Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft
File:                     WF3cT9n54xQAXzcZj9HiLmgknes.mft (raw, json)
Hash identifier:          86epehebslGoslWs5czs6582Bp2Ib1n4ElyN90vWuhM=
Subject key identifier:   88:AE:33:7B:C5:D7:C5:4D:C9:B8:0D:D5:4A:3A:A6:1A:B1:C6:5F:21
Authority key identifier: 58:5D:DC:4F:D9:F9:E3:14:00:5F:37:19:8F:D1:E2:2E:68:24:9D:EB
Certificate issuer:       /CN=A912871A/serialNumber=585DDC4FD9F9E314005F37198FD1E22E68249DEB
Certificate serial:       0506
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WF3cT9n54xQAXzcZj9HiLmgknes.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft
Manifest number:          04FF
Signing time:             Thu 16 Apr 2026 23:35:22 +0000
Manifest this update:     Thu 16 Apr 2026 23:35:21 +0000
Manifest next update:     Thu 23 Apr 2026 23:35:21 +0000
Files and hashes:         1: WF3cT9n54xQAXzcZj9HiLmgknes.crl (hash: FIIXiIX01In3RBAUz40tIYGuTSJTYgsRlUd1KI+Lp4c=)
                          2: 5431D022524211ECA52D990FC4F9AE02.roa (hash: OxBZXjM5WU3mTzBTkJpk2hM02aP7JRhZY0bot56cYO4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.crl
                          rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WF3cT9n54xQAXzcZj9HiLmgknes.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:35:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1286 (0x506)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912871A, serialNumber=585DDC4FD9F9E314005F37198FD1E22E68249DEB
        Validity
            Not Before: Apr 16 23:35:21 2026 GMT
            Not After : Apr 23 23:35:21 2026 GMT
        Subject: CN=69e1723a-9413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:14:d2:41:63:f6:82:4e:62:b4:b9:c0:2a:0f:
                    83:b5:5b:b7:6f:f6:02:39:c6:69:e7:98:35:e3:4f:
                    46:47:72:58:7b:67:ee:6f:86:36:cd:3e:13:29:a3:
                    0c:c7:3c:4c:80:39:52:65:b7:b4:50:ae:f4:99:f8:
                    5c:8e:56:01:03:32:7b:54:39:f9:ca:fa:44:2d:ae:
                    27:85:35:6b:f8:74:e7:44:1c:f2:1d:b8:ae:42:4a:
                    13:02:33:f1:da:f4:b0:9a:fe:e4:d1:46:5a:53:62:
                    c5:d6:1d:18:f4:99:dd:2c:a4:da:db:00:e3:0b:d6:
                    4b:81:f4:15:ce:44:5d:a0:ae:c6:3a:e9:99:26:77:
                    62:de:79:f9:2f:06:0d:eb:10:ad:8e:c5:2a:6d:c1:
                    74:70:0f:51:67:5d:15:87:63:93:50:5a:ac:b5:23:
                    e8:2a:7e:7c:ea:fb:af:c3:d5:58:97:1d:a1:d7:55:
                    db:e2:c4:77:c8:38:7d:78:3f:ea:cb:f7:99:60:70:
                    51:93:45:30:c7:e3:f4:2c:82:63:d0:95:d0:40:8c:
                    aa:31:5a:db:89:b1:0e:2b:7b:c5:d0:ef:d1:9c:2d:
                    5e:78:2f:42:e6:c0:a7:0b:bf:6d:58:83:54:74:6e:
                    fc:95:71:52:7f:9d:09:19:f3:90:4c:6a:fa:46:42:
                    bc:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:AE:33:7B:C5:D7:C5:4D:C9:B8:0D:D5:4A:3A:A6:1A:B1:C6:5F:21
            X509v3 Authority Key Identifier:
                keyid:58:5D:DC:4F:D9:F9:E3:14:00:5F:37:19:8F:D1:E2:2E:68:24:9D:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WF3cT9n54xQAXzcZj9HiLmgknes.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:2f:50:2f:c0:36:01:c6:bf:a6:24:ab:10:20:4a:28:d8:fa:
         ab:b9:10:27:80:91:98:a3:82:df:d8:17:ee:fa:40:51:ac:22:
         ea:c4:44:06:2c:a9:03:50:6e:f5:62:ca:5b:96:23:12:d5:c6:
         ca:c5:c8:be:6a:27:17:d6:b8:7a:59:1c:91:4e:c1:8d:49:5a:
         04:31:52:9f:a5:f1:27:35:77:9b:d1:b3:3f:60:5f:f6:c5:f6:
         e2:1c:7b:f3:52:25:27:9e:e3:f0:1b:4b:22:89:1b:39:83:a6:
         73:44:e5:03:2b:b2:95:dc:e2:73:d7:aa:12:9d:8d:72:66:c1:
         27:0f:bc:ff:ee:4f:ea:65:c5:f5:3f:ea:d7:a1:61:0b:74:69:
         89:89:37:7e:1c:53:84:88:1b:5d:3c:63:82:dc:d3:7e:fa:c1:
         22:71:75:95:56:bb:a6:5f:ab:29:8f:1f:10:0d:7a:be:17:aa:
         f1:22:43:87:53:7c:8a:47:ee:2c:f5:61:65:c8:0f:7e:4c:db:
         27:dc:6f:cc:51:0c:0b:a6:31:de:07:b2:45:b4:b8:98:9a:90:
         b1:27:f4:80:92:78:1c:ed:e3:cf:cc:c1:e3:e3:f5:e3:bc:a9:
         c6:01:e5:63:14:b7:ca:cf:4f:da:15:e9:8f:58:d8:8b:7e:04:
         a9:a4:0d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:05:23 2026 by rpki-client