Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft
File:                     -wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft (raw, json)
Hash identifier:          z9uigAULUNkFeLRUscA9ObirjH7/GoXNEQDDNbM3PcA=
Subject key identifier:   AB:54:44:5C:4D:EF:3D:E2:66:B6:65:30:6D:2C:73:2D:63:9E:38:E9
Authority key identifier: FB:02:EC:D6:C7:78:9A:39:6B:53:A4:8F:A9:24:36:60:E2:52:C1:43
Certificate issuer:       /CN=A912F437/serialNumber=FB02ECD6C7789A396B53A48FA9243660E252C143
Certificate serial:       01A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft
Manifest number:          01A2
Signing time:             Sun 01 Mar 2026 04:59:47 +0000
Manifest this update:     Sun 01 Mar 2026 04:59:47 +0000
Manifest next update:     Sun 08 Mar 2026 04:59:47 +0000
Files and hashes:         1: -wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl (hash: MWjFtruWoQjCiPOQtyNDidfOOad2AW9Kcs057UeKUwM=)
                          2: D973D5BE97D711EEA1B09A33C4F9AE02.roa (hash: D+qSiCU0O3oSG7UcpKXST7cPd+ZdbpgcmmDNxZN3ZAA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl
                          rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 04:59:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 422 (0x1a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F437, serialNumber=FB02ECD6C7789A396B53A48FA9243660E252C143
        Validity
            Not Before: Mar  1 04:59:47 2026 GMT
            Not After : Mar  8 04:59:47 2026 GMT
        Subject: CN=69a3c7c3-835a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:32:3d:41:0f:e4:c3:33:14:06:ce:76:7d:d8:
                    38:08:f8:70:aa:e6:f2:44:c5:5b:a6:9c:1f:4d:d8:
                    41:48:f6:95:43:9d:c7:e8:50:4b:9c:d3:d8:88:a4:
                    4c:d7:d0:84:04:fb:8c:ec:61:e1:67:24:a3:8c:19:
                    15:b7:b9:ef:5d:a1:13:c3:90:de:67:a9:d7:50:7c:
                    3a:3a:bc:bf:2c:42:78:bb:1d:53:3a:10:f6:16:3c:
                    4f:85:da:71:47:d9:90:a3:db:77:ac:76:6a:9c:88:
                    b5:3a:c9:f4:3b:11:f0:56:e0:4a:15:39:d2:0e:a7:
                    33:4a:80:8d:6c:ed:7e:0e:7a:fc:d8:fd:e6:dd:fc:
                    9d:74:9f:22:9e:ae:45:68:07:ef:03:02:27:ad:9f:
                    7d:f5:e5:44:7e:52:d8:bc:36:dd:86:de:af:67:33:
                    7b:df:1f:28:60:7e:7b:dd:5b:3c:24:05:39:75:4a:
                    4a:6f:d7:14:ab:8b:7c:da:74:e5:48:29:12:27:e7:
                    20:21:22:6c:fb:40:11:fc:7a:b1:35:0b:fd:7d:fd:
                    ad:6d:a1:19:94:8b:af:53:19:9e:20:63:a9:1f:b7:
                    9c:b2:93:31:f7:f1:7b:bc:f6:30:c6:70:ab:a4:97:
                    f0:20:52:d3:0f:2a:b0:79:bf:7e:5d:bc:3e:2e:91:
                    29:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:54:44:5C:4D:EF:3D:E2:66:B6:65:30:6D:2C:73:2D:63:9E:38:E9
            X509v3 Authority Key Identifier:
                keyid:FB:02:EC:D6:C7:78:9A:39:6B:53:A4:8F:A9:24:36:60:E2:52:C1:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:46:15:5b:a5:ab:01:a7:91:6f:39:e7:a4:ea:61:f9:4d:77:
         9f:32:05:08:36:9d:5e:0a:fa:79:ff:2d:ab:e0:85:20:3a:05:
         b4:7f:36:7e:98:8e:1c:4c:70:0b:a6:98:6a:d2:5b:bf:77:ca:
         d2:0e:a0:4d:84:f0:82:1c:c0:6e:b4:55:27:81:33:9b:cc:85:
         e5:0f:bc:db:21:65:41:77:24:2d:85:75:a7:12:a6:fd:07:66:
         eb:80:fc:89:35:fb:ed:bf:1f:b0:74:f3:b3:cc:d9:74:7a:f2:
         0c:da:cd:2f:96:c5:78:f2:a8:0a:5d:94:8e:78:47:5e:9c:18:
         27:60:e9:df:db:d9:30:b5:dc:39:9f:46:da:19:e3:b9:88:b0:
         6d:b2:46:c4:4b:b4:57:62:62:90:f7:51:4b:7a:90:04:ce:0e:
         e9:52:55:89:0c:2a:db:d0:01:e4:3c:4f:83:63:32:30:09:6b:
         30:3f:af:46:52:43:81:7d:ee:79:52:e5:ce:bd:64:09:42:cd:
         64:68:be:21:70:e1:c2:f9:7a:75:ed:0c:c5:d9:2a:fe:9f:ed:
         21:e2:39:be:b6:5d:4d:0c:6c:4c:83:ee:4a:bd:9b:e2:98:97:
         51:cc:ff:4a:84:08:fc:48:a9:24:27:e4:fd:6b:28:c8:15:fb:
         e6:05:07:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:49:26 2026 by rpki-client