Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.mft
File:                     wUIqDEz_JI1Rc1jr33tOgCuswOc.mft (raw, json)
Hash identifier:          B5xCpoHXj2oOgOYEwh8456OS5xS6De+y9zrVGznUR5U=
Subject key identifier:   47:16:E3:98:EF:BD:52:3F:65:83:45:4C:1D:88:08:4A:52:94:E6:0F
Authority key identifier: C1:42:2A:0C:4C:FF:24:8D:51:73:58:EB:DF:7B:4E:80:2B:AC:C0:E7
Certificate issuer:       /CN=A91EB45A/serialNumber=C1422A0C4CFF248D517358EBDF7B4E802BACC0E7
Certificate serial:       3555
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUIqDEz_JI1Rc1jr33tOgCuswOc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.mft
Manifest number:          3548
Signing time:             Wed 20 May 2026 15:04:46 +0000
Manifest this update:     Wed 20 May 2026 15:04:46 +0000
Manifest next update:     Wed 27 May 2026 15:04:46 +0000
Files and hashes:         1: wUIqDEz_JI1Rc1jr33tOgCuswOc.crl (hash: TCfrjy5qkmZ4Kx88q9pWOxqXeY8KEUe8QboKkIgvnVc=)
                          2: 17BB4C20F17E11EAA3CC597BC4F9AE02.roa (hash: 19iYpTQxec7phX7aSuAR7eVYx46KurWTZFsnfBvWqQo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.crl
                          rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUIqDEz_JI1Rc1jr33tOgCuswOc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 15:04:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13653 (0x3555)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB45A, serialNumber=C1422A0C4CFF248D517358EBDF7B4E802BACC0E7
        Validity
            Not Before: May 20 15:04:46 2026 GMT
            Not After : May 27 15:04:46 2026 GMT
        Subject: CN=6a0dcd8e-61e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6c:b2:57:c2:63:02:97:c2:ef:9a:dd:42:a7:
                    c8:a8:c7:24:76:d8:00:b8:0f:66:f1:57:32:ac:6d:
                    a9:12:0b:80:b5:ca:a3:3d:ff:64:77:34:f0:13:b0:
                    ad:af:75:d9:e5:44:0f:ff:12:ad:77:1a:2c:03:2d:
                    78:f8:d8:ec:22:57:8a:11:02:4b:83:97:4f:ff:0c:
                    71:ee:90:ae:3e:66:c4:2b:34:b1:c2:1b:82:37:ce:
                    6c:00:b4:cc:ca:fd:54:83:8e:a6:d1:58:43:06:8f:
                    03:84:20:68:7e:e4:7b:58:9f:5c:11:8e:8d:1f:9e:
                    46:a4:08:3d:9c:c4:4e:45:1e:96:8a:ef:42:b5:ef:
                    8b:49:d9:3f:ba:12:48:3d:7f:b9:a9:6c:ef:b5:a5:
                    c8:97:bb:a3:9d:5d:72:78:2b:4c:8d:53:dd:71:d1:
                    db:09:14:35:b1:a8:e9:de:e6:a9:d8:5d:8a:cf:31:
                    82:60:44:c8:e6:f3:6d:fa:3d:81:79:de:53:c1:b6:
                    0f:e4:e1:1b:7c:42:7b:04:61:e9:29:78:9e:2c:d4:
                    9e:ef:59:36:4c:83:a5:a5:7c:e1:f7:8e:3d:b4:3c:
                    93:2a:b9:7b:f7:1d:33:88:a8:5e:52:7b:d2:d5:07:
                    c5:58:dd:98:71:8d:b9:40:39:ec:f2:8e:98:3f:8e:
