Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.mft
File:                     wFcRnKRd0xQhXGHgm_hx1Iq7X5s.mft (raw, json)
Hash identifier:          ErkkEoHaKe9HNQHYpl2oiGcPjIa1gewCXg9A9J/nkSg=
Subject key identifier:   A6:1D:04:E5:24:F0:8B:B7:AD:8D:9C:6E:A3:6E:D7:D0:16:88:F5:F7
Authority key identifier: C0:57:11:9C:A4:5D:D3:14:21:5C:61:E0:9B:F8:71:D4:8A:BB:5F:9B
Certificate issuer:       /CN=A91B0B65/serialNumber=C057119CA45DD314215C61E09BF871D48ABB5F9B
Certificate serial:       11CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.mft
Manifest number:          11B7
Signing time:             Sat 04 Apr 2026 17:05:11 +0000
Manifest this update:     Sat 04 Apr 2026 17:05:11 +0000
Manifest next update:     Sat 11 Apr 2026 17:05:11 +0000
Files and hashes:         1: wFcRnKRd0xQhXGHgm_hx1Iq7X5s.crl (hash: 1dvwQEvk3wvucgr98Inl0CmFSsOv75Uez9gSeG6dgc8=)
                          2: CA7A6F1A157C11E9BB547B7AC4F9AE02.roa (hash: eh77xy/M1nZdj0GwmtoZv3V9lfazohZ6e7A9i7EqAfo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.crl
                          rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 17:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4558 (0x11ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0B65, serialNumber=C057119CA45DD314215C61E09BF871D48ABB5F9B
        Validity
            Not Before: Apr  4 17:05:11 2026 GMT
            Not After : Apr 11 17:05:11 2026 GMT
        Subject: CN=69d144c7-f894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9e:f1:38:70:29:35:22:90:30:ae:aa:b2:dc:
                    59:86:1e:a3:2c:48:40:17:1d:5d:ab:e6:80:65:ac:
                    50:d9:48:86:ce:c4:df:5b:c4:bd:81:10:25:a5:ca:
                    ea:09:0b:92:e4:a8:39:64:42:a0:c9:a7:70:0d:3c:
                    2c:1d:aa:9d:ab:ab:8a:7a:8f:76:c6:9d:89:fb:0f:
                    5d:3d:f8:85:9b:86:42:5e:85:7e:54:7d:ee:a2:14:
                    e4:e7:2f:c2:d5:82:b2:c6:d7:40:b0:2e:47:0e:94:
                    37:b6:c1:32:fd:12:9c:f8:c1:04:3f:d8:ba:bc:93:
                    2b:bd:2d:f6:2c:d1:d4:81:03:9d:b7:14:b2:2a:da:
                    b5:ee:4d:b9:3b:cd:e4:da:09:ba:37:86:cb:69:96:
                    6c:a5:77:ec:75:18:c5:44:73:81:69:12:32:e3:34:
                    ef:84:06:9d:7e:31:2b:bb:13:ab:e0:a2:62:9d:6d:
                    89:6c:f7:ff:06:de:6d:e0:9c:62:a8:de:3b:b4:69:
                    16:28:69:34:52:65:ce:a3:cf:4b:3f:64:3d:fe:cb:
                    bb:84:66:04:40:9f:27:07:35:1e:fb:c5:50:68:08:
                    b0:7f:aa:fc:6f:99:d0:ad:37:32:fe:46:a4:eb:57:
                    64:a3:b0:f4:3a:33:0e:d3:64:a7:b8:6c:e4:67:3f:
                    3e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:1D:04:E5:24:F0:8B:B7:AD:8D:9C:6E:A3:6E:D7:D0:16:88:F5:F7
            X509v3 Authority Key Identifier:
                keyid:C0:57:11:9C:A4:5D:D3:14:21:5C:61:E0:9B:F8:71:D4:8A:BB:5F:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:fe:eb:9a:2f:57:90:db:87:a1:ee:ac:41:28:2d:18:70:33:
         8f:f9:2f:24:df:ad:ea:1e:73:2e:cd:e2:c2:27:c5:1f:f3:a8:
         96:13:70:f5:cf:5d:54:2e:21:54:c6:0d:7f:76:86:8d:cb:72:
         70:4f:36:0e:06:e6:71:6d:a9:4d:18:22:68:cd:c0:0f:fb:45:
         70:cb:08:7a:62:8a:cd:8e:7d:f6:6a:ff:8f:f1:76:0f:dd:fe:
         e4:d0:d7:e7:ba:27:59:14:cf:5c:27:71:91:8c:5e:af:95:74:
         63:ad:88:29:78:2e:41:4f:69:a4:d8:ad:de:38:04:0c:f4:4b:
         c6:92:14:4a:04:6b:34:d8:75:80:2c:60:22:1c:16:57:e2:69:
         6d:ff:83:b7:80:47:66:94:3b:4a:d6:ad:97:97:c5:42:3a:35:
         c8:09:38:75:45:67:04:da:e2:e8:0b:f8:3c:08:b3:24:22:e3:
         47:53:a5:db:77:46:66:de:fb:cb:a2:a8:73:42:25:be:22:26:
         7d:0d:1a:3c:f9:d0:f0:8b:c6:03:06:7d:a2:df:9b:73:83:41:
         a1:c8:90:f9:d5:9f:01:41:78:7d:63:f6:fe:a7:f1:e2:3d:2d:
         e4:84:ba:77:66:c7:f1:7e:26:2d:f2:cd:80:d3:d5:e7:ad:6f:
         32:4e:68:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:24 2026 by rpki-client