Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft
File:                     s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft (raw, json)
Hash identifier:          yxwpvec/H7Fqjm8Kgfv3BZq5SjFT3094FfSAey/Lx6I=
Subject key identifier:   18:17:45:20:02:A9:8F:34:CF:CB:81:33:31:CF:A9:2A:C4:7A:3D:1F
Authority key identifier: B3:EC:1F:F6:AD:55:2A:A1:6E:E1:01:95:64:BA:D9:F7:61:FD:B5:D8
Certificate issuer:       /CN=A91A381A/serialNumber=B3EC1FF6AD552AA16EE1019564BAD9F761FDB5D8
Certificate serial:       01DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-wf9q1VKqFu4QGVZLrZ92H9tdg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft
Manifest number:          01CC
Signing time:             Sun 05 Apr 2026 03:15:08 +0000
Manifest this update:     Sun 05 Apr 2026 03:15:07 +0000
Manifest next update:     Sun 12 Apr 2026 03:15:07 +0000
Files and hashes:         1: s-wf9q1VKqFu4QGVZLrZ92H9tdg.crl (hash: V5WEB2U2y8HTPFpazoxQEh3L/M1MBVB48zAV6A6G5qY=)
                          2: EBB7A41AB4DA11EEBD650259C4F9AE02.roa (hash: SDwmGnNA62CDBnu6SIeNZtXcNKrSVhcMHLtnwpsVMtg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.crl
                          rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-wf9q1VKqFu4QGVZLrZ92H9tdg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 03:15:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 474 (0x1da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A381A, serialNumber=B3EC1FF6AD552AA16EE1019564BAD9F761FDB5D8
        Validity
            Not Before: Apr  5 03:15:07 2026 GMT
            Not After : Apr 12 03:15:07 2026 GMT
        Subject: CN=69d1d3bb-5aa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7e:9e:2e:51:9e:fd:a7:24:9f:27:36:30:6e:
                    98:33:88:91:24:85:c5:3e:4c:c3:5c:54:2f:f6:0d:
                    2c:53:0e:0e:34:4d:64:05:bb:1e:88:e8:ac:1a:34:
                    82:d6:98:20:95:ef:21:b9:12:b8:5e:e5:2a:4b:0b:
                    bd:cf:ee:26:2d:2e:87:5a:c3:7b:5b:84:34:0e:48:
                    68:8d:cd:7d:a3:2f:a3:9b:b3:30:81:d0:26:22:85:
                    94:83:fe:da:2a:32:42:1d:24:1d:3b:1a:a6:a2:4b:
                    90:c6:f8:a6:19:57:62:46:91:f2:3f:8e:12:44:9c:
                    55:4a:02:cc:0b:85:16:2e:57:eb:9d:76:fd:47:e2:
                    d0:9a:cc:6f:79:83:dc:7f:eb:46:d6:d0:fa:56:e3:
                    83:8d:81:f1:99:61:1f:fd:23:ad:cc:79:43:82:99:
                    48:e7:3b:ef:7c:a4:42:50:35:e4:ba:d1:35:b2:97:
                    d6:01:fd:89:37:01:e3:a7:14:2f:70:e2:94:7e:8c:
                    47:0e:ae:03:24:6c:91:85:24:61:57:08:99:46:a7:
                    e7:bf:95:5b:28:ac:bc:d0:a1:db:1f:30:c7:81:79:
                    ac:ec:9c:06:16:bd:6e:c5:ef:58:de:57:1a:3a:62:
                    e2:9b:d2:b3:5d:29:9e:77:4b:bb:2d:84:4b:a1:ee:
                    94:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:17:45:20:02:A9:8F:34:CF:CB:81:33:31:CF:A9:2A:C4:7A:3D:1F
            X509v3 Authority Key Identifier:
                keyid:B3:EC:1F:F6:AD:55:2A:A1:6E:E1:01:95:64:BA:D9:F7:61:FD:B5:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-wf9q1VKqFu4QGVZLrZ92H9tdg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:bb:77:c6:f9:a7:50:d9:43:dd:38:cb:5e:5e:61:32:6f:18:
         56:b1:2a:0f:41:d4:b1:66:e3:07:36:13:d4:a2:4e:67:90:f0:
         4c:6c:ab:67:5f:81:b2:ea:8e:73:ed:10:aa:60:2d:78:c7:64:
         07:fa:30:d8:13:71:57:01:77:88:1c:39:d3:f1:03:a1:97:c4:
         b8:8f:70:b1:97:9b:db:49:d0:8c:ca:3c:c6:8e:56:42:e6:1f:
         da:a2:c3:a1:7f:29:96:eb:b5:af:4f:c9:f9:b9:80:d1:4a:49:
         ce:83:a9:65:07:f8:d5:57:d6:9b:44:6d:a0:8e:31:35:1d:5d:
         ed:3b:9b:c6:03:c2:ba:8c:f9:49:5d:52:05:a1:a9:f5:8c:2e:
         f0:f6:57:6b:dc:d2:b5:8d:3b:ee:13:91:02:99:1d:11:16:e3:
         4b:1d:a7:60:f4:39:96:1a:0f:ad:99:d5:62:a0:22:d8:1d:0f:
         2b:d2:b8:ad:50:71:9d:74:0d:43:85:4a:32:ea:50:3c:7c:28:
         64:dd:51:d0:60:99:25:4f:5f:0d:82:a9:91:03:69:cc:d1:66:
         f4:2e:72:23:0d:cf:51:79:a5:50:44:4b:72:7a:8c:50:03:47:
         a3:a9:d0:55:9a:bd:57:b0:d6:3c:54:2c:80:24:0d:e7:6e:7e:
         e5:54:34:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:04:11 2026 by rpki-client