Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft
File:                     WM2A__9oRR1A_ALHDduR-tjsMT0.mft (raw, json)
Hash identifier:          DS9PwZYGu7lQgxvM0VqSTm84N3jnZrAdMy4qC1nWbcA=
Subject key identifier:   F3:AA:A6:22:B0:B9:FD:7B:80:70:44:35:A5:01:3B:19:50:63:2A:93
Authority key identifier: 58:CD:80:FF:FF:68:45:1D:40:FC:02:C7:0D:DB:91:FA:D8:EC:31:3D
Certificate issuer:       /CN=A916D17C/serialNumber=58CD80FFFF68451D40FC02C70DDB91FAD8EC313D
Certificate serial:       0511
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WM2A__9oRR1A_ALHDduR-tjsMT0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft
Manifest number:          050C
Signing time:             Sun 01 Mar 2026 00:14:10 +0000
Manifest this update:     Sun 01 Mar 2026 00:14:09 +0000
Manifest next update:     Sun 08 Mar 2026 00:14:09 +0000
Files and hashes:         1: WM2A__9oRR1A_ALHDduR-tjsMT0.crl (hash: XrL64XE+G0ldlcCiT0rELk6YubbZVