Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912781D/ABCC742EA3D111F09C66FD30C4F9AE02/wxp5GPD1nLri7aI2IGd8h2r1da4.mft
File:                     wxp5GPD1nLri7aI2IGd8h2r1da4.mft (raw, json)
Hash identifier:          BwzLbcNK++vOPtHrPb/S5l6cIn+bXV+gsrmpT5EXODs=
Subject key identifier:   01:4D:4B:01:AF:E4:63:C3:65:35:C4:6B:8E:CC:55:32:55:21:45:FF
Authority key identifier: C3:1A:79:18:F0:F5:9C:BA:E2:ED:A2:36:20:67:7C:87:6A:F5:75:AE
Certificate issuer:       /CN=A912781D/serialNumber=C31A7918F0F59CBAE2EDA23620677C876AF575AE
Certificate serial:       58
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wxp5GPD1nLri7aI2IGd8h2r1da4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912781D/ABCC742EA3D111F09C66FD30C4F9AE02/wxp5GPD1nLri7aI2IGd8h2r1da4.mft
Manifest number:          53
Signing time:             Sun 01 Mar 2026 09:40:44 +0000
Manifest this update:     Sun 01 Mar 2026 09:40:44 +0000
Manifest next update:     Sun 08 Mar 2026 09:40:44 +0000
Files and hashes:         1: wxp5GPD1nLri7aI2IGd8h2r1da4.crl (hash: rAYblvRL2FBMekhduOyHWT/yafB5xB47zP+YKS+Dzu4=)
                          2: 90C6C65EA4D311F084484F52C4F9AE02.roa (hash: 5dJMOYkKslfEA5jZ4I47oBqAHVS843EtSYlrjnxa9Uk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912781D/ABCC742EA3D111F09C66FD30C4F9AE02/wxp5GPD1nLri7aI2IGd8h2r1da4.crl
                          rsync://rpki.apnic.net/member_repository/A912781D/ABCC742EA3D111F09C66FD30C4F9AE02/wxp5GPD1nLri7aI2IGd8h2r1da4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wxp5GPD1nLri7aI2IGd8h2r1da4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:40:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912781D, serialNumber=C31A7918F0F59CBAE2EDA23620677C876AF575AE
        Validity
            Not Before: Mar  1 09:40:44 2026 GMT
            Not After : Mar  8 09:40:44 2026 GMT
        Subject: CN=69a4099c-9df0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:43:89:66:ef:75:6e:79:58:bd:36:a8:f6:9e:
                    56:db:46:17:38:1d:b6:54:a7:11:bb:00:1f:67:ef:
                    7e:ba:21:e7:fb:04:9b:0c:bb:c9:ea:42:0d:cf:ab:
                    b0:28:35:31:d1:b8:61:68:70:1f:0e:21:e6:d9:30:
                    c0:db:c6:55:ac:d7:9a:c3:61:78:94:c6:a8:6e:39:
                    78:ab:39:18:34:e5:3e:db:78:4d:03:28:02:05:02:
                    40:80:6a:9b:68:42:f9:68:f7:1d:4e:c6:73:7f:94:
                    c4:15:57:ac:72:0d:92:8a:fe:f1:8e:a4:79:be:d7:
                    95:7b:02:5d:ad:96:03:df:10:3f:9c:7b:cf:c4:cb:
                    fc:af:b7:4f:d2:5c:bc:1b:29:a2:15:d2:f6:d4:a7:
                    13:a1:b9:b3:62:40:48:3b:61:a3:42:de:65:ef:30:
                    68:0c:27:41:fe:4a:13:b5:ba:73:2d:57:60:3e:62:
                    49:49:51:c0:b2:5f:e8:ed:8c:74:12:d6:96:b5:61:
                    b1:98:f2:d7:d9:96:19:dd:78:97:2e:f1:79:f2:b9:
                    39:4f:03:32:7a:59:8c:01:14:5a:ab:96:37:27:4d:
                    74:55:e5:0c:f0:51:7a:e7:24:f9:d1:57:7a:29:fc:
                    4a:17:c2:73:e4:ba:78:bf:74:87:14:e4:dd:80:c8:
                    ca:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:4D:4B:01:AF:E4:63:C3:65:35:C4:6B:8E:CC:55:32:55:21:45:FF
            X509v3 Authority Key Identifier:
                keyid:C3:1A:79:18:F0:F5:9C:BA:E2:ED:A2:36:20:67:7C:87:6A:F5:75:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912781D/ABCC742EA3D111F09C66FD30C4F9AE02/wxp5GPD1nLri7aI2IGd8h2r1da4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wxp5GPD1nLri7aI2IGd8h2r1da4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912781D/ABCC742EA3D111F09C66FD30C4F9AE02/wxp5GPD1nLri7aI2IGd8h2r1da4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:30:2e:14:0d:a4:d0:fc:ab:ac:1a:fc:ba:c5:c4:4c:4d:08:
         2e:22:80:6b:a4:cd:e0:38:14:fe:fa:c8:0b:9c:b1:37:8b:7a:
         f3:2d:d2:8c:7e:8c:5c:a8:a7:59:5d:69:6c:2b:ad:e2:40:a4:
         28:d7:30:7a:af:a0:a1:5a:e6:2b:c6:5c:b4:80:a7:49:94:c9:
         37:78:95:99:95:43:f6:3f:38:05:d4:9f:af:2c:ee:f2:26:4e:
         d0:46:1b:97:95:c2:ee:12:7f:3a:e5:23:ca:f0:a7:cf:87:4d:
         8d:46:97:6d:9e:de:0d:b5:79:cc:e5:05:a1:67:5d:aa:a8:4c:
         b2:45:0a:71:fa:cc:42:51:e9:39:ce:ff:0a:ab:1a:06:ca:4e:
         78:4c:15:0d:7a:55:e6:88:b2:66:cc:73:73:f5:b9:ac:4c:42:
         2c:cb:fa:39:2a:88:5f:20:73:c9:26:89:37:e3:d1:6f:d8:5c:
         f6:5e:3b:c3:35:4a:7b:00:d0:88:c4:ee:75:b5:ec:f2:52:e4:
         ce:13:b4:90:21:50:89:54:33:35:60:11:2c:93:19:c4:93:36:
         b8:79:09:fd:0d:de:32:b9:10:39:47:fb:98:8f:fe:c2:9b:54:
         94:fe:fc:bd:56:64:28:e7:40:6a:06:f5:d0:e9:2b:43:cf:d4:
         85:39:f6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:36:05 2026 by rpki-client