Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.mft
File:                     wUIqDEz_JI1Rc1jr33tOgCuswOc.mft (raw, json)
Hash identifier:          iikiCZlmRnZ1FhWl00PxfKGt9XkjmBPlCE34FTrDQtU=
Subject key identifier:   E9:8C:64:82:41:0C:D5:00:CC:44:E6:82:82:A7:50:71:3B:60:4A:10
Authority key identifier: C1:42:2A:0C:4C:FF:24:8D:51:73:58:EB:DF:7B:4E:80:2B:AC:C0:E7
Certificate issuer:       /CN=A91EB45A/serialNumber=C1422A0C4CFF248D517358EBDF7B4E802BACC0E7
Certificate serial:       353E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUIqDEz_JI1Rc1jr33tOgCuswOc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.mft
Manifest number:          3531
Signing time:             Sat 04 Apr 2026 15:02:29 +0000
Manifest this update:     Sat 04 Apr 2026 15:02:29 +0000
Manifest next update:     Sat 11 Apr 2026 15:02:29 +0000
Files and hashes:         1: wUIqDEz_JI1Rc1jr33tOgCuswOc.crl (hash: gUAm/Xd5wWKS1NEg121nHDKHqifAzmIqfPzooMLxYLs=)
                          2: 17BB4C20F17E11EAA3CC597BC4F9AE02.roa (hash: 19iYpTQxec7phX7aSuAR7eVYx46KurWTZFsnfBvWqQo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.crl
                          rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUIqDEz_JI1Rc1jr33tOgCuswOc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 15:02:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13630 (0x353e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB45A, serialNumber=C1422A0C4CFF248D517358EBDF7B4E802BACC0E7
        Validity
            Not Before: Apr  4 15:02:29 2026 GMT
            Not After : Apr 11 15:02:29 2026 GMT
        Subject: CN=69d12805-f6a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:96:52:eb:20:76:7c:a7:4e:57:1d:be:cc:fd:
                    49:0b:56:a5:f3:48:dd:93:63:84:e5:d4:f0:32:5e:
                    0d:b2:5a:d1:d6:8e:25:67:f5:32:db:22:4c:2c:96:
                    0b:9c:ea:b1:6c:07:10:88:21:69:a6:08:af:21:fe:
                    50:25:9a:71:59:7b:69:8b:67:58:90:c5:a2:18:83:
                    7b:e1:3f:87:6c:de:6e:cb:c4:32:0a:51:dc:3b:a2:
                    95:f1:fd:90:54:e5:ff:ae:d4:02:2f:2e:47:07:52:
                    cd:fd:56:ce:8e:4a:b0:91:fa:ca:35:b0:e7:30:bb:
                    b6:c4:0b:46:a8:e9:9b:8a:45:7d:42:a3:61:8c:55:
                    61:51:61:13:1b:6c:19:00:bd:c0:28:06:52:3b:fd:
                    07:b0:d5:5e:a3:f6:ad:98:e2:4b:22:ad:fa:29:24:
                    8d:16:02:cf:cb:59:ca:58:ad:0c:9b:11:a4:ec:b5:
                    5a:66:60:48:24:6f:7c:1a:9a:16:a3:ac:6f:49:89:
                    8d:81:27:1c:32:07:2f:60:b1:b7:70:dd:fe:77:9e:
                    ee:ae:7b:40:8f:9b:f6:79:29:18:75:5f:84:84:b0:
                    9f:aa:f1:46:27:b6:5a:8d:28:76:a8:aa:55:72:46:
                    4e:05:ac:8b:b5:ef:1c:c4:66:50:3f:df:ef:36:33:
                    e6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:8C:64:82:41:0C:D5:00:CC:44:E6:82:82:A7:50:71:3B:60:4A:10
            X509v3 Authority Key Identifier:
                keyid:C1:42:2A:0C:4C:FF:24:8D:51:73:58:EB:DF:7B:4E:80:2B:AC:C0:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUIqDEz_JI1Rc1jr33tOgCuswOc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:22:c6:5b:e8:d1:a8:e3:d9:f9:4b:c2:c2:11:3e:d6:4c:b7:
         bb:c1:62:ce:5f:9e:f3:a8:21:2a:ce:e5:18:69:50:ee:ea:65:
         8e:e1:48:2f:a3:5a:37:c6:f4:86:4c:f8:14:9b:5e:d9:6a:b6:
         5f:9f:5b:b9:52:cb:b9:1b:ff:aa:57:0e:72:da:94:8c:7e:64:
         17:52:fa:f2:9f:d4:17:48:6f:b0:a0:8b:cd:c1:a2:7f:0e:f4:
         57:23:12:1a:7c:ab:9a:27:70:db:11:5d:83:64:89:6f:8e:e7:
         71:54:d3:75:31:80:17:87:92:19:db:b6:e2:03:e2:b2:52:c3:
         51:e1:45:f4:77:e1:75:d6:fd:b3:ae:a7:ad:ab:32:c4:42:ea:
         d0:68:df:9f:91:0a:4e:e5:01:d8:eb:c2:c5:c9:99:0a:bb:9f:
         c4:11:e6:5e:2c:d2:cc:26:66:b0:57:5d:70:8d:85:96:f0:5f:
         7f:78:ce:c3:82:bb:d7:f7:b1:5f:d7:e3:a6:b9:23:e2:bf:02:
         f2:46:6a:01:bc:38:45:23:1d:94:ca:8f:45:e6:21:7c:b6:bd:
         90:54:12:45:b2:35:ec:86:27:c0:83:5d:bd:37:19:d7:25:72:
         e5:03:e5:14:21:5c:2b:25:90:fd:e9:80:dd:c4:3d:de:cf:7c:
         ef:d5:d5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:39:28 2026 by rpki-client