Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.mft
File:                     wfSjmGHK0883hCGN7aegXoUvIn8.mft (raw, json)
Hash identifier:          H5GlwN1WxmgBM0dfIFrJ/O9haAqaYyrD/wlIDJNpLQs=
Subject key identifier:   EE:EB:F1:47:52:8B:C7:E7:8F:DF:CB:C0:92:34:C1:FB:B8:BA:56:AF
Authority key identifier: C1:F4:A3:98:61:CA:D3:CF:37:84:21:8D:ED:A7:A0:5E:85:2F:22:7F
Certificate issuer:       /CN=A912DB97/serialNumber=C1F4A39861CAD3CF3784218DEDA7A05E852F227F
Certificate serial:       B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wfSjmGHK0883hCGN7aegXoUvIn8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.mft
Manifest number:          AF
Signing time:             Sun 01 Mar 2026 08:25:38 +0000
Manifest this update:     Sun 01 Mar 2026 08:25:37 +0000
Manifest next update:     Sun 08 Mar 2026 08:25:37 +0000
Files and hashes:         1: wfSjmGHK0883hCGN7aegXoUvIn8.crl (hash: YchN24oDDzq0DXsTAFVlbyim30S5BEL592KScxAPZdw=)
                          2: 28F87D180A1611F0BC8FD10DC4F9AE02.roa (hash: m3TKEHo+4f4PhVTsk8vFCNaTsfWtmI9Nex70/u6yw60=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.crl
                          rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wfSjmGHK0883hCGN7aegXoUvIn8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:25:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177 (0xb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912DB97, serialNumber=C1F4A39861CAD3CF3784218DEDA7A05E852F227F
        Validity
            Not Before: Mar  1 08:25:37 2026 GMT
            Not After : Mar  8 08:25:37 2026 GMT
        Subject: CN=69a3f802-b7a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1d:32:ce:4b:6d:a2:fa:4e:c8:e8:97:5a:82:
                    95:a6:75:84:14:77:b7:30:f0:46:0e:8c:bb:32:81:
                    74:73:45:d1:dc:13:de:a7:cd:91:da:44:1d:26:74:
                    a6:0e:02:5b:61:51:cd:c5:f5:e2:a3:90:1c:fa:23:
                    a2:c8:bc:5f:16:99:4f:99:34:c3:91:8c:ec:fe:c9:
                    e3:6d:97:4b:f7:66:5a:1d:04:f8:cc:04:8a:a6:52:
                    34:1e:28:f9:cb:4e:54:49:8d:ac:24:47:2b:57:ff:
                    d6:c5:3c:1f:d6:c8:cb:eb:da:f3:c1:6b:51:2a:85:
                    b5:5e:f0:38:21:76:d8:3d:43:da:f4:39:d1:06:8f:
                    50:b8:34:09:3f:9a:d5:ce:67:91:c6:dd:73:2e:f5:
                    ac:2a:42:1b:3a:7f:d9:18:42:b5:9d:ec:b7:bc:58:
                    d7:52:d3:f3:03:f8:06:21:9e:08:5b:1d:5f:70:df:
                    e8:b7:6c:3d:74:86:18:31:a7:14:6e:65:4c:c9:eb:
                    fa:5a:95:7b:a2:be:e1:eb:98:3d:7a:0a:e7:2f:db:
                    63:4c:0f:b2:fa:c8:72:6d:20:f2:63:10:ed:35:b1:
                    08:0e:5c:3a:0b:53:0f:6c:f2:08:fe:fa:d8:16:11:
                    d8:9f:7a:9f:38:43:67:b9:30:c6:96:5b:06:10:4c:
                    98:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:EB:F1:47:52:8B:C7:E7:8F:DF:CB:C0:92:34:C1:FB:B8:BA:56:AF
            X509v3 Authority Key Identifier:
                keyid:C1:F4:A3:98:61:CA:D3:CF:37:84:21:8D:ED:A7:A0:5E:85:2F:22:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wfSjmGHK0883hCGN7aegXoUvIn8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:31:77:b2:48:76:34:c0:44:25:d1:31:c8:86:f7:e2:9c:fc:
         f7:1c:51:d0:bc:10:b1:d8:3a:0e:e1:4a:33:ef:b4:ff:54:15:
         a8:e3:b4:4c:bb:4d:fe:ca:c2:7c:30:6b:71:e4:85:5a:58:73:
         42:d8:4d:07:ad:bb:31:de:1b:c5:06:9b:d3:6d:a0:14:7f:58:
         f3:dd:83:72:8b:11:d4:70:c5:1c:8d:e9:74:29:d7:5d:84:d3:
         45:bd:3e:6e:58:67:af:67:15:47:53:15:32:ca:89:74:39:62:
         f2:c4:48:2f:05:cc:c7:7e:aa:d5:17:a1:ab:e7:71:82:72:e0:
         51:80:82:e8:b4:c8:c4:e0:57:75:80:33:a6:fb:6c:11:e3:a4:
         7e:38:e7:1b:d5:a7:17:27:f9:d6:e6:eb:57:f3:12:e1:3b:a3:
         7f:87:74:0f:54:7a:aa:f0:18:91:37:0f:04:7b:7a:ea:ec:f4:
         f4:53:77:d3:6e:10:96:37:5c:6b:86:ed:af:29:d5:bc:53:c5:
         46:fe:8f:40:7a:2f:e1:31:59:62:76:92:a3:07:6c:eb:26:36:
         11:6a:6c:46:89:e4:65:12:f2:40:9c:78:43:82:dc:2a:4a:73:
         bd:58:9a:67:d7:8e:52:bd:47:bc:80:26:62:4a:80:90:64:62:
         cc:6f:28:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:37:51 2026 by rpki-client