Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91425C3/2C9714EE660411F0A4C5192BC4F9AE02/Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.mft
File:                     Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.mft (raw, json)
Hash identifier:          zFhkyp3AM6NZvVbWiaOAO5ns+2h0SrIEOHzb7DzC/NY=
Subject key identifier:   15:3D:13:D1:2F:7B:10:C6:E2:26:B7:EC:45:3D:0E:A7:85:DC:2B:88
Authority key identifier: 5A:FB:B9:CB:BC:65:46:BD:55:1D:17:26:30:19:0A:E8:1A:9A:F1:27
Certificate issuer:       /CN=A91425C3/serialNumber=5AFBB9CBBC6546BD551D172630190AE81A9AF127
Certificate serial:       8F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91425C3/2C9714EE660411F0A4C5192BC4F9AE02/Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.mft
Manifest number:          8D
Signing time:             Fri 17 Apr 2026 07:16:53 +0000
Manifest this update:     Fri 17 Apr 2026 07:16:53 +0000
Manifest next update:     Fri 24 Apr 2026 07:16:53 +0000
Files and hashes:         1: Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.crl (hash: JRAw33chG/ev2KDw/aUocQ4ZPlD5H+qVT5uBVFwv2oM=)
                          2: 44E524C6660611F0AC01FC4FC4F9AE02.roa (hash: IZAEj6W6QOuR8H1nZarqOKRBQJYHaDrF6ES808DOjWg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91425C3/2C9714EE660411F0A4C5192BC4F9AE02/Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.crl
                          rsync://rpki.apnic.net/member_repository/A91425C3/2C9714EE660411F0A4C5192BC4F9AE02/Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:16:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143 (0x8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91425C3, serialNumber=5AFBB9CBBC6546BD551D172630190AE81A9AF127
        Validity
            Not Before: Apr 17 07:16:53 2026 GMT
            Not After : Apr 24 07:16:53 2026 GMT
        Subject: CN=69e1de65-dbe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9e:9f:3d:ca:22:d5:c9:21:bc:39:f7:02:8c:
                    f3:27:61:d9:57:ec:66:24:37:1a:a8:47:19:fe:ed:
                    de:3f:06:a6:0f:78:14:09:cc:79:61:38:e6:b4:12:
                    91:99:43:c0:90:65:fe:98:2c:c2:70:69:35:c2:15:
                    7e:9e:de:31:b4:b9:ee:21:0c:10:b5:4c:9e:72:e3:
                    f6:80:22:2a:83:8d:d1:80:88:37:13:8c:1a:c1:0c:
                    6b:03:7b:57:70:af:61:55:31:11:40:90:59:c9:09:
                    75:6d:be:ae:b0:ab:3f:28:54:c4:52:b8:89:23:be:
                    e4:a3:13:32:a6:50:a3:77:89:57:30:9f:6b:ff:b1:
                    31:2a:d2:a6:c7:13:93:3c:72:25:92:f6:aa:02:4e:
                    76:fc:b4:9f:35:01:9b:90:9a:36:e2:3d:04:38:f6:
                    bb:5f:34:3e:7f:7c:f3:93:57:c1:b3:c8:17:6d:0c:
                    c3:c4:42:5c:c2:f2:b8:f9:52:57:00:fe:02:33:73:
                    45:ef:57:cc:2d:0e:8c:d2:ed:cb:28:9b:40:b1:6b:
                    5e:c5:cf:aa:b5:8e:74:4b:82:ab:ca:52:de:13:7f:
                    c3:83:bf:ac:a7:d5:e6:3e:c7:6e:a3:ee:96:29:e6:
                    d4:4a:7d:b2:04:57:92:da:30:d3:5f:3b:af:4a:47:
                    14:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:3D:13:D1:2F:7B:10:C6:E2:26:B7:EC:45:3D:0E:A7:85:DC:2B:88
            X509v3 Authority Key Identifier:
                keyid:5A:FB:B9:CB:BC:65:46:BD:55:1D:17:26:30:19:0A:E8:1A:9A:F1:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91425C3/2C9714EE660411F0A4C5192BC4F9AE02/Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91425C3/2C9714EE660411F0A4C5192BC4F9AE02/Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:aa:d4:85:2b:5c:65:15:d0:cc:58:7d:37:bb:61:fd:93:2a:
         ac:1a:83:2a:0d:ee:cc:5d:98:66:19:4f:02:63:f7:a0:4a:8f:
         42:93:34:a0:de:d2:ef:af:1a:69:c7:5d:2c:90:26:c1:7f:f3:
         86:3e:74:a5:b2:42:41:8e:15:67:e6:7f:da:7e:96:7c:3b:46:
         5a:4f:50:e8:ee:ec:ec:75:a6:e3:e9:43:2c:2d:67:33:7b:17:
         62:e7:35:9a:13:6a:15:86:4e:08:b9:61:79:5d:ef:8f:62:06:
         b5:c8:c2:f1:26:82:5c:07:d9:04:50:cd:06:ab:a2:9a:0e:c2:
         f1:ce:7c:32:35:09:89:73:ab:4e:88:e4:d1:d2:93:39:11:3f:
         bb:fd:1a:07:47:2e:3b:d1:f1:fb:54:82:72:7a:34:10:93:2c:
         ea:05:61:97:df:89:08:96:7f:f4:51:82:2b:82:34:9c:80:37:
         28:ea:89:3e:c6:d2:8a:dd:10:6f:cd:16:dd:0b:47:f4:4b:28:
         ec:68:92:2c:8c:8d:6e:cc:65:33:99:16:2b:05:7a:6f:d0:14:
         86:43:f6:6e:ef:18:bf:51:13:99:21:93:d8:c3:06:7b:a1:cb:
         f9:2f:d8:06:37:59:c2:ea:b1:f5:61:f0:a1:54:c3:d0:6b:37:
         18:9e:1b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:58:19 2026 by rpki-client