Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft
File:                     WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft (raw, json)
Hash identifier:          nmgt5znPCvbeNp91i0GUgKINfpOAomfb4rCLmzG9MII=
Subject key identifier:   67:55:D5:7A:95:BB:6F:0C:1F:5D:D5:AA:7B:D5:BE:15:F1:8C:5A:6F
Authority key identifier: 58:EE:E5:2D:2A:E0:92:EC:55:86:E0:70:E6:46:2C:36:35:0F:A6:E1
Certificate issuer:       /CN=A914A75A/serialNumber=58EEE52D2AE092EC5586E070E6462C36350FA6E1
Certificate serial:       D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WO7lLSrgkuxVhuBw5kYsNjUPpuE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft
Manifest number:          D0
Signing time:             Sun 05 Apr 2026 06:08:13 +0000
Manifest this update:     Sun 05 Apr 2026 06:08:13 +0000
Manifest next update:     Sun 12 Apr 2026 06:08:13 +0000
Files and hashes:         1: WO7lLSrgkuxVhuBw5kYsNjUPpuE.crl (hash: U+rfMI2gCm6AowcSr4rvAuivB/ucEYSqspgOcBT8pHU=)
                          2: D56D67B0F48711EFBB2D9D73C4F9AE02.roa (hash: csaBSpZzq59GMLhCxwkq41kKwaXSwMxp+Vf9tiYrdrg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.crl
                          rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WO7lLSrgkuxVhuBw5kYsNjUPpuE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 06:08:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 211 (0xd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A75A, serialNumber=58EEE52D2AE092EC5586E070E6462C36350FA6E1
        Validity
            Not Before: Apr  5 06:08:13 2026 GMT
            Not After : Apr 12 06:08:13 2026 GMT
        Subject: CN=69d1fc4d-1a58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b9:f8:c9:05:78:25:7f:21:0f:dc:23:c9:7a:
                    d9:b2:d8:b3:20:8d:82:e5:d5:4e:ec:19:fd:26:33:
                    e2:f9:5c:8d:14:ef:62:cb:67:d9:a5:67:26:be:5c:
                    1e:58:af:2d:8d:4c:28:a6:d0:d2:f5:8f:81:b9:09:
                    40:e1:52:b0:d3:0d:74:e7:fe:94:c1:a4:42:e1:09:
                    bb:91:4c:49:5b:12:4e:ec:db:2c:08:cd:f9:66:32:
                    f0:3b:a9:e8:dc:33:ba:d6:7c:e6:4b:e2:b2:1c:6e:
                    f0:c7:f1:ad:b8:9e:fd:d6:48:04:4d:ef:35:95:67:
                    3a:39:21:03:48:38:08:f9:0c:81:83:38:19:0c:a3:
                    0e:b6:a3:42:a4:2e:95:8e:88:90:fe:31:2d:b3:c2:
                    72:84:e6:01:28:2f:8e:a5:55:ce:33:0b:d1:18:fb:
                    a7:04:16:ea:6b:ef:49:e7:a7:66:e0:21:ee:d4:2e:
                    24:d2:f9:4f:0d:c9:0a:ae:f5:79:b0:07:9e:ec:7a:
                    78:c2:bc:e6:2a:57:8f:09:a8:b9:a1:63:5b:75:ee:
                    c8:d4:3c:cb:8d:70:2f:ad:94:b1:be:39:37:5d:0a:
                    8b:f7:e8:fd:13:51:af:5f:d2:26:43:c1:6c:8d:34:
                    d9:c7:4c:8d:4e:11:6b:56:d5:11:be:b9:45:73:09:
                    a5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:55:D5:7A:95:BB:6F:0C:1F:5D:D5:AA:7B:D5:BE:15:F1:8C:5A:6F
            X509v3 Authority Key Identifier:
                keyid:58:EE:E5:2D:2A:E0:92:EC:55:86:E0:70:E6:46:2C:36:35:0F:A6:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WO7lLSrgkuxVhuBw5kYsNjUPpuE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:1c:63:8e:fe:23:b1:93:65:19:b8:ec:a0:ad:56:55:eb:13:
         7c:17:db:60:a5:bc:b8:4e:46:d3:19:d4:17:e3:ea:85:d2:b7:
         4b:79:09:f4:f7:05:6a:75:fe:30:19:5e:9f:89:7c:df:b7:63:
         dd:2c:64:c6:99:67:e8:d7:b4:b4:8e:8b:ad:10:ab:0f:bc:09:
         33:3c:d9:ca:30:27:b5:cc:b8:5f:1e:83:64:fd:3e:ea:eb:d5:
         27:dc:8b:e3:dc:96:67:74:84:3a:4f:91:d1:7e:ce:f5:33:8b:
         9d:d5:14:13:a1:c7:0f:ad:c6:1a:88:ee:0f:45:c2:98:ca:09:
         67:a4:bf:98:aa:d3:23:a5:4e:16:a8:50:0b:c9:12:97:da:76:
         83:87:79:65:be:64:dd:67:6a:36:71:6e:86:89:0a:1a:fe:1f:
         ae:7e:96:de:86:a9:e6:39:4b:d3:cb:c6:07:64:94:da:73:8e:
         94:9a:55:4e:ac:c8:98:23:97:36:38:61:18:d7:4f:d0:f7:31:
         0e:f3:03:cb:76:a0:26:20:a1:c4:86:b7:ad:6a:6f:0b:32:c7:
         0d:20:e5:8f:69:c8:e7:b6:90:2b:41:38:82:c5:84:a2:f2:b6:
         2d:f4:80:09:b9:00:c6:dc:c8:bf:1a:76:67:25:34:b1:84:fc:
         54:72:65:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:11:17 2026 by rpki-client