Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.mft
File:                     WKIeeyP68huJ00Jw61b3RJwjmYY.mft (raw, json)
Hash identifier:          iObCFQpyTDKCL6Zz/5r54ByzuGSU4UlAkFt5e0pI5Tg=
Subject key identifier:   DC:1E:3D:C4:31:35:47:D9:24:41:58:20:84:1F:87:E1:F7:1B:19:ED
Authority key identifier: 58:A2:1E:7B:23:FA:F2:1B:89:D3:42:70:EB:56:F7:44:9C:23:99:86
Certificate issuer:       /CN=A91656C7/serialNumber=58A21E7B23FAF21B89D34270EB56F7449C239986
Certificate serial:       88
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKIeeyP68huJ00Jw61b3RJwjmYY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.mft
Manifest number:          85
Signing time:             Sun 01 Mar 2026 08:51:24 +0000
Manifest this update:     Sun 01 Mar 2026 08:51:23 +0000
Manifest next update:     Sun 08 Mar 2026 08:51:23 +0000
Files and hashes:         1: WKIeeyP68huJ00Jw61b3RJwjmYY.crl (hash: MziBSiWf1YtHiIAm6+7QWxY61HPipCMc8KTY42lYCzM=)
                          2: 559FC8C054F411F08DC15C53C4F9AE02.roa (hash: zs9nng7avK0tWsD65nMq0TspL/sz0o0SiRJl0sjpokk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.crl
                          rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKIeeyP68huJ00Jw61b3RJwjmYY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:51:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136 (0x88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91656C7, serialNumber=58A21E7B23FAF21B89D34270EB56F7449C239986
        Validity
            Not Before: Mar  1 08:51:23 2026 GMT
            Not After : Mar  8 08:51:23 2026 GMT
        Subject: CN=69a3fe0b-74f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:11:0e:2b:29:bb:b4:3e:e9:14:fc:fb:98:01:
                    ce:dd:a6:7a:41:08:e2:bb:05:7a:1b:5c:e9:8e:ae:
                    11:97:1f:c8:0d:28:69:8b:36:11:a2:a0:d3:f0:af:
                    33:91:c1:42:84:52:c0:28:ed:14:55:e5:97:cb:5d:
                    60:4e:e8:03:ae:07:ec:bb:ad:74:9e:bb:0c:fd:3f:
                    b9:cb:46:d5:e1:27:c8:bd:ee:53:16:cf:60:a5:93:
                    27:cc:27:f0:62:36:95:9b:b5:05:e0:64:aa:46:f7:
                    b5:d9:20:e1:58:46:7b:4d:4d:6d:46:05:9c:d0:05:
                    59:e8:74:91:b0:48:57:f8:96:f3:06:cd:f4:e4:0f:
                    c2:d0:0a:81:84:ea:96:4e:a0:94:e5:33:42:90:01:
                    d6:1b:28:4d:b2:25:10:45:73:7f:12:5a:47:71:30:
                    d2:69:02:d8:d7:85:10:46:da:b5:ba:57:2f:2b:62:
                    5e:dc:56:3c:0c:de:86:a7:8d:f9:b3:15:ae:cb:ff:
                    b4:90:28:ae:cd:61:07:55:b2:97:22:88:88:40:f5:
                    4f:50:39:2a:b9:39:fd:96:d1:9d:a8:c9:3d:79:c1:
                    08:87:29:94:08:e1:5b:86:56:57:97:0b:dc:72:d6:
                    22:ad:01:ab:3d:b1:01:82:05:3e:1f:52:e7:77:73:
                    b5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:1E:3D:C4:31:35:47:D9:24:41:58:20:84:1F:87:E1:F7:1B:19:ED
            X509v3 Authority Key Identifier:
                keyid:58:A2:1E:7B:23:FA:F2:1B:89:D3:42:70:EB:56:F7:44:9C:23:99:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKIeeyP68huJ00Jw61b3RJwjmYY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:88:bc:18:df:7a:2d:aa:37:63:97:47:d2:00:2f:51:cf:64:
         6f:7e:8c:b2:e5:cd:33:8b:4e:43:34:94:69:5f:f6:40:4c:82:
         19:36:23:73:35:fe:6b:9d:08:a3:a8:9b:db:bf:45:d7:93:f0:
         dc:36:40:ec:e3:b7:dd:4b:de:ed:03:e7:1a:ba:34:2f:e6:a9:
         cc:0b:21:e8:54:80:cb:75:9d:fe:7a:f6:fd:7c:97:c7:e4:bc:
         e3:74:d3:ac:6c:e9:f0:80:bc:41:24:58:e1:2e:96:0c:59:63:
         c1:c7:ce:56:53:4a:5d:ed:50:40:d7:b9:7a:52:8d:b1:0c:f7:
         c2:11:fa:fc:ac:b3:9c:5f:41:b7:0b:7d:ac:1b:30:f2:bf:4f:
         fb:78:0d:81:9f:d3:57:bf:57:77:01:a5:61:e5:70:f8:b3:57:
         56:6c:2a:f3:53:7a:19:47:18:39:20:55:89:1a:9d:a7:77:e1:
         1a:b1:3f:82:95:74:b1:c8:ac:6f:71:ea:76:3f:2f:94:46:b8:
         96:23:6a:cb:0f:c4:e9:bf:ee:a0:5e:70:36:a8:e6:8c:5b:d0:
         15:13:d7:c5:ef:5b:d3:98:a8:7e:40:3b:3c:d1:fd:7e:27:e0:
         bb:23:9d:50:93:98:2d:d6:63:e0:a2:df:54:de:cf:6b:8d:5b:
         f3:f9:1f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:12:10 2026 by rpki-client