Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
File:                     wrn188aMV2cnI5uSqTs2KX0bFlM.mft (raw, json)
Hash identifier:          joJzdX5/JMW8MGe+67l8yN1l6HMsLmfHkH3NRE8ZsWc=
Subject key identifier:   52:10:64:6A:37:8F:CA:B8:7A:24:B0:D0:82:A5:B6:FA:F8:B9:29:B2
Authority key identifier: C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53
Certificate issuer:       /CN=A91402DC/serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
Certificate serial:       13C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
Manifest number:          12AC
Signing time:             Sat 28 Feb 2026 17:13:06 +0000
Manifest this update:     Sat 28 Feb 2026 17:13:05 +0000
Manifest next update:     Sat 07 Mar 2026 17:13:05 +0000
Files and hashes:         1: wrn188aMV2cnI5uSqTs2KX0bFlM.crl (hash: TnUpqljFwuH7RS3Z6nDGlx1wH7+H/BwGPV5MUIyqbPE=)
                          2: C699F452FDF711E8B5A6725EC4F9AE02.roa (hash: KlRlIQIriEHzptBPZWJtv0ze/AJ1Mbh5VvKzMPz2Ls0=)
                          3: E6B3F23C041E11EA8A736F7EC4F9AE02.roa (hash: jaKd9YmNH2ThL3gQ5R9WUaO7/+PuHPSBitTnvOMLiws=)
                          4: 61E919B60C8D11EFA97EC809C4F9AE02.roa (hash: 6QULpY0nwICQI5KzGG+hH2ilXe6jG7YgfCERUQkDC9w=)
                          5: B5B4AB0839DA11EF9ECCF886C4F9AE02.roa (hash: 8rT3PqZci4f5Ml5bfePstSioC/qOql4PWazhv4sDx8U=)
                          6: CC92F19EEF1811ED96D1F733C4F9AE02.roa (hash: LghbHudSYXpZvbN5rcOeOmOH0Pzs46h/rkleKElMl2o=)
                          7: 7CB2221C91E111F09C322980C4F9AE02.roa (hash: Jm69XnxkSt8CaD8B4M7m2OfdxuyjH53yi3Y2n3LjPoQ=)
                          8: 087D2D80C4A711EB917EC55EC4F9AE02.roa (hash: UbbJeh1gWwixc1KBx/TcENcb/xObt11wZD4U7s3lZJw=)
                          9: 93C20720C45311EBB305C97FC4F9AE02.roa (hash: GR7vQYmLyzxJEas0mYDVxALBB8DKhJeqrbl3u+F+zek=)
                          10: 8296B130A0DC11EF8963C80AC4F9AE02.roa (hash: 8NzEuEnykX7h6fS43cE+6wqCd/7p7Nr/SKrcmIr6n8w=)
                          11: CB598446EF1811ED96D1F733C4F9AE02.roa (hash: tY9T8lU5kcHY3u57MMofX3/O0BgwKesBYrVdBe32n74=)
                          12: 38C33A60AF8811E98C7EFC2AC4F9AE02.roa (hash: qioL4f3Nv8IN5xmx7gisd0+PyYeZ++sJbxfOgfDQBd4=)
                          13: 2A162D644EE411EFB8076138C4F9AE02.roa (hash: CASKMKD1PnprwkuEK2EBDFm70EKC4cCUcvjuCxGca94=)
                          14: 660C8B72D03511EC9D87A00DC4F9AE02.roa (hash: ew8cW9pgjuyfp1DgnDklnBC1cWChQLDChxAz6sJgc3o=)
                          15: 459087B0C4A411EB90A2C754C4F9AE02.roa (hash: Cl2KWkJMmgS/msfjoIb/24y+W648m1pybjj0isVF+vk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl
