Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
File:                     wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft (raw, json)
Hash identifier:          poiMHh34ZCaxuaw5k57hbCMPAJzc40+qizS6uKLZKOw=
Subject key identifier:   1C:B9:F5:3F:08:FC:38:09:D6:30:D4:0C:A3:3B:89:B5:D2:D5:CE:C9
Authority key identifier: C1:48:53:D9:BD:3F:78:F6:48:0C:63:35:20:76:94:3B:C7:9B:9F:C2
Certificate issuer:       /CN=A91478E2/serialNumber=C14853D9BD3F78F6480C63352076943BC79B9FC2
Certificate serial:       1836
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
Manifest number:          17FB
Signing time:             Sat 04 Apr 2026 16:27:38 +0000
Manifest this update:     Sat 04 Apr 2026 16:27:37 +0000
Manifest next update:     Sat 11 Apr 2026 16:27:37 +0000
Files and hashes:         1: wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl (hash: JjcHabNfYUhowezz5L/r5n7sYSPwmEB+FHDuKqnwD14=)
                          2: 51635E7E32B011EE89DFF774C4F9AE02.roa (hash: n1u9iSyb9bdQc1QOK/WYlhLEbmOoYxOlffVDVXq1fW4=)
                          3: 507A39A632B011EE89DFF774C4F9AE02.roa (hash: t9gfSRrRBhg5aKee6bLsa2HCvO/wXMYsjYUGDi3D7i0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl
                          rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 16:27:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6198 (0x1836)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91478E2, serialNumber=C14853D9BD3F78F6480C63352076943BC79B9FC2
        Validity
            Not Before: Apr  4 16:27:37 2026 GMT
            Not After : Apr 11 16:27:37 2026 GMT
        Subject: CN=69d13bf9-c584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:52:24:ef:48:04:c2:e5:08:39:ea:79:13:4b:
                    e8:d7:b1:59:30:16:ae:9c:81:2c:b4:db:c8:93:fb:
                    18:cf:9e:af:6c:14:b8:cb:9b:10:1b:40:1a:07:e3:
                    ff:0d:e1:b0:12:10:31:cf:7b:73:f2:59:26:a2:b6:
                    6f:19:c9:e0:4d:f7:47:84:a8:fd:48:2f:15:09:d4:
                    f7:de:bf:f6:1e:8f:d5:ea:fc:57:65:98:9d:ae:04:
                    e7:54:b4:5d:e6:bb:14:f4:76:14:bd:58:11:c7:f1:
                    49:0d:52:2f:f3:92:73:9d:05:d9:68:4e:04:7d:5c:
                    02:2f:19:d7:60:15:0c:a2:21:57:98:27:f5:2d:16:
                    0a:7f:1b:c0:a0:2a:28:ad:81:88:47:56:f3:3f:de:
                    da:a8:fd:57:42:ac:e8:43:21:a7:64:b7:6a:b2:c8:
                    b3:b6:c8:a6:5a:87:78:5a:a9:04:cd:a8:be:ff:e7:
                    37:10:6e:3e:6d:95:83:d8:08:df:bb:7e:a9:3a:ec:
                    3e:76:89:5d:ba:88:e5:76:02:1e:77:d0:5b:9d:73:
                    19:e3:4e:f0:c7:60:19:82:02:e3:84:e7:c0:0c:e4:
                    8e:77:d6:0e:a3:86:6c:bd:ce:c6:08:74:b4:ec:13:
                    be:0f:90:29:d5:4e:d1:96:5d:e6:4b:2e:f5:c7:bf:
                    7e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B9:F5:3F:08:FC:38:09:D6:30:D4:0C:A3:3B:89:B5:D2:D5:CE:C9
            X509v3 Authority Key Identifier:
                keyid:C1:48:53:D9:BD:3F:78:F6:48:0C:63:35:20:76:94:3B:C7:9B:9F:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:14:fe:44:97:19:c5:23:a6:65:62:8a:26:57:65:64:87:3d:
         25:f2:48:71:e8:02:3a:31:d3:bc:24:40:7d:fa:3a:35:8f:f2:
         c3:f9:e1:60:49:43:4c:02:96:ad:cb:a0:26:f5:85:50:03:aa:
         5a:63:1e:90:98:a7:b1:12:54:10:8e:c8:48:4f:8b:db:10:f5:
         55:25:83:fa:4b:3c:cd:49:a9:53:fd:3e:fc:f2:7f:fe:f1:58:
         8a:bc:99:8e:38:cd:8d:99:ce:a2:58:a7:39:9c:4a:62:ae:36:
         ea:3f:a3:ed:63:51:a5:f4:b4:de:22:57:e9:b0:11:cd:f0:05:
         ba:42:f9:4e:71:95:1d:28:22:e2:29:f6:b8:af:5c:76:07:3a:
         07:52:7e:39:0c:b4:12:05:d2:c4:07:11:eb:57:51:72:8b:4d:
         49:98:00:63:9e:89:8b:20:5f:93:6b:b5:97:d7:ba:86:cc:7b:
         8f:44:5a:d7:b4:56:4b:c0:3b:c9:7e:02:e6:2c:64:a6:7a:1e:
         e6:89:95:dc:bd:7a:4b:18:61:a4:88:95:0b:3d:79:a4:6f:68:
         2f:59:51:1b:6f:19:70:ef:33:94:af:4c:a6:61:7d:b2:1e:7c:
         1d:3b:16:c7:8f:9b:7e:f9:0d:10:2b:4b:c3:a7:c3:4b:26:64:
         ed:8f:76:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:49:01 2026 by rpki-client