Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.mft
File:                     WYUGlV49GgWTCLSexvcnjZpeGrg.mft (raw, json)
Hash identifier:          bNHRJgjVbrDs4PE6ex97hF79mx+eFwQMgaCPadhHZvc=
Subject key identifier:   5D:32:9B:0E:42:75:0E:37:0B:1A:3B:C1:0B:09:10:BE:44:5D:F1:13
Authority key identifier: 59:85:06:95:5E:3D:1A:05:93:08:B4:9E:C6:F7:27:8D:9A:5E:1A:B8
Certificate issuer:       /CN=A9124F2F/serialNumber=598506955E3D1A059308B49EC6F7278D9A5E1AB8
Certificate serial:       06B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYUGlV49GgWTCLSexvcnjZpeGrg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.mft
Manifest number:          06AD
Signing time:             Sun 01 Mar 2026 23:37:58 +0000
Manifest this update:     Sun 01 Mar 2026 23:37:56 +0000
Manifest next update:     Sun 08 Mar 2026 23:37:56 +0000
Files and hashes:         1: WYUGlV49GgWTCLSexvcnjZpeGrg.crl (hash: SLTfs5S7TKyRpFw2Bd+M98e9BaWd1XCVzs7M9woK9KU=)
                          2: 60A7536AC83311EC8981520CC4F9AE02.roa (hash: 19VJ89Wd480QdmWCQURR/KJT2q/aZmv6BYIrmQ1R6RY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.crl
                          rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYUGlV49GgWTCLSexvcnjZpeGrg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:37:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1721 (0x6b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9124F2F, serialNumber=598506955E3D1A059308B49EC6F7278D9A5E1AB8
        Validity
            Not Before: Mar  1 23:37:56 2026 GMT
            Not After : Mar  8 23:37:56 2026 GMT
        Subject: CN=69a4cdd5-f582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a3:c5:4d:82:d5:d8:d3:da:0d:60:eb:c8:f8:
                    e9:de:b8:cb:3a:e4:fe:2f:6b:fc:9c:fe:64:a0:ee:
                    37:0d:89:56:97:b8:e1:3e:d5:34:f3:d9:83:a0:a1:
                    73:02:10:bc:2f:6e:f2:33:47:4d:bf:45:d9:c9:fd:
                    fa:42:4a:56:6e:7b:8d:10:d4:48:5f:f7:ad:ce:1c:
                    14:b0:eb:e1:e2:be:82:91:b3:a1:75:99:95:f0:1a:
                    15:7b:f2:56:cd:ec:e9:4f:eb:fc:b9:42:7b:c0:3b:
                    c3:ac:dd:7c:3d:7a:f9:78:d0:68:00:44:5a:75:6a:
                    36:63:0b:ad:97:c8:0c:5c:b2:f4:5a:53:ed:67:63:
                    2f:46:e8:85:8a:ba:f4:c9:1e:f5:fb:6d:61:b6:66:
                    3b:9f:2c:02:38:2c:ae:1e:ce:a0:ca:d0:5d:72:fa:
                    fd:a4:0d:90:d8:b9:ef:77:7b:f5:87:21:76:86:de:
                    8b:49:af:93:51:6d:3d:01:8b:27:3b:32:93:c8:4c:
                    24:ed:64:50:5a:30:66:59:b9:bf:18:51:07:61:96:
                    b8:61:43:92:0b:9b:c5:09:b7:05:23:00:47:04:1c:
                    89:70:06:ff:0c:1b:4d:52:e7:60:d1:ff:5f:bc:64:
                    38:9b:5b:3f:29:f5:8f:c4:c1:ca:1c:53:0b:e8:e2:
                    2c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:32:9B:0E:42:75:0E:37:0B:1A:3B:C1:0B:09:10:BE:44:5D:F1:13
            X509v3 Authority Key Identifier:
                keyid:59:85:06:95:5E:3D:1A:05:93:08:B4:9E:C6:F7:27:8D:9A:5E:1A:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYUGlV49GgWTCLSexvcnjZpeGrg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:00:b6:8d:08:5c:cd:18:ad:46:33:84:a1:d7:b8:62:c3:78:
         6c:14:8e:22:50:94:af:b7:53:ca:2d:63:ab:3d:44:37:68:0e:
         a8:fd:6a:fb:99:b9:93:6a:5f:dc:14:51:f0:07:17:b9:52:8a:
         13:33:82:bd:f1:b7:70:c7:bb:8b:fb:d0:d3:d8:fe:d4:2e:e8:
         6d:d5:98:26:89:cc:c5:66:2e:af:fb:b6:6d:6e:0d:1a:24:07:
         ff:97:98:54:e0:b2:3b:51:32:2a:53:9d:ce:86:29:c5:2b:c7:
         26:bf:ed:d6:ed:80:66:78:e0:f9:21:de:b9:d1:fa:b7:31:d5:
         e6:93:3c:f1:72:f7:57:49:aa:11:3c:fa:68:27:f8:56:e3:81:
         26:3d:86:17:48:26:7e:a8:f1:d9:80:42:6b:ec:0d:89:92:a7:
         20:13:cc:3b:d2:d3:d0:e6:9f:77:80:df:a6:e9:a6:3c:fd:5a:
         fa:44:b5:39:49:fe:23:ab:13:9a:03:9f:cd:e9:c4:ec:e5:4f:
         b3:9d:8d:a2:31:8e:2f:4b:1d:bd:e1:aa:46:93:46:d4:a3:75:
         55:11:f4:1b:08:b5:90:f0:ea:57:cd:b7:43:a2:a6:f9:e7:28:
         53:4f:21:e6:86:a0:28:b1:21:68:24:c1:92:52:b4:a0:87:11:
         45:92:19:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:48:50 2026 by rpki-client