Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft
File:                     wbdm2intKT3fpczrCuQpdFRE1hU.mft (raw, json)
Hash identifier:          PN+iXzpWKTqKtSOFO6SPHcwpeSBtaoVIkvWWZZXvljA=
Subject key identifier:   15:20:DE:37:29:0A:EB:65:E8:F6:F3:84:A9:28:69:D3:7C:C7:69:DB
Authority key identifier: C1:B7:66:DA:29:ED:29:3D:DF:A5:CC:EB:0A:E4:29:74:54:44:D6:15
Certificate issuer:       /CN=A912F281/serialNumber=C1B766DA29ED293DDFA5CCEB0AE429745444D615
Certificate serial:       FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft
Manifest number:          F7
Signing time:             Fri 17 Apr 2026 05:58:03 +0000
Manifest this update:     Fri 17 Apr 2026 05:58:02 +0000
Manifest next update:     Fri 24 Apr 2026 05:58:02 +0000
Files and hashes:         1: wbdm2intKT3fpczrCuQpdFRE1hU.crl (hash: sEDP5csfZAS9kG8TJoccC3zKsBJPs5wGDDDu5tWNywY=)
                          2: 8A69BFBAC67011EFAE929D0DC4F9AE02.roa (hash: 8sa62+T7pJg8Z/Ix+b37ZqcmW0JmMLxyohi49hkjzWc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.crl
                          rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:58:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 251 (0xfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F281, serialNumber=C1B766DA29ED293DDFA5CCEB0AE429745444D615
        Validity
            Not Before: Apr 17 05:58:02 2026 GMT
            Not After : Apr 24 05:58:02 2026 GMT
        Subject: CN=69e1cbeb-96bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c2:55:bb:07:be:36:30:87:82:91:d4:7a:47:
                    b7:45:83:bc:68:4b:6a:04:66:15:c7:a0:9d:79:63:
                    26:62:d7:cb:7f:38:3a:61:85:30:68:2a:22:56:0a:
                    c9:a6:c6:82:63:10:fe:da:7a:8b:71:f2:36:4e:ae:
                    ca:b5:f8:97:0b:dd:4e:e3:89:8c:e9:39:7d:5a:ec:
                    25:e0:6b:b2:70:0b:8a:93:51:0d:b6:23:63:42:f8:
                    57:91:fa:4f:a1:ce:86:9d:1d:70:a4:35:61:ea:53:
                    54:08:30:ca:60:8d:bb:2a:82:91:92:95:a8:b3:bc:
                    b6:b8:71:d7:56:81:f2:f5:27:0f:39:3a:4d:de:ee:
                    d2:8d:e6:3a:94:a6:c1:22:e7:31:cb:d9:f7:de:ac:
                    a4:a2:18:24:b1:e2:ea:d8:6b:b2:24:69:a7:58:1f:
                    da:62:26:6e:02:57:f0:e7:ce:c1:b4:bd:2e:a9:db:
                    e0:1b:fc:64:e5:70:9e:6a:77:04:21:1c:28:1d:52:
                    ce:ba:ea:3b:78:46:e0:a3:ca:92:6e:84:a5:a9:e6:
                    15:2d:53:66:63:d6:85:66:c8:1b:d9:32:cb:11:31:
                    1b:b4:54:a8:90:50:fa:a6:e6:59:db:48:9c:01:51:
                    9f:c4:74:85:24:92:d9:5a:dd:ba:70:e5:81:ef:fb:
                    07:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:20:DE:37:29:0A:EB:65:E8:F6:F3:84:A9:28:69:D3:7C:C7:69:DB
            X509v3 Authority Key Identifier:
                keyid:C1:B7:66:DA:29:ED:29:3D:DF:A5:CC:EB:0A:E4:29:74:54:44:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:fd:d0:d1:93:66:2e:4c:72:ca:66:9d:d4:82:ac:2d:24:ee:
         7c:d7:6a:f6:ab:38:65:ca:db:80:0a:a7:49:b3:8b:69:94:7a:
         41:41:98:7d:6b:5f:81:16:c1:f8:0d:93:d4:99:84:54:56:2e:
         0b:6d:ae:89:0b:fb:7f:92:9b:a0:59:fa:fe:cb:a3:60:bf:92:
         11:bb:85:78:50:b4:3f:07:95:f4:8d:42:44:d7:ec:06:1f:59:
         21:a8:c1:e0:4a:f6:c6:f1:c1:06:6a:db:da:c9:f9:f2:c6:4a:
         d5:8a:89:a7:96:3b:a0:30:22:4a:3d:18:d3:28:d5:96:c8:91:
         50:ad:19:fd:af:b4:27:cb:37:9f:c0:3a:3c:b8:db:8f:9f:f3:
         e8:89:32:56:60:c0:1e:50:40:1e:c2:82:96:ac:d7:8a:e6:6a:
         b4:e8:a4:13:b0:d6:14:20:cf:0b:24:f1:87:04:ba:95:61:fe:
         2e:47:ba:bc:7b:30:0b:fd:b2:a6:e6:64:49:b9:2e:70:50:47:
         e4:cf:73:7f:73:f6:26:83:f8:46:85:4b:64:b9:36:c8:97:d7:
         08:c4:ca:db:42:39:ac:38:6e:93:96:56:81:f2:72:06:9a:78:
         4d:78:4a:39:e8:0e:33:6d:0d:97:0b:f6:2f:3b:67:1f:d5:84:
         4c:ef:19:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:32:30 2026 by rpki-client