Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft
File:                     WKDd0CVVyDdIbVVDUYbcxXahKD4.mft (raw, json)
Hash identifier:          GkcXC7Cohu7ZVxoqLB0cvVPPQAD7YAWoZVuJTbzdBwY=
Subject key identifier:   F1:57:4D:99:6D:0D:25:DD:B9:51:4C:94:FE:B0:14:F7:12:C5:6F:5C
Authority key identifier: 58:A0:DD:D0:25:55:C8:37:48:6D:55:43:51:86:DC:C5:76:A1:28:3E
Certificate issuer:       /CN=A91E4C30/serialNumber=58A0DDD02555C837486D55435186DCC576A1283E
Certificate serial:       026F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft
Manifest number:          025A
Signing time:             Fri 13 Mar 2026 01:33:55 +0000
Manifest this update:     Fri 13 Mar 2026 01:33:54 +0000
Manifest next update:     Fri 20 Mar 2026 01:33:54 +0000
Files and hashes:         1: WKDd0CVVyDdIbVVDUYbcxXahKD4.crl (hash: AinhXw24uX8pYOsIwksYsLuDkUnUW76s8M9c0OKSbqA=)
                          2: 58A53DF483EB11F083FC5148C4F9AE02.roa (hash: 0AcNJYbPABCo7geahEBKTRdq6wGpuolAL2JTEM7M9Jk=)
                          3: 8C48B22C47E711EE91530D28C4F9AE02.roa (hash: lA0GUtoywdP3W0s4fPvZbdcVPY5+3iGjlHV5SalUa/g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.crl
                          rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Mar 2026 01:33:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 623 (0x26f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4C30, serialNumber=58A0DDD02555C837486D55435186DCC576A1283E
        Validity
            Not Before: Mar 13 01:33:54 2026 GMT
            Not After : Mar 20 01:33:54 2026 GMT
        Subject: CN=69b36983-1aef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:4e:76:3b:7a:91:3f:6a:49:81:99:2d:af:d0:
                    91:cb:42:37:31:a0:5a:37:6b:38:65:83:d3:71:42:
                    df:6f:6a:06:d6:14:9d:a5:58:ae:24:4c:85:f2:11:
                    c5:42:f0:85:b8:da:8c:3a:f9:08:ff:6e:4d:b5:7a:
                    a6:73:45:9e:89:fe:44:03:17:27:14:23:98:0c:05:
                    ae:56:9d:15:1c:0e:72:b2:11:a5:61:91:8c:7a:bf:
                    35:f5:70:0e:c7:78:1b:5b:45:b5:de:15:83:c2:07:
                    2a:c6:cd:0d:da:54:5e:7b:aa:02:e6:a4:de:cf:17:
                    b5:1e:72:6b:b5:21:57:98:0f:fe:64:5e:22:ab:06:
                    d7:52:3f:e3:f7:f7:ce:71:29:62:d7:c5:a8:4d:09:
                    59:63:64:9d:9e:3f:b9:e6:25:42:a6:ff:c4:77:54:
                    04:2e:23:c8:6b:6f:08:4c:1c:1a:a8:1d:ab:d3:f0:
                    7e:d1:e8:a4:ae:b8:0f:db:b9:72:6c:f2:4d:95:47:
                    1b:ca:a7:7f:fc:28:2c:2e:03:09:9c:32:43:b4:c4:
                    88:57:e9:63:39:3c:12:80:b8:a3:77:06:51:29:2d:
                    31:28:40:92:5c:89:6a:c2:8c:e5:d4:66:eb:1e:c3:
                    df:d5:61:40:07:8a:45:6a:b9:57:4c:37:78:8b:6b:
                    1a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:57:4D:99:6D:0D:25:DD:B9:51:4C:94:FE:B0:14:F7:12:C5:6F:5C
            X509v3 Authority Key Identifier:
                keyid:58:A0:DD:D0:25:55:C8:37:48:6D:55:43:51:86:DC:C5:76:A1:28:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:50:e1:30:33:dc:4e:ab:e5:e2:3d:22:b8:85:14:ad:d8:c4:
         45:f2:ee:78:f2:bd:5b:28:91:89:6b:8e:1a:a3:70:c1:85:c0:
         44:9d:2b:05:fc:64:8a:4a:d3:dc:4e:e6:d4:15:c2:50:61:6e:
         de:9d:60:8f:54:a9:9e:ca:7a:d4:94:c5:b6:58:e6:2c:fd:ac:
         55:89:e8:2c:a2:e3:e4:4a:33:2b:be:67:0c:25:4b:88:34:4f:
         ad:9d:38:fc:6c:84:97:c8:16:1a:ec:b7:f6:f8:19:45:55:c6:
         26:61:20:d2:04:d5:d5:43:b1:2d:9f:43:1a:58:dd:de:d2:fb:
         a6:a7:79:d0:5c:f8:1d:35:83:ec:bc:41:7e:06:00:e5:c7:f1:
         3b:b9:88:8a:63:7e:f7:c1:c5:54:b2:a6:e1:b5:55:56:b2:bc:
         c9:7e:1e:43:90:1b:1e:31:62:38:3f:c2:e4:93:80:de:87:50:
         96:fa:ac:de:e6:f7:6f:43:17:74:88:c7:79:44:56:cf:1c:bc:
         9b:d0:af:70:8f:e4:e5:a3:82:1e:b6:0e:39:48:9e:be:ec:a8:
         1a:34:bd:01:6f:19:3e:d2:01:e1:ed:bd:a6:84:7e:f1:2f:5a:
         79:15:0c:53:05:c3:09:49:a9:37:e9:15:34:07:9a:2e:f2:c9:
         3b:8f:b3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 20:48:22 2026 by rpki-client