Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft
File:                     wm9G_ZlSs686fXFd4b86YeJceYo.mft (raw, json)
Hash identifier:          POSKBMpTli551hAiVkKjReNPSYXOM/ckdwNaKKAMa6o=
Subject key identifier:   25:53:04:E3:23:93:5B:81:0E:6E:32:8E:71:A1:49:6B:A5:97:36:51
Authority key identifier: C2:6F:46:FD:99:52:B3:AF:3A:7D:71:5D:E1:BF:3A:61:E2:5C:79:8A
Certificate issuer:       /CN=A9117CE3/serialNumber=C26F46FD9952B3AF3A7D715DE1BF3A61E25C798A
Certificate serial:       014F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft
Manifest number:          0146
Signing time:             Sun 01 Mar 2026 06:22:56 +0000
Manifest this update:     Sun 01 Mar 2026 06:22:55 +0000
Manifest next update:     Sun 08 Mar 2026 06:22:55 +0000
Files and hashes:         1: wm9G_ZlSs686fXFd4b86YeJceYo.crl (hash: GP/bSe2InyGqzhrpKuSiuObOQUyph+VUX3TroE6bBGI=)
                          2: 39032028BB8211F0ACBBE862C4F9AE02.roa (hash: GaLLwV5AtE+d32/hOzBxSXpg7cSHrokuqZVF2wvFzkM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.crl
                          rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:22:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 335 (0x14f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9117CE3, serialNumber=C26F46FD9952B3AF3A7D715DE1BF3A61E25C798A
        Validity
            Not Before: Mar  1 06:22:55 2026 GMT
            Not After : Mar  8 06:22:55 2026 GMT
        Subject: CN=69a3db40-d48b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e3:be:89:17:45:53:0b:67:2e:d1:b2:64:fd:
                    eb:ff:d8:8b:4d:2a:18:34:b0:6f:29:04:c1:41:41:
                    1f:7c:d2:88:e1:39:2d:75:86:6d:69:ba:0e:da:98:
                    8d:1a:48:e2:53:d5:70:bc:66:ff:fd:70:d5:d2:1c:
                    24:8b:b4:0c:31:16:d9:07:18:fd:47:b7:7e:59:17:
                    3f:83:c4:94:5a:b9:c1:3c:9b:61:39:4e:b6:31:e2:
                    5c:05:e3:15:a2:ee:ae:25:da:f0:07:77:1a:c0:6b:
                    ed:3b:56:3a:ac:89:e6:29:f0:c0:48:d1:9e:d4:49:
                    8c:4a:dc:af:95:83:8a:82:87:e5:ce:6d:eb:e2:3c:
                    a7:fb:78:4d:8e:0a:1f:74:e7:6b:74:57:fc:0f:9f:
                    6a:c4:b0:ff:bf:29:64:5c:0c:76:8c:55:0c:0a:a6:
                    15:ae:e3:05:74:47:fc:0d:6c:71:7b:5f:3b:6f:2b:
                    f4:b4:25:39:cd:49:98:50:7f:37:37:26:6f:1e:ee:
                    51:87:88:8a:cf:6d:f2:0c:78:6c:a2:a3:7e:5d:7b:
                    7f:4b:ac:cf:32:26:24:c9:04:58:ef:b5:e8:7a:f5:
                    93:ab:65:88:28:67:40:76:be:a9:b6:3e:bc:42:67:
                    67:98:a2:85:5c:0f:16:c1:64:cf:5b:e2:ef:92:ee:
                    d6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:53:04:E3:23:93:5B:81:0E:6E:32:8E:71:A1:49:6B:A5:97:36:51
            X509v3 Authority Key Identifier:
                keyid:C2:6F:46:FD:99:52:B3:AF:3A:7D:71:5D:E1:BF:3A:61:E2:5C:79:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:35:06:e4:ff:cf:6d:b0:f7:b3:39:7e:0b:21:3a:31:8b:b0:
         34:92:fd:a8:2d:e7:df:fc:fb:da:1b:fe:15:a3:ad:78:c7:48:
         d5:61:96:32:52:74:bc:ff:95:4f:e7:f1:a6:35:e1:bf:f6:88:
         3d:18:46:c7:9c:fb:c8:f1:e6:0e:32:8f:a8:23:3d:23:92:e6:
         38:53:8c:90:19:4a:69:21:12:25:f6:3b:34:54:e9:62:ce:d5:
         bc:8f:93:b6:3b:2b:23:6f:81:d1:c0:d1:8e:7f:a1:04:f9:73:
         29:b7:32:c3:88:42:42:03:31:16:47:66:7b:21:dc:6b:aa:24:
         b0:86:52:f7:c3:1b:ef:f7:06:9c:9a:3a:bf:4a:05:9f:11:56:
         8b:cb:fc:a1:b0:67:3d:68:8e:e8:7c:eb:d1:70:a6:55:d7:f6:
         ef:04:41:b0:f3:a0:56:de:2d:f4:88:3f:c7:fa:3e:6d:de:58:
         cf:cf:07:18:09:2c:49:b8:dc:f4:ee:65:a0:3b:02:f3:c7:cd:
         be:db:96:10:d1:6f:61:34:5f:bf:ae:4f:70:0f:27:49:31:bf:
         f1:01:fe:02:7f:e9:27:85:d0:db:bd:28:29:90:f8:02:a0:ec:
         fe:de:ae:d6:ec:a5:ba:bc:03:d5:15:64:7f:ef:c8:e3:e9:2e:
         9c:12:34:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:52 2026 by rpki-client