Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft
File:                     WF3cT9n54xQAXzcZj9HiLmgknes.mft (raw, json)
Hash identifier:          oBa3iVFNtDlI1sFeAT42sv/kh2a5d1QDy2FFnN89TwY=
Subject key identifier:   E3:FC:69:EF:76:34:2C:CC:47:32:43:01:8D:A2:6F:D3:01:FB:CD:A5
Authority key identifier: 58:5D:DC:4F:D9:F9:E3:14:00:5F:37:19:8F:D1:E2:2E:68:24:9D:EB
Certificate issuer:       /CN=A912871A/serialNumber=585DDC4FD9F9E314005F37198FD1E22E68249DEB
Certificate serial:       04EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WF3cT9n54xQAXzcZj9HiLmgknes.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft
Manifest number:          04E5
Signing time:             Mon 02 Mar 2026 02:27:39 +0000
Manifest this update:     Mon 02 Mar 2026 02:27:38 +0000
Manifest next update:     Mon 09 Mar 2026 02:27:38 +0000
Files and hashes:         1: WF3cT9n54xQAXzcZj9HiLmgknes.crl (hash: M4g4Yvvbq9HeSRBban95K40jah/KvjF1mc3/qEw4fNg=)
                          2: 5431D022524211ECA52D990FC4F9AE02.roa (hash: CvQeByP/Y9cBycVPuFNU+VPc3uTvLUIz8Q1uaLGBd9s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.crl
                          rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WF3cT9n54xQAXzcZj9HiLmgknes.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:27:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1259 (0x4eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912871A, serialNumber=585DDC4FD9F9E314005F37198FD1E22E68249DEB
        Validity
            Not Before: Mar  2 02:27:38 2026 GMT
            Not After : Mar  9 02:27:38 2026 GMT
        Subject: CN=69a4f59b-27b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a5:ab:91:e9:92:a4:0e:9c:8c:40:16:58:c5:
                    df:5e:69:b9:82:9c:53:a4:60:5d:ac:dc:b0:50:b0:
                    fa:b0:84:e1:de:47:9e:e2:e9:29:de:eb:28:d6:a4:
                    0d:bb:75:95:73:2a:ad:ba:6c:53:cf:18:43:32:d2:
                    80:44:1e:a9:6e:51:4f:f0:e4:d1:8b:86:8d:e2:06:
                    ec:4e:45:d4:1a:0f:c2:20:86:ed:b6:33:81:1f:3a:
                    b8:9c:23:88:99:07:a4:84:58:30:77:1e:66:df:58:
                    62:13:aa:b9:c2:7d:ce:ac:9e:06:f3:07:f6:a0:03:
                    e9:9f:52:3f:74:b8:f9:22:71:34:73:91:fb:4e:5a:
                    17:3a:52:e9:a0:8f:c5:89:ef:c1:85:47:ab:7a:ad:
                    18:98:4c:6b:e6:ef:b9:13:61:5d:a9:de:e3:54:3f:
                    8d:62:3b:51:c4:ef:08:54:31:eb:84:31:78:34:d1:
                    32:1c:9e:f3:a5:9f:0f:28:9c:80:86:25:49:ec:bb:
                    cc:53:8b:c0:56:86:a6:78:4e:98:1f:86:c1:38:8d:
                    97:55:13:d2:11:4a:3c:85:e0:15:00:ee:1a:7b:87:
                    8e:56:c8:29:f4:30:eb:dd:d1:37:37:4d:97:54:41:
                    ae:b8:28:88:f3:f6:93:bb:d1:10:30:0c:02:30:cb:
                    6a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:FC:69:EF:76:34:2C:CC:47:32:43:01:8D:A2:6F:D3:01:FB:CD:A5
            X509v3 Authority Key Identifier:
                keyid:58:5D:DC:4F:D9:F9:E3:14:00:5F:37:19:8F:D1:E2:2E:68:24:9D:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WF3cT9n54xQAXzcZj9HiLmgknes.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:de:56:a7:f6:06:9e:71:aa:b0:a7:f4:c5:66:c7:59:ab:d6:
         ac:50:0d:1d:5f:13:ce:51:df:11:cf:0d:31:bb:8d:8a:1f:8c:
         ac:8c:c6:39:4c:18:29:c3:e9:fe:3e:e4:64:77:b5:da:49:b8:
         df:a2:65:0d:3e:dc:89:50:a1:2c:dd:28:be:aa:92:ec:66:75:
         57:90:37:6d:98:ab:9d:2a:89:7f:fc:5e:d3:75:bc:52:11:4f:
         e7:e6:7d:89:5a:a2:4c:e8:6b:60:56:d0:4a:89:21:b2:96:d6:
         ac:c0:04:64:97:4a:45:cb:62:86:12:af:81:82:66:7a:3d:f4:
         3a:d1:15:ea:b6:49:0b:0c:e0:74:dd:eb:f3:84:e3:fd:1f:ca:
         ea:c9:c7:0d:e2:92:53:2d:3c:52:55:6c:3b:58:35:2e:b5:92:
         1c:04:d1:52:58:b0:42:a5:54:4d:76:79:3c:96:4e:c9:a9:a5:
         28:19:27:f5:f1:bb:2b:c0:3b:82:bf:44:2c:0f:0f:35:a8:44:
         e9:1b:1a:2e:c8:d4:b0:00:66:03:26:bd:19:74:1b:02:9d:d1:
         f4:e5:6f:c9:58:73:cf:10:5c:d8:3a:89:47:94:d4:46:9d:64:
         16:9e:d1:2f:e5:9f:58:7c:45:7f:6a:33:25:22:ce:85:3c:12:
         a0:02:84:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:53:43 2026 by rpki-client