Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft
File:                     WjWLSErYf-ApwQHa5tLtgo2GBVM.mft (raw, json)
Hash identifier:          z6plS+tU+mMleALzdRbh8NlnIWSQHosOW8MIYY7z+Bk=
Subject key identifier:   C2:C6:77:80:79:CF:29:83:76:21:BA:7B:55:A0:84:F4:B3:81:4D:A3
Authority key identifier: 5A:35:8B:48:4A:D8:7F:E0:29:C1:01:DA:E6:D2:ED:82:8D:86:05:53
Certificate issuer:       /CN=A9125949/serialNumber=5A358B484AD87FE029C101DAE6D2ED828D860553
Certificate serial:       9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WjWLSErYf-ApwQHa5tLtgo2GBVM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft
Manifest number:          97
Signing time:             Sun 01 Mar 2026 08:47:08 +0000
Manifest this update:     Sun 01 Mar 2026 08:47:07 +0000
Manifest next update:     Sun 08 Mar 2026 08:47:07 +0000
Files and hashes:         1: WjWLSErYf-ApwQHa5tLtgo2GBVM.crl (hash: er4JHYnbCXZOYOun0EgQx+rrMsisPGbdXSWPzsQxkhE=)
                          2: D01462D636E611F090C5647FC4F9AE02.roa (hash: o2ClPvigt44EqHdI4QXa4+RC4H1zD8Ut65gPQzhhh7I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.crl
                          rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WjWLSErYf-ApwQHa5tLtgo2GBVM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:47:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158 (0x9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125949, serialNumber=5A358B484AD87FE029C101DAE6D2ED828D860553
        Validity
            Not Before: Mar  1 08:47:07 2026 GMT
            Not After : Mar  8 08:47:07 2026 GMT
        Subject: CN=69a3fd0c-08d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:68:0d:12:3b:11:aa:0a:69:e2:e2:c1:67:cd:
                    64:5a:67:17:06:a8:43:11:06:60:13:fe:e0:96:64:
                    70:27:9a:02:29:80:74:48:ad:a9:3f:46:59:4e:15:
                    00:59:9a:99:3d:91:dc:1f:e6:99:fe:03:d5:3f:32:
                    aa:52:32:e7:75:13:23:db:eb:56:df:a9:d6:10:ef:
                    23:f4:7d:99:b8:87:cd:c9:08:63:e1:bd:4a:86:fe:
                    95:84:4e:c3:24:61:47:9e:ec:0d:44:93:65:db:a6:
                    37:be:ff:49:61:4d:9b:3c:e3:b8:23:f8:22:e8:b5:
                    ab:82:29:6a:49:61:e8:68:ff:1d:0c:47:a2:4e:fd:
                    5b:61:17:dc:2d:d3:36:b1:72:95:67:fa:58:dc:85:
                    36:d0:40:5a:56:7f:89:fd:22:77:d8:cb:e2:9f:c6:
                    cf:47:0f:82:96:03:e6:11:fe:6a:13:d8:51:db:ba:
                    10:35:51:24:3e:ab:9d:81:6a:79:70:16:a8:f2:ba:
                    da:5c:ac:82:ed:cf:15:a7:32:c0:f5:5b:7e:bc:b9:
                    db:b9:4e:cd:70:d5:f8:b4:a9:6c:44:30:4e:59:16:
                    70:c6:de:e0:c8:77:16:cc:0e:40:99:db:c6:8d:b2:
                    25:62:f9:fb:2a:58:99:23:fb:e4:03:2f:6f:a0:68:
                    c0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C6:77:80:79:CF:29:83:76:21:BA:7B:55:A0:84:F4:B3:81:4D:A3
            X509v3 Authority Key Identifier:
                keyid:5A:35:8B:48:4A:D8:7F:E0:29:C1:01:DA:E6:D2:ED:82:8D:86:05:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WjWLSErYf-ApwQHa5tLtgo2GBVM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:40:c2:2e:fd:fc:2b:e8:0c:69:9d:c9:27:9d:a5:85:0f:e6:
         a3:1f:60:58:c7:e2:bb:5d:5b:d4:88:54:63:9e:5b:de:39:41:
         f0:a8:47:0b:ab:bd:52:d2:a0:67:4e:fc:25:6f:ca:92:68:79:
         70:0b:82:7a:53:52:d9:df:39:03:08:ec:0a:7b:28:50:e0:39:
         73:e4:ea:11:4a:36:90:f7:ec:df:81:32:1a:d0:c5:dd:a1:58:
         15:d3:83:8d:78:96:ed:e0:39:45:e5:87:82:cf:95:0e:51:3f:
         dd:ef:13:e2:7b:28:dc:98:f7:e0:e6:5f:77:7d:37:ce:6e:d4:
         25:76:fd:87:f4:a3:ff:a8:67:1b:bb:d3:7a:c3:5d:ad:84:d6:
         74:b9:0f:ff:a4:ee:7d:f6:43:48:de:fa:b6:b3:82:88:97:1b:
         c3:95:26:a4:8a:7d:2f:36:66:bc:16:76:ce:08:5d:97:1a:45:
         cd:91:1d:e5:2c:d7:36:40:5c:14:14:63:75:4a:16:be:bf:1e:
         b8:a2:97:0c:8e:e8:d5:b1:d0:69:7d:95:29:20:6f:a4:5c:6c:
         b6:15:e6:f1:7c:5c:3d:5f:71:b4:5c:38:c8:20:57:03:91:a9:
         10:80:11:b9:67:ca:98:f2:61:dc:ec:26:2d:e2:e6:92:55:40:
         58:41:e8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:34:44 2026 by rpki-client