Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft
File:                     WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft (raw, json)
Hash identifier:          yVubeUkPJgwW4EkWoVS3WssLp3UyrlM3uRKColdS1fw=
Subject key identifier:   21:3D:95:5E:27:D7:03:06:62:FC:93:4A:94:7B:C4:B0:92:14:87:54
Authority key identifier: 59:CA:0E:D6:B9:6B:70:C2:9B:3D:D8:E4:EC:59:8E:A1:2E:0D:C2:E6
Certificate issuer:       /CN=A91C7AB9/serialNumber=59CA0ED6B96B70C29B3DD8E4EC598EA12E0DC2E6
Certificate serial:       01C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WcoO1rlrcMKbPdjk7FmOoS4NwuY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft
Manifest number:          01BB
Signing time:             Sun 05 Apr 2026 03:29:45 +0000
Manifest this update:     Sun 05 Apr 2026 03:29:45 +0000
Manifest next update:     Sun 12 Apr 2026 03:29:45 +0000
Files and hashes:         1: WcoO1rlrcMKbPdjk7FmOoS4NwuY.crl (hash: F1XoGTqTUoe8Jo2fE9fBvYVhEVTd6ICyO68xam+bvRg=)
                          2: 7CF0A45404DF11F0B877A115C4F9AE02.roa (hash: 3zvmMVyOd3Cbubn7cAeWSSyiDSHBJieehrUFUeq/rLk=)
                          3: 5CB841E69B1411EEA456FE83C4F9AE02.roa (hash: vuhGbAXmdFyZHU5zcn6qI6D4hSXtuQyTQbfw33B7PYM=)
                          4: 321296E212E711F1ABE68E4F0D3D8C67.roa (hash: fLV89AyiqIKtRsF5UkgoIwTy20rGQz1nx0VUvYpw5g0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.crl
                          rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WcoO1rlrcMKbPdjk7FmOoS4NwuY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 03:29:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 455 (0x1c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7AB9, serialNumber=59CA0ED6B96B70C29B3DD8E4EC598EA12E0DC2E6
        Validity
            Not Before: Apr  5 03:29:45 2026 GMT
            Not After : Apr 12 03:29:45 2026 GMT
        Subject: CN=69d1d729-1769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9a:0d:d6:b3:cf:a0:68:9e:e9:c0:87:67:b7:
                    68:eb:de:5c:1f:75:95:e9:e7:59:d1:63:cf:81:72:
                    eb:af:fa:aa:3b:51:62:dd:03:02:4e:29:ba:5d:a9:
                    22:3d:6c:37:37:16:ad:22:f9:6e:d6:2e:c9:ed:3f:
                    32:4a:4f:de:88:82:1a:32:03:47:a1:d3:11:1b:01:
                    56:e6:d9:66:89:7f:93:af:ab:c1:7b:c0:be:a8:c1:
                    28:78:69:7f:80:af:51:c8:04:16:78:06:12:13:a0:
                    bb:06:b6:4f:f7:5a:c4:1d:62:99:df:fd:ed:db:c9:
                    bd:80:ef:35:4a:6a:81:ac:ca:df:fb:48:7a:6c:22:
                    1a:c8:93:c0:b6:81:9d:ac:6e:e6:2e:5e:b1:74:19:
                    95:b9:ff:12:30:cd:64:f2:7e:b9:3c:c0:98:f3:c2:
                    e2:7a:c3:03:42:f4:57:e0:ee:8f:79:61:67:bc:55:
                    c3:1a:88:e3:25:63:e7:b3:d0:ab:bd:ce:a2:af:09:
                    a2:61:1b:70:e1:00:e6:d2:d5:e1:25:5e:d2:4e:21:
                    72:4d:85:ab:d7:c0:63:52:14:4d:2e:1c:94:ff:c5:
                    59:f1:a4:8e:2d:22:dd:c5:40:d2:2a:6c:73:13:55:
                    d7:72:37:24:06:9d:d1:41:44:6e:56:7a:42:c3:4b:
                    84:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:3D:95:5E:27:D7:03:06:62:FC:93:4A:94:7B:C4:B0:92:14:87:54
            X509v3 Authority Key Identifier:
                keyid:59:CA:0E:D6:B9:6B:70:C2:9B:3D:D8:E4:EC:59:8E:A1:2E:0D:C2:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WcoO1rlrcMKbPdjk7FmOoS4NwuY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:36:3b:eb:19:3f:bd:93:f2:04:f0:4b:5b:48:80:6d:04:1d:
         a3:d4:13:3c:be:6a:e3:d6:94:3f:71:25:bb:f0:e8:04:34:1f:
         a8:cb:b7:52:2c:f6:dc:e2:3b:65:72:19:37:56:a0:ab:fd:11:
         77:0f:81:ef:44:01:bb:a3:39:f3:4b:8c:fe:86:37:c1:25:99:
         11:47:3d:a3:a9:c8:1c:e0:4c:d6:30:c1:a2:40:4c:ec:5b:6f:
         02:9a:41:12:88:99:0b:54:b0:dd:5c:40:50:c9:fe:a4:0c:a8:
         69:84:b3:3c:8d:60:ed:2b:e0:5a:e8:38:46:06:0c:3d:79:3c:
         e0:fe:a1:c9:5b:b9:de:7c:2e:db:3e:88:44:fb:0b:a5:8a:01:
         48:94:e2:cc:c6:ee:68:c9:dc:69:6a:b2:a4:40:9b:61:78:d8:
         a9:b5:78:f2:1a:fb:b7:bc:b4:dd:6e:a9:a4:8d:b5:a1:62:1e:
         14:19:50:dc:4e:28:a9:97:96:5b:b4:93:0c:31:34:f7:76:03:
         f7:ab:39:fb:92:5e:f3:ce:4a:a0:96:52:09:5e:34:9b:a9:a2:
         01:82:ab:22:45:1c:b0:aa:1b:67:97:45:7e:8c:df:47:d0:17:
         ae:54:a2:2f:d7:d4:dd:ef:b5:30:11:2a:ac:f6:85:95:74:6d:
         6e:d3:ac:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:29:11 2026 by rpki-client