Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft
File:                     WR4siXPGPwtQ7voTRGvLFexS5R8.mft (raw, json)
Hash identifier:          RRWc5BSkreBxmeg0wLueN/jsIGG1ZvQYA6d9jIWCcJI=
Subject key identifier:   E3:A7:B9:8E:93:7F:F7:BD:0A:3B:FD:59:26:44:7B:38:C9:1C:CF:D5
Authority key identifier: 59:1E:2C:89:73:C6:3F:0B:50:EE:FA:13:44:6B:CB:15:EC:52:E5:1F
Certificate issuer:       /CN=A9159E90/serialNumber=591E2C8973C63F0B50EEFA13446BCB15EC52E51F
Certificate serial:       023D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WR4siXPGPwtQ7voTRGvLFexS5R8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft
Manifest number:          0234
Signing time:             Sat 13 Jun 2026 02:44:57 +0000
Manifest this update:     Sat 13 Jun 2026 02:44:56 +0000
Manifest next update:     Sat 20 Jun 2026 02:44:56 +0000
Files and hashes:         1: WR4siXPGPwtQ7voTRGvLFexS5R8.crl (hash: 1gkgeGeoPGDm/A3w2Z9IA8b3HjJK8jwCTW8PWiytP9o=)
                          2: 7893F3DC0B8511F086B2C121C4F9AE02.roa (hash: 6s8dW9eLTERLyjzRmVjBJQp0yaZ34l8yCtxJv23gVCM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.crl
                          rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WR4siXPGPwtQ7voTRGvLFexS5R8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:44:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 573 (0x23d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9159E90, serialNumber=591E2C8973C63F0B50EEFA13446BCB15EC52E51F
        Validity
            Not Before: Jun 13 02:44:56 2026 GMT
            Not After : Jun 20 02:44:56 2026 GMT
        Subject: CN=6a2cc428-5308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:28:5d:bc:f4:e8:84:69:65:02:aa:75:ad:d1:
                    0b:12:7d:9e:75:29:e9:95:ec:ce:48:ed:54:06:8b:
                    11:09:5e:ad:2e:99:fa:9e:e1:3d:ed:e8:f5:1d:7e:
                    5a:d9:11:81:35:f2:59:ea:c3:ef:4b:0c:83:8e:cb:
                    47:ec:56:f0:c7:a7:1b:a2:ff:e6:3f:91:aa:cf:31:
                    2d:02:b6:a5:1a:c4:1d:23:6c:35:1f:35:64:9c:2a:
                    fb:26:52:c9:c6:2c:c3:e7:61:e7:68:f2:30:08:16:
                    c9:81:69:f0:be:34:65:bb:b1:65:d7:b5:9d:7f:c7:
                    b5:0a:97:1d:5d:bd:9b:60:6f:0e:e6:d7:6d:08:21:
                    43:6a:a0:d9:9c:86:0b:43:b7:38:b7:85:b3:c3:ae:
                    00:e0:ac:ca:19:72:7f:2d:a0:fe:69:07:9d:a6:28:
                    76:05:80:6c:9e:b4:5f:68:71:2d:76:a2:f7:15:db:
                    3c:94:84:3d:57:dc:63:41:68:1b:72:f1:ea:39:83:
                    53:94:c5:7c:07:9a:ce:01:a5:1d:42:93:80:1b:d0:
                    47:e1:8b:25:39:23:2a:0c:1c:7f:34:56:d3:6a:8a:
                    86:7d:ca:78:bc:f1:42:00:a6:b5:45:4f:29:aa:e7:
                    13:c1:70:7f:2a:c5:7f:d5:46:22:78:82:5c:16:52:
                    28:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A7:B9:8E:93:7F:F7:BD:0A:3B:FD:59:26:44:7B:38:C9:1C:CF:D5
            X509v3 Authority Key Identifier:
                keyid:59:1E:2C:89:73:C6:3F:0B:50:EE:FA:13:44:6B:CB:15:EC:52:E5:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WR4siXPGPwtQ7voTRGvLFexS5R8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:e6:b1:5a:15:47:e8:1e:94:d3:67:b3:2e:22:48:50:ca:e2:
         00:53:05:89:98:70:73:f7:33:39:08:6b:89:c3:13:97:0a:30:
         67:59:04:f0:eb:1a:91:ae:54:e6:ed:52:71:d2:8c:8a:24:90:
         bd:65:c0:fc:e8:7d:a5:7a:38:c0:51:29:ef:e5:d5:05:b0:02:
         a1:0f:0d:be:ce:bc:f4:aa:92:55:8c:06:d7:a1:53:29:c5:73:
         3b:8d:64:7d:14:4e:aa:31:25:52:45:a4:a8:27:36:03:8e:5f:
         0e:9f:6c:aa:1e:32:4f:8f:7b:ac:e3:42:97:ff:34:31:ed:f6:
         c7:b5:a0:33:3e:76:36:c6:1d:ec:d6:d9:43:59:e6:88:3d:7c:
         d3:4e:25:ac:88:19:2b:89:e9:90:01:d4:4d:d5:47:77:04:57:
         f9:98:e1:db:ac:03:23:73:2c:41:0b:a2:f4:18:5a:ef:95:06:
         54:57:00:9e:2d:c4:09:e3:21:98:e6:40:eb:32:80:c6:ce:24:
         84:57:07:93:c2:7e:b3:65:df:09:80:58:1b:ab:be:e9:27:05:
         e3:24:64:8c:5f:0b:0d:67:8d:09:d9:48:e9:aa:9c:bc:73:56:
         eb:c3:e5:c5:7a:0f:c9:16:ff:f0:ba:bf:fe:10:10:dc:d9:30:
         4e:0b:92:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:17:38 2026 by rpki-client