Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft
File:                     WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft (raw, json)
Hash identifier:          KV1oH9tdPxuZsb7h4lZ5dj+QY3680fuNVJ1luVF4d3E=
Subject key identifier:   C5:29:E1:2D:37:C5:64:EC:FC:E8:26:C2:87:60:3D:9B:E2:57:D1:AA
Authority key identifier: 5A:22:3B:9C:52:4F:AA:ED:87:27:21:A4:2B:3C:30:2D:97:1E:38:04
Certificate issuer:       /CN=A9137843/serialNumber=5A223B9C524FAAED872721A42B3C302D971E3804
Certificate serial:       05EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft
Manifest number:          05E8
Signing time:             Sat 28 Feb 2026 23:31:02 +0000
Manifest this update:     Sat 28 Feb 2026 23:31:02 +0000
Manifest next update:     Sat 07 Mar 2026 23:31:02 +0000
Files and hashes:         1: WiI7nFJPqu2HJyGkKzwwLZceOAQ.crl (hash: M2n+5TAjaJluRkRGoQilNIbCqb6kd/5o12Rs0fKr4gU=)
                          2: F2DDD4EEFB3211EB967B1759C4F9AE02.roa (hash: 3d6/uGLTdWUEkEpG0kGpIEY7S5NCtcU4M80zaHkZ+xk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.crl
                          rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 23:31:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1518 (0x5ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137843, serialNumber=5A223B9C524FAAED872721A42B3C302D971E3804
        Validity
            Not Before: Feb 28 23:31:02 2026 GMT
            Not After : Mar  7 23:31:02 2026 GMT
        Subject: CN=69a37ab6-b5fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:be:a4:51:52:19:32:d0:45:75:9b:90:41:c9:
                    33:fd:ce:53:43:a2:19:df:7d:c0:dc:5a:fb:b0:63:
                    32:1d:15:72:fc:58:63:d1:5f:1b:a8:84:8d:a0:73:
                    a7:5b:12:99:47:37:d9:a6:36:79:60:e2:8d:46:dc:
                    a9:6b:6c:d3:7a:1c:9f:f8:74:a7:50:47:8f:e6:e5:
                    82:28:ea:a3:07:ad:02:26:58:71:0d:9b:0c:dd:f2:
                    c0:d9:5c:80:a1:46:7f:70:e7:35:ee:be:da:d3:c0:
                    9e:a1:bf:7f:d9:8e:21:28:05:b2:ff:6b:27:02:6c:
                    03:00:c4:17:98:92:39:65:32:3e:5f:a0:b1:e7:ad:
                    02:38:b1:91:f2:00:15:e1:d5:a7:b5:f9:c5:d2:9d:
                    cc:4b:f8:27:1b:56:a9:fd:cd:a7:2e:78:04:76:7c:
                    c9:97:86:67:6f:02:6b:b9:f5:27:a7:b4:5e:66:47:
                    27:7d:e6:2d:c5:82:65:3b:f3:fc:a8:11:b7:d2:eb:
                    3d:99:4b:c5:39:fa:f2:10:25:45:38:b8:a8:90:f1:
                    b2:4b:17:58:75:1a:d5:e2:51:96:6d:49:76:cd:65:
                    80:d2:d8:91:46:3c:45:2a:40:62:01:2a:fc:94:b7:
                    4d:dd:fe:c6:15:ee:c2:78:16:3f:a6:b3:e4:33:2a:
                    58:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:29:E1:2D:37:C5:64:EC:FC:E8:26:C2:87:60:3D:9B:E2:57:D1:AA
            X509v3 Authority Key Identifier:
                keyid:5A:22:3B:9C:52:4F:AA:ED:87:27:21:A4:2B:3C:30:2D:97:1E:38:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:87:95:14:71:10:3e:cc:d9:9e:94:63:69:a3:3d:c8:2c:8d:
         75:60:24:0b:7c:fe:74:e2:23:e9:d7:c9:fb:1a:83:47:ed:23:
         e7:ac:b2:c1:c3:1a:67:1f:98:f8:9c:8f:aa:35:05:29:a5:66:
         b6:e6:8d:e9:a6:d8:b5:16:fc:eb:e9:2f:25:2e:59:84:09:1e:
         cb:cd:62:95:23:ce:3e:c2:be:c3:e6:26:16:93:e6:72:4d:0f:
         68:29:32:9a:39:8f:2c:6c:a4:f0:de:f9:fa:d0:cd:ce:1e:1b:
         56:3b:d1:4f:2c:c2:d9:d3:a8:1b:a9:ee:9e:06:f4:49:39:e6:
         59:3d:a9:a3:2f:9f:49:b1:ad:b5:32:d0:4c:e1:50:14:0d:0e:
         ce:3e:09:c9:c5:fd:56:43:b1:ce:ff:83:60:e4:68:69:43:b5:
         46:b2:87:d0:07:c4:bc:36:89:6b:f2:f0:d2:3e:96:17:31:22:
         6c:07:41:71:f1:62:f9:d5:cc:ad:27:30:3c:bc:c3:dd:72:ed:
         81:56:80:b2:42:cb:68:41:ff:ba:6d:3c:e3:16:bb:60:46:f0:
         c9:69:9b:8f:d5:d2:ab:25:e9:81:f2:73:c5:51:24:d4:7d:3f:
         13:d9:c3:b8:04:43:3f:0b:30:79:66:4d:2e:f2:60:d5:a4:6e:
         1e:e1:54:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:42 2026 by rpki-client