Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft
File:                     WZsF7zwJOSLemJvcc5k_RtYldUk.mft (raw, json)
Hash identifier:          1ON95xRZmeXpN04sV1nfOS3kANWhqL5r4CFg4PZnb+U=
Subject key identifier:   86:1E:6E:62:F6:01:A8:09:84:C1:DD:E8:76:BC:FF:93:A1:FD:D9:35
Authority key identifier: 59:9B:05:EF:3C:09:39:22:DE:98:9B:DC:73:99:3F:46:D6:25:75:49
Certificate issuer:       /CN=A91308CE/serialNumber=599B05EF3C093922DE989BDC73993F46D6257549
Certificate serial:       3511
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft
Manifest number:          3511
Signing time:             Sat 28 Feb 2026 14:55:12 +0000
Manifest this update:     Sat 28 Feb 2026 14:55:12 +0000
Manifest next update:     Sat 07 Mar 2026 14:55:12 +0000
Files and hashes:         1: WZsF7zwJOSLemJvcc5k_RtYldUk.crl (hash: dKM26+jodr6pqhCQtvNUmc9VPCcWyKgKMTbQmPeCepI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.crl
                          rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 14:55:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13585 (0x3511)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91308CE, serialNumber=599B05EF3C093922DE989BDC73993F46D6257549
        Validity
            Not Before: Feb 28 14:55:12 2026 GMT
            Not After : Mar  7 14:55:12 2026 GMT
        Subject: CN=69a301d0-4979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:49:1d:44:63:3e:0e:46:18:0d:bb:2c:b9:61:
                    0d:dc:6a:a0:94:84:8e:80:9e:7f:d7:58:54:a2:2b:
                    fb:3d:97:77:da:7f:c5:ab:cc:2f:ba:63:ea:3b:a8:
                    4e:f2:1b:8f:e0:85:8e:41:c0:ea:03:d9:16:b9:3c:
                    31:0f:22:a1:66:4b:9f:4c:a0:8c:34:68:74:5c:3a:
                    11:69:c0:c3:c5:5d:af:f5:de:f8:84:fe:19:db:88:
                    f9:2a:17:ec:bc:a0:66:72:4f:65:48:ce:f0:f8:f7:
                    46:da:57:7c:da:36:f4:6d:da:73:cd:89:7e:aa:bb:
                    51:92:d2:33:b1:aa:fa:23:ba:ff:30:bd:5a:5a:7b:
                    d4:78:97:90:d8:7c:84:b7:4b:68:ed:50:fd:70:36:
                    c8:4a:49:21:72:0f:8f:3f:a2:ef:42:d0:bb:0b:cb:
                    d1:fe:3d:6c:f2:e8:ef:76:8e:fd:06:ff:d7:33:ff:
                    cb:93:a4:17:1a:3e:ad:c6:41:ed:dc:86:72:04:e2:
                    19:5f:ad:99:99:9b:51:8d:92:6a:76:df:3a:99:6b:
                    45:3a:b5:7e:39:ab:05:32:14:4e:a2:6f:89:9e:a6:
                    b3:7f:35:22:71:c4:f3:68:77:da:52:ff:b9:c9:3b:
                    c4:b2:5c:18:75:8f:1e:cd:e3:d3:b7:56:a6:cb:d9:
                    2b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:1E:6E:62:F6:01:A8:09:84:C1:DD:E8:76:BC:FF:93:A1:FD:D9:35
            X509v3 Authority Key Identifier:
                keyid:59:9B:05:EF:3C:09:39:22:DE:98:9B:DC:73:99:3F:46:D6:25:75:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:ca:96:e9:c3:ea:c1:8d:e6:bf:9e:dd:68:7c:80:91:c5:ba:
         ad:dd:e9:9a:ba:a3:23:87:0c:f9:c0:24:c6:2f:af:8c:f8:d5:
         60:c9:32:34:4d:85:82:fc:96:66:8d:75:00:73:4b:01:50:36:
         bb:a5:4d:ce:f0:40:fb:1a:61:c3:96:9f:df:70:d6:12:25:af:
         d8:8a:24:9b:3a:95:4a:83:02:b6:15:7b:5f:94:ac:35:1c:8a:
         b9:84:c7:03:37:d2:bb:c3:97:d9:ca:1f:47:57:01:6d:fb:db:
         c6:29:86:dc:26:34:ab:f0:70:20:c1:ab:ac:45:6d:77:e8:7b:
         4c:96:1a:0f:d4:92:9b:30:11:df:e2:af:12:58:b1:a9:71:21:
         f6:6f:0b:8f:58:80:1c:47:b0:72:c1:75:e8:0f:a8:c3:ea:ea:
         21:3d:0a:fd:e0:a2:e4:09:ad:54:a5:65:18:fb:94:57:77:13:
         11:91:6a:2d:ae:22:2b:10:97:76:48:b9:a3:96:85:fe:c9:d2:
         79:56:73:d7:91:27:69:19:18:43:92:77:e8:0e:83:61:60:e0:
         8a:59:3c:9a:7f:46:b0:5b:75:3b:ae:15:ee:ef:b6:66:0c:32:
         9c:6c:e6:8e:0f:22:e3:83:f9:8b:1f:01:34:f2:7b:18:60:ac:
         ce:5f:c2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:29:54 2026 by rpki-client