            Not After : Mar  9 14:57:35 2026 GMT
        Subject: CN=69a5a560-a020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:da:14:69:8f:3c:84:1d:c4:2d:9a:34:4e:89:
                    ad:e3:8a:97:42:60:7d:9d:8d:08:01:31:8c:3f:98:
                    63:5c:c1:6d:61:67:d4:0d:e4:61:4d:a6:1e:0c:d3:
                    d6:d9:7a:ce:3e:9b:fa:4f:f7:97:f2:a4:80:f0:0d:
                    8e:23:f6:bb:28:11:26:53:4c:87:16:18:e0:7b:35:
                    27:a1:0e:82:7a:1d:35:ec:bc:41:a9:d2:85:bd:2d:
                    1f:cf:2d:b8:9e:27:a1:f6:7d:a2:fe:c2:26:ea:7f:
                    07:a7:fa:70:00:0e:a4:37:1a:65:35:52:97:6b:14:
                    bb:8a:08:d0:d6:e6:b1:db:4b:a5:3b:2c:e0:51:16:
                    e0:b2:17:b9:63:17:96:73:19:0d:a1:40:06:7c:48:
                    74:80:03:6b:4e:a6:f3:3c:06:c9:22:3f:0b:3e:02:
                    f1:fd:af:2a:55:92:e5:d1:ba:76:60:4d:5c:5e:89:
                    29:8c:b9:4a:47:ed:a8:54:06:dc:ce:66:d8:8c:0f:
                    71:d4:da:fb:c7:0b:0a:94:58:93:fe:36:25:d8:2e:
                    a5:fb:b5:c2:53:ef:74:fb:fe:6f:ec:d9:86:8e:11:
                    70:8f:79:1b:52:9b:26:5a:29:64:4f:a1:40:71:50:
                    c2:37:30:35:df:26:49:db:6c:d4:e7:b5:e3:12:fb:
                    68:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:37:56:6A:54:04:2C:FD:73:56:56:60:16:A0:A4:D7:33:19:5A:C9
            X509v3 Authority Key Identifier:
                keyid:59:9B:05:EF:3C:09:39:22:DE:98:9B:DC:73:99:3F:46:D6:25:75:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:f6:4d:67:03:ba:44:20:b6:f3:6f:04:39:d2:bb:7f:9b:3f:
         aa:6f:af:10:0b:31:37:c4:a7:27:cc:7a:0e:77:79:6c:5f:51:
         5c:37:de:d1:09:91:0e:5c:4f:5f:49:1b:36:8a:40:71:2c:db:
         92:15:ff:4a:b0:38:93:63:ca:f0:af:52:75:cf:14:c3:11:56:
         9f:41:f0:25:5a:3f:54:47:27:08:02:69:8e:ee:00:8c:48:ef:
         49:e3:62:f3:8a:9f:c9:14:a6:bb:59:b7:5c:75:54:23:91:26:
         f0:06:8f:4f:94:8c:a1:ce:cf:3e:ac:9c:a5:13:db:bd:f6:dd:
         74:54:92:fe:b8:58:d5:31:11:d9:42:e3:5a:8f:de:4b:b4:3f:
         92:ff:8b:cb:2b:b4:c5:f3:72:f2:67:26:57:6f:75:d4:19:31:
         da:05:8b:1b:a2:78:29:59:a1:2c:ab:a4:4e:3d:53:dd:79:d3:
         e6:ed:64:6b:dc:51:5c:6c:56:e2:5d:27:c6:ef:2a:d1:e2:6d:
         1c:61:57:b6:e4:2a:64:0c:1a:09:19:83:22:70:06:48:78:94:
         82:9d:ba:83:74:a6:71:c7:c4:4c:63:bd:39:c4:49:b0:bf:be:
         2e:ab:01:c6:f9:46:8e:06:fd:cc:e2:8e:e6:f9:f7:1e:cd:24:
         00:e9:a8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:36:27 2026 by rpki-client