                    81:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:16:E3:98:EF:BD:52:3F:65:83:45:4C:1D:88:08:4A:52:94:E6:0F
            X509v3 Authority Key Identifier:
                keyid:C1:42:2A:0C:4C:FF:24:8D:51:73:58:EB:DF:7B:4E:80:2B:AC:C0:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUIqDEz_JI1Rc1jr33tOgCuswOc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:9a:40:41:02:86:76:ce:42:66:e9:c6:ba:96:02:74:3f:53:
         58:38:e4:73:40:bb:a7:6a:e0:2c:ed:0d:6a:b8:1f:33:1d:af:
         9e:99:dd:9e:94:3e:c7:dd:8e:ee:79:5b:52:5d:69:b7:66:9c:
         73:92:c0:2c:c0:6c:bd:c8:eb:cd:e5:62:5e:57:fd:19:0e:b3:
         ba:94:ef:7a:ff:59:c9:0f:3f:01:ca:1b:0a:b6:00:f5:06:5d:
         51:94:b3:e4:17:c7:b1:49:df:c7:b6:ae:92:1f:51:5b:1e:97:
         6e:65:64:54:4b:3f:f8:7f:8f:78:ec:72:77:63:f5:1d:52:4d:
         33:11:1e:50:f8:08:9e:12:48:9e:b0:b4:f6:ce:17:82:7e:35:
         69:89:8b:d5:43:75:f1:25:99:a9:5c:f4:04:b2:0a:f6:aa:66:
         88:cd:3b:cb:dc:ba:e8:0e:4d:a5:89:d9:a0:18:f8:87:f5:e2:
         03:eb:36:ec:cc:f2:97:b1:4f:e3:16:b3:a6:f6:e5:2c:e5:cf:
         e0:4e:1a:4d:41:9e:a4:ce:23:15:4b:08:3e:26:09:42:41:b9:
         8c:7b:09:f5:05:34:0c:88:3a:5f:18:eb:c7:31:4d:2b:96:36:
         ce:5d:d0:7e:3d:7a:ca:7c:de:57:ac:30:fc:c2:ec:93:33:1c:
         bf:e9:f3:7f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUI0NUExMTAvBgNVBAUTKEMxNDIyQTBDNENGRjI0OEQ1MTczNThFQkRGN0I0RTgw
MkJBQ0MwRTcwHhcNMjYwNTIwMTUwNDQ2WhcNMjYwNTI3MTUwNDQ2WjAYMRYwFAYD
VQQDEw02YTBkY2Q4ZS02MWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwGyyV8JjApfC75rdQqfIqMckdtgAuA9m8VcyrG2pEguAtcqjPf9kdzTwE7Ct
r3XZ5UQP/xKtdxosAy14+NjsIleKEQJLg5dP/wxx7pCuPmbEKzSxwhuCN85sALTM
yv1Ug46m0VhDBo8DhCBofuR7WJ9cEY6NH55GpAg9nMRORR6Wiu9Cte+LSdk/uhJI
PX+5qWzvtaXIl7ujnV1yeCtMjVPdcdHbCRQ1sajp3uap2F2KzzGCYETI5vNt+j2B
ed5TwbYP5OEbfEJ7BGHpKXieLNSe71k2TIOlpXzh9449tDyTKrl79x0ziKheUnvS
1QfFWN2YcY25QDns8o6YP46BtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEcW45jv
vVI/ZYNFTB2ICEpSlOYPMB8GA1UdIwQYMBaAFMFCKgxM/ySNUXNY6997ToArrMDn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjQ1QS8xRTQ0OEE0ODFE
QTExMUUyOUY1NjA3OTMwOEIwMkNEMi93VUlxREV6X0pJMVJjMWpyMzN0T2dDdXN3
T2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dVSXFERXpfSkkxUmMxanIzM3RPZ0N1c3dPYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QjQ1QS8xRTQ0OEE0ODFEQTExMUUyOUY1NjA3OTMwOEIwMkNEMi93VUlxREV6X0pJ
MVJjMWpyMzN0T2dDdXN3T2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAt5pAQQKGds5CZunGupYCdD9TWDjkc0C7p2rgLO0NargfMx2vnpndnpQ+x92O
7nlbUl1pt2acc5LALMBsvcjrzeViXlf9GQ6zupTvev9ZyQ8/AcobCrYA9QZdUZSz
5BfHsUnfx7aukh9RWx6XbmVkVEs/+H+PeOxyd2P1HVJNMxEeUPgInhJInrC09s4X
gn41aYmL1UN18SWZqVz0BLIK9qpmiM07y9y66A5NpYnZoBj4h/XiA+s27Mzyl7FP
4xazpvblLOXP4E4aTUGepM4jFUsIPiYJQkG5jHsJ9QU0DIg6XxjrxzFNK5Y2zl3Q
fj16ynzeV6ww/MLskzMcv+nzfw==
-----END CERTIFICATE-----
Generated at Thu May 21 10:22:54 2026 by rpki-client