Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.mft
File:                     wj3utHnnD2DvynyIRiuVudwiydA.mft (raw, json)
Hash identifier:          7hQb9FUtUuaptOA3KKaiYMYjOWI23LwKlh9mY1L2REg=
Subject key identifier:   42:24:B9:6F:B8:B3:33:F2:9B:36:26:AE:23:6C:1B:C1:2D:5B:E6:1E
Authority key identifier: C2:3D:EE:B4:79:E7:0F:60:EF:CA:7C:88:46:2B:95:B9:DC:22:C9:D0
Certificate issuer:       /CN=A9142A22/serialNumber=C23DEEB479E70F60EFCA7C88462B95B9DC22C9D0
Certificate serial:       A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wj3utHnnD2DvynyIRiuVudwiydA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.mft
Manifest number:          90
Signing time:             Fri 17 Apr 2026 07:16:42 +0000
Manifest this update:     Fri 17 Apr 2026 07:16:41 +0000
Manifest next update:     Fri 24 Apr 2026 07:16:41 +0000
Files and hashes:         1: wj3utHnnD2DvynyIRiuVudwiydA.crl (hash: m3P7oqm3fQNXXPgrzeYAmL90iQSx96M4MovCbxF5/lE=)
                          2: 9EE7FBDA678511F0999A252DC4F9AE02.roa (hash: Iu+MvNjXylPZy283mB/J6+7AiPxESlN4SHOf0/N0qug=)
                          3: 9F685E60678511F0999A252DC4F9AE02.roa (hash: F0BVTAtasd/U+5Pd7iq4lB4rkiv9dNM8GMlahH5MNTA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.crl
                          rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wj3utHnnD2DvynyIRiuVudwiydA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:16:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160 (0xa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142A22, serialNumber=C23DEEB479E70F60EFCA7C88462B95B9DC22C9D0
        Validity
            Not Before: Apr 17 07:16:41 2026 GMT
            Not After : Apr 24 07:16:41 2026 GMT
        Subject: CN=69e1de5a-1737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:09:22:a0:f3:72:05:27:09:59:2c:f1:18:e3:
                    d7:51:17:ad:a3:e8:7e:b1:6e:14:ff:6b:88:d3:69:
                    63:d2:2d:24:23:75:5d:05:0e:1e:64:78:67:fe:62:
                    cc:ce:9f:ef:86:3a:f2:76:18:5d:eb:45:7c:d3:3f:
                    6e:02:81:64:46:70:52:32:6b:a2:32:ab:93:14:90:
                    c6:9e:43:0f:5c:01:e2:d9:d6:74:98:7a:fc:3f:d5:
                    e4:01:d5:73:77:11:66:6b:65:2c:63:3b:bf:93:7d:
                    d0:c7:55:76:3f:13:77:98:3d:6d:09:c1:75:05:7b:
                    7c:da:ed:4a:c0:23:ef:9b:bd:3b:31:c9:8d:37:9e:
                    b8:2a:5d:e8:26:77:c3:bb:80:39:da:fa:c7:d9:3b:
                    2e:f1:aa:3f:19:ac:a7:40:18:a3:f6:f5:86:20:0b:
                    0f:40:6c:5e:80:2e:0d:c5:c4:75:38:4f:42:4b:6e:
                    8e:6f:87:84:72:91:6e:5d:54:a9:f1:81:44:0c:0e:
                    33:6f:a9:57:b7:52:57:4d:04:5f:37:60:90:70:a9:
                    b2:ce:fc:54:78:34:f5:fa:d1:d6:2f:32:1e:42:7d:
                    e1:a0:fa:93:13:e6:28:93:4b:aa:0d:0e:1a:76:9d:
                    7b:81:c9:7f:68:7d:ce:5c:cc:d4:3a:4e:ed:e3:29:
                    6c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:24:B9:6F:B8:B3:33:F2:9B:36:26:AE:23:6C:1B:C1:2D:5B:E6:1E
            X509v3 Authority Key Identifier:
                keyid:C2:3D:EE:B4:79:E7:0F:60:EF:CA:7C:88:46:2B:95:B9:DC:22:C9:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wj3utHnnD2DvynyIRiuVudwiydA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:b9:7a:af:8e:bb:3f:f0:35:b1:f7:b8:c8:6d:a7:68:e5:24:
         eb:44:93:57:59:c0:47:f8:c5:d4:27:9e:d5:09:3f:d1:c4:38:
         cd:9d:23:a3:02:b0:5b:fe:fd:f2:3c:18:c1:c7:4c:3b:81:24:
         a6:a5:fb:c2:c4:a3:a7:d4:ac:f1:99:b8:47:92:34:af:cd:a4:
         17:6e:6e:72:1d:7a:74:64:83:27:10:f6:f1:04:8b:84:c1:c1:
         84:d4:ae:16:1c:cf:0d:df:fa:ad:58:11:54:49:2f:c1:5a:af:
         f5:4a:b9:46:01:61:9f:3e:e7:b6:f0:13:6b:e6:2f:22:33:3f:
         34:46:c1:0f:ea:91:32:a0:d0:79:d6:b1:28:c6:cb:c2:00:cf:
         6c:58:fd:63:c5:54:50:ce:51:cc:da:af:ba:93:15:aa:05:bd:
         14:08:d5:dd:82:09:f8:50:f6:61:69:16:b1:d8:5d:f9:68:9c:
         15:76:b1:cd:3e:88:89:39:05:71:7a:e7:1c:26:5f:59:93:ee:
         26:c8:e3:18:58:5d:e1:ec:8a:3d:c7:dd:e2:21:b9:35:86:9e:
         67:53:1d:03:d3:de:ab:d9:d8:fb:40:74:e5:ea:48:ce:3d:8c:
         f2:23:ed:b5:b7:8a:a2:71:13:44:26:de:e2:35:40:e4:4f:7b:
         51:e2:24:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:02:13 2026 by rpki-client