                          rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 17:13:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5058 (0x13c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91402DC, serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
        Validity
            Not Before: Feb 28 17:13:05 2026 GMT
            Not After : Mar  7 17:13:05 2026 GMT
        Subject: CN=69a32221-3a8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ab:a5:6b:62:54:53:df:5a:df:61:ff:68:f4:
                    08:56:5f:b6:b6:3c:2e:6c:a1:1f:15:6d:da:7d:1f:
                    9c:f4:d0:5a:f6:77:67:49:92:33:3d:05:35:39:78:
                    ea:4c:51:d0:cb:58:f8:48:fc:4f:57:79:07:57:e2:
                    6c:e3:7c:de:5b:e8:e0:8b:4e:a2:39:24:8b:e4:e2:
                    75:5b:3c:a3:2e:ed:e2:f6:16:4c:50:25:1a:18:ae:
                    c2:9e:5f:60:6e:47:93:f2:bf:ef:e5:63:3e:ae:52:
                    86:0c:aa:93:bd:07:dd:c1:dd:57:4c:10:d5:1a:33:
                    11:1f:10:33:4e:d1:2a:97:7e:c3:d4:b3:34:6b:da:
                    bd:ac:ce:60:7b:d2:b4:0b:55:9f:07:01:a4:6a:75:
                    9c:01:34:6f:53:5f:aa:4b:b6:0b:eb:d4:14:5a:d4:
                    ba:12:8f:52:d7:5d:ad:b0:54:56:14:30:4a:af:8f:
                    52:01:ef:37:0b:7f:4c:ea:3f:4d:b4:93:9e:c6:15:
                    3f:47:f5:e5:bf:29:c5:5d:5d:f9:03:a0:22:2f:2c:
                    3a:c6:74:1c:5c:5e:3e:9c:70:2f:3f:5f:99:08:1c:
                    be:59:39:6a:0c:1a:8d:bc:a5:96:52:cd:9f:f8:5a:
                    a9:57:9f:13:44:22:7c:7c:2e:9d:b5:50:7c:56:03:
                    4c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:10:64:6A:37:8F:CA:B8:7A:24:B0:D0:82:A5:B6:FA:F8:B9:29:B2
            X509v3 Authority Key Identifier:
                keyid:C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:c9:ac:7a:65:d2:ea:35:25:6e:7d:77:df:c7:b0:3d:be:5d:
         d2:dc:aa:f3:d7:e3:22:20:a1:3d:db:7c:05:f6:12:e7:c8:b1:
         64:9a:9d:ab:5c:71:5f:5c:60:f4:e4:c6:00:ca:be:d0:6c:f1:
         85:7a:c5:ec:b1:50:53:cb:17:24:e4:4d:c8:09:8e:94:d2:61:
         fb:50:72:c0:a2:db:cc:0a:b1:95:43:21:29:31:d7:99:a8:87:
         d0:73:73:20:1b:79:4f:47:2d:9b:6f:44:69:6b:80:f1:b8:97:
         e8:a5:01:cf:05:54:38:17:f1:6f:d6:48:9b:ee:6d:b9:23:13:
         2c:67:b5:a1:c2:a6:58:23:38:9a:b0:82:95:28:7e:b7:09:0d:
         90:5e:da:27:bf:1b:a1:1b:52:ed:ed:74:37:f5:6c:7b:52:f5:
         c1:2f:53:d1:80:eb:96:95:8b:44:77:1c:50:b5:59:cd:a7:b6:
         65:a8:88:f0:72:ba:99:e3:11:09:01:81:dc:39:2d:61:5b:47:
         46:9d:7e:65:74:9a:44:c2:d1:6c:42:73:9d:8f:d8:bc:b5:00:
         23:39:71:53:58:a0:e6:f5:9f:20:d7:05:e2:84:b3:8d:28:3c:
         2b:8e:a6:32:c2:75:1b:89:af:bf:50:15:0d:9e:f5:98:86:4a:
         98:b9:9e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:16:40 2026 by rpki-client