Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft
File:                     WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft (raw, json)
Hash identifier:          6qr6ubcTUVDm70KBMhgS5/eTsanC18ykRQDf6bz57LA=
Subject key identifier:   D2:D7:39:E5:C7:85:D3:83:EB:9A:BA:69:74:30:AE:71:E6:18:56:F6
Authority key identifier: 59:90:F4:C3:BB:23:43:6C:95:10:0B:48:48:DC:91:86:AA:49:53:19
Certificate issuer:       /CN=A913C4FD/serialNumber=5990F4C3BB23436C95100B4848DC9186AA495319
Certificate serial:       0114
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZD0w7sjQ2yVEAtISNyRhqpJUxk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft
Manifest number:          010F
Signing time:             Sun 19 Apr 2026 05:39:18 +0000
Manifest this update:     Sun 19 Apr 2026 05:39:18 +0000
Manifest next update:     Sun 26 Apr 2026 05:39:18 +0000
Files and hashes:         1: WZD0w7sjQ2yVEAtISNyRhqpJUxk.crl (hash: copomo/OiCK5jYXVY4mMRH5lw3k7P+omPxvlgWaGA/Q=)
                          2: 7C321BDEA55711EFB8317F6BC4F9AE02.roa (hash: 0iiaisEVoFgTOH2CCzbwqWu/DbOaNizKGC5fWfvGWtw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.crl
                          rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZD0w7sjQ2yVEAtISNyRhqpJUxk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 276 (0x114)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C4FD, serialNumber=5990F4C3BB23436C95100B4848DC9186AA495319
        Validity
            Not Before: Apr 19 05:39:18 2026 GMT
            Not After : Apr 26 05:39:18 2026 GMT
        Subject: CN=69e46a86-b42b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:84:50:22:fc:ba:d5:f8:d4:d3:0b:17:06:d3:
                    6e:7f:80:6c:b1:b9:14:d8:9e:db:9d:25:87:6e:de:
                    83:30:e6:d8:47:72:40:7c:01:74:5e:2c:18:55:11:
                    42:20:78:f3:39:91:c3:f7:f1:f3:52:30:10:26:dd:
                    f0:15:ca:7d:b3:41:48:21:82:58:e0:8f:1b:e4:9e:
                    43:5e:84:af:0f:3c:db:2a:86:0a:14:e2:da:4f:74:
                    54:f4:04:89:69:a5:24:a2:e0:7c:63:10:fb:dc:85:
                    69:b9:a9:d9:7e:56:7c:48:25:21:82:7f:aa:24:32:
                    4f:73:72:fe:e9:96:6c:7a:4e:3d:4f:61:fa:eb:f4:
                    e9:f5:7d:2b:1e:8b:96:3c:01:ee:f2:ed:b1:1d:4c:
                    8f:b2:9c:70:f1:ea:60:9b:03:2e:e0:70:dd:44:22:
                    15:10:4c:80:03:03:0e:03:4f:05:44:8b:f7:74:46:
                    6b:c2:81:5a:01:99:0a:76:b9:c8:9d:c5:ca:01:03:
                    c8:f0:d4:4f:32:1a:c6:3e:60:fa:ee:bb:c0:de:e5:
                    23:0a:47:fc:65:31:23:80:bd:56:71:7a:7a:9d:55:
                    ef:8e:10:36:86:9f:e2:0a:a1:e9:03:a3:55:92:89:
                    e3:8f:d5:08:64:36:e2:cb:82:de:ed:79:a3:d0:12:
                    a4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D7:39:E5:C7:85:D3:83:EB:9A:BA:69:74:30:AE:71:E6:18:56:F6
            X509v3 Authority Key Identifier:
                keyid:59:90:F4:C3:BB:23:43:6C:95:10:0B:48:48:DC:91:86:AA:49:53:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZD0w7sjQ2yVEAtISNyRhqpJUxk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:21:31:be:d9:f4:c6:a0:82:41:92:5a:41:4a:24:c9:89:b2:
         62:be:78:02:d5:2f:bf:f7:6e:d0:62:51:d9:37:cd:4d:c9:d6:
         b8:87:b2:54:42:44:57:97:14:c0:ba:00:bc:48:b2:12:57:7d:
         3c:b3:43:0b:ad:a8:71:93:3d:8c:0f:43:b0:38:68:9f:0f:43:
         41:e8:bd:8c:29:b1:21:e4:21:d6:ad:ff:60:ff:33:b7:ab:b7:
         9f:d8:e4:23:db:ac:6e:99:d1:41:82:7f:e2:4f:44:76:66:7b:
         23:06:73:6e:9a:65:6d:40:4f:24:68:ae:33:58:b4:9b:72:b6:
         ab:6c:e1:18:37:02:85:fa:8b:83:9b:9f:3e:71:d3:d9:2b:12:
         8b:75:f5:60:63:9f:55:1b:69:1c:3a:b0:2f:7c:d5:f7:64:1e:
         66:21:63:21:34:f8:f5:17:1b:42:5e:09:e8:c9:a8:24:6f:f2:
         b7:95:b9:39:ac:e0:de:00:7f:10:74:72:c8:ea:49:ca:4c:5e:
         d6:b8:23:4c:f9:7d:81:74:c0:ea:42:a7:05:fd:ae:70:56:ef:
         08:a4:ef:f8:4f:70:88:74:dd:1a:c0:0d:07:47:3b:94:b0:46:
         cc:3b:3e:14:f2:61:aa:40:6d:a2:92:03:22:6b:bf:fc:8e:28:
         1d:e0:db:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:17:39 2026 by rpki-client