Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.mft
File:                     WQ0nhfMG6JFKHf6bJ9V8a4n82pM.mft (raw, json)
Hash identifier:          JnyvugmViq0H/bD9IR19NyW4UVgPftZBDlLzbUDiL1Q=
Subject key identifier:   56:58:B5:11:23:2C:0F:1A:46:B2:6D:31:F0:33:36:20:71:52:3D:D6
Authority key identifier: 59:0D:27:85:F3:06:E8:91:4A:1D:FE:9B:27:D5:7C:6B:89:FC:DA:93
Certificate issuer:       /CN=A91376D4/serialNumber=590D2785F306E8914A1DFE9B27D57C6B89FCDA93
Certificate serial:       0792
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.mft
Manifest number:          0788
Signing time:             Sat 04 Apr 2026 21:20:11 +0000
Manifest this update:     Sat 04 Apr 2026 21:20:11 +0000
Manifest next update:     Sat 11 Apr 2026 21:20:11 +0000
Files and hashes:         1: WQ0nhfMG6JFKHf6bJ9V8a4n82pM.crl (hash: +3P5jKEObXv3Di4JA72CCRoGbs98OpcnpwJGeuZWQtQ=)
                          2: ACD87DA66C4811EBB9A7CF73C4F9AE02.roa (hash: 8ZogQsAJSObbc1LEfPoW5Crx/qRsbQdEqjtGRmTCjaw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.crl
                          rsync://rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 21:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1938 (0x792)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91376D4, serialNumber=590D2785F306E8914A1DFE9B27D57C6B89FCDA93
        Validity
            Not Before: Apr  4 21:20:11 2026 GMT
            Not After : Apr 11 21:20:11 2026 GMT
        Subject: CN=69d1808b-24ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:aa:71:6a:9f:46:83:fb:01:88:42:05:ad:2a:
                    bc:99:a8:5a:26:67:72:8b:c0:17:a2:07:73:95:ca:
                    f9:c9:cc:bf:dd:77:74:a9:61:a5:bf:46:82:92:9c:
                    02:5c:6c:c5:3b:d5:fd:d4:be:7f:9c:17:e1:10:a5:
                    04:35:ca:70:f3:25:0a:8c:88:65:38:a9:8d:25:ef:
                    d9:52:ca:c0:09:fb:88:c0:ee:e2:94:85:a2:fd:28:
                    22:65:84:88:3f:17:8f:dc:2c:0d:23:02:dd:bf:3f:
                    64:93:ab:ff:30:b9:41:0e:2f:11:d1:e6:16:1a:f3:
                    ec:c5:de:80:3e:bd:a4:22:21:1b:c4:a9:9f:16:dc:
                    74:fc:15:91:36:14:91:e3:84:c2:b8:26:6e:85:f4:
                    e9:35:c4:9a:a1:c2:b7:92:92:75:67:48:42:d2:b8:
                    31:9f:40:6a:7c:dd:31:eb:04:6c:ea:3b:e8:b8:5d:
                    86:e1:53:54:8d:d0:41:ea:2e:79:18:02:5a:81:ce:
                    d7:fa:bf:3e:a0:a2:d2:69:67:1c:44:79:b1:cb:56:
                    3b:79:96:1b:bd:53:61:28:ac:93:3a:f1:df:c8:b3:
                    64:43:1d:bd:5d:52:0b:b4:fe:1f:ac:cf:9e:3f:fc:
                    30:f0:d9:21:eb:34:32:88:90:77:f9:93:86:f2:32:
                    fe:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:58:B5:11:23:2C:0F:1A:46:B2:6D:31:F0:33:36:20:71:52:3D:D6
            X509v3 Authority Key Identifier:
                keyid:59:0D:27:85:F3:06:E8:91:4A:1D:FE:9B:27:D5:7C:6B:89:FC:DA:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:98:a2:35:d1:5c:67:0b:28:be:bb:37:3c:0a:f6:8a:c2:f4:
         01:5f:e4:99:67:00:b5:d0:9b:61:31:82:59:96:f0:c3:ba:4e:
         8b:4b:58:ff:84:36:11:bb:ac:d2:b0:db:d7:23:6f:f1:7d:3b:
         60:e6:5c:49:45:17:4e:87:3a:0c:31:5e:77:9c:ce:04:a1:b3:
         c9:2d:08:ab:3b:c4:37:b7:f0:22:1f:35:72:20:e6:5e:b9:6d:
         83:9e:93:b7:e4:d4:ab:f7:0c:9b:03:bf:c5:04:68:88:bf:9d:
         0b:64:ee:82:d8:9c:66:16:af:d7:89:ea:44:c2:df:98:87:1f:
         47:a1:fd:8c:74:cc:7f:d5:7e:e4:8a:8a:02:fb:7e:d4:96:4a:
         8d:39:cb:16:3b:a6:00:9e:a3:e2:f6:b6:b4:3d:e1:59:56:b9:
         85:c6:0f:29:60:ad:9c:90:e8:a9:06:e8:96:9d:90:f8:b5:5c:
         7d:25:37:70:08:6c:8c:d6:ed:23:66:35:3c:83:e8:37:82:77:
         e3:a6:6f:94:66:1d:6d:38:f4:d5:e7:2e:d6:ed:83:e0:28:41:
         93:5c:f4:98:df:90:49:cd:aa:37:dc:f0:a1:81:1d:a6:90:46:
         13:2a:ec:a6:fa:e3:79:66:7a:f3:33:05:ed:42:76:99:38:19:
         ff:22:03:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:33:05 2026 by rpki-client