Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.mft
File:                     WKqOb2Cb9VgUA20moSpeKyUViTo.mft (raw, json)
Hash identifier:          Xdl1GiWT9B/XZHXxqI3gaz593ohBYplceTA4Mni/FwI=
Subject key identifier:   C2:1E:94:84:5C:9D:01:CE:55:3F:E2:1D:20:A7:C0:08:31:7A:01:0C
Authority key identifier: 58:AA:8E:6F:60:9B:F5:58:14:03:6D:26:A1:2A:5E:2B:25:15:89:3A
Certificate issuer:       /CN=A914EBB2/serialNumber=58AA8E6F609BF55814036D26A12A5E2B2515893A
Certificate serial:       23
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKqOb2Cb9VgUA20moSpeKyUViTo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.mft
Manifest number:          21
Signing time:             Sun 01 Mar 2026 06:21:04 +0000
Manifest this update:     Sun 01 Mar 2026 06:21:04 +0000
Manifest next update:     Sun 08 Mar 2026 06:21:04 +0000
Files and hashes:         1: WKqOb2Cb9VgUA20moSpeKyUViTo.crl (hash: ekQbhLRnbuEamEFWEIDJa+5KIRYl/XuvGgnbW+MJ9PI=)
                          2: D23FC546011111F1B3598E67446F56BC.roa (hash: TuJfvHHVX0A6yfj6WE+4oini8CaUXIpP8OQUAMJPO/w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.crl
                          rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKqOb2Cb9VgUA20moSpeKyUViTo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:21:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EBB2, serialNumber=58AA8E6F609BF55814036D26A12A5E2B2515893A
        Validity
            Not Before: Mar  1 06:21:04 2026 GMT
            Not After : Mar  8 06:21:04 2026 GMT
        Subject: CN=69a3dad0-159b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6e:83:b4:14:11:95:75:80:87:64:71:0c:b6:
                    12:ee:7c:ec:a5:07:af:e3:8d:96:68:ff:e9:54:f1:
                    0c:b3:05:82:01:13:98:4f:42:3a:8c:e9:97:de:fd:
                    55:33:27:d8:c6:11:bc:b2:e5:62:e1:64:2b:59:8d:
                    fe:10:e9:f1:16:80:d9:c2:01:03:30:6a:9f:36:4c:
                    3a:fd:a7:27:be:35:2d:4b:eb:44:3e:b8:82:6f:87:
                    fc:fd:3b:b5:76:d8:db:59:31:da:ea:80:05:cc:8e:
                    0c:7c:56:88:d0:ee:3b:5a:4d:fe:58:eb:aa:50:70:
                    0d:f3:59:e5:e4:58:a8:14:db:8a:9b:8f:df:52:f4:
                    08:ea:bb:e3:2a:ef:81:e0:53:00:d5:45:1e:b5:6a:
                    c8:99:8c:b5:59:83:11:f7:d3:7f:2e:12:a0:19:5b:
                    85:bc:5f:a3:67:bc:a9:a4:25:d0:d2:a5:a8:22:66:
                    61:38:d4:ca:67:c4:f3:ed:3c:6f:ea:d8:64:d4:2b:
                    69:ac:f3:8c:69:7e:2b:9a:c7:39:ac:6d:43:f3:e2:
                    35:07:92:ff:ef:ab:c4:97:cb:10:b4:07:60:c7:b6:
                    60:b8:27:a2:2b:19:c8:0d:69:9d:c4:ce:78:e7:25:
                    67:d7:49:d3:38:e8:12:d8:10:ec:fc:47:a8:1e:6a:
                    35:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:1E:94:84:5C:9D:01:CE:55:3F:E2:1D:20:A7:C0:08:31:7A:01:0C
            X509v3 Authority Key Identifier:
                keyid:58:AA:8E:6F:60:9B:F5:58:14:03:6D:26:A1:2A:5E:2B:25:15:89:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKqOb2Cb9VgUA20moSpeKyUViTo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:24:f6:81:15:02:30:5a:32:83:6e:f8:f8:60:35:df:56:64:
         70:6b:f4:8b:3a:89:ed:91:55:f3:a8:41:f1:4f:70:6f:8f:ae:
         26:e6:ea:90:87:2f:4c:80:15:1d:3d:42:61:af:85:d6:d3:ef:
         22:fb:d9:67:bb:e1:0c:44:50:3d:8a:72:91:0e:cc:16:47:9b:
         2b:29:85:8f:dc:e1:aa:e2:39:a8:64:d1:6f:b8:38:b0:a7:92:
         a3:7d:8f:18:cc:5a:b9:d0:ab:46:fc:7f:b6:62:f8:41:ae:84:
         bd:e8:20:59:5e:34:b4:20:16:c1:72:a6:7e:70:4e:00:25:68:
         51:44:ad:3e:6a:8a:94:2b:76:74:82:38:70:c3:39:5e:09:a5:
         88:54:b6:95:c7:ba:63:a2:83:0b:12:22:c1:bd:d2:41:6c:3b:
         af:7e:1c:a3:44:0b:45:fd:73:77:65:ec:0c:c0:b9:51:c0:69:
         21:ce:a6:58:8b:84:41:55:8f:b6:39:89:34:de:61:a4:33:61:
         43:96:a9:6b:b4:bf:33:17:8d:9c:6b:6b:e0:1d:db:c1:67:d1:
         72:8a:03:46:c3:dd:01:70:8c:c8:79:9b:6a:fc:ad:da:5f:3d:
         d6:33:4d:42:26:8d:41:4e:f2:c9:7b:17:29:0d:8b:96:d9:c0:
         9f:78:24:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:20:00 2026 by rpki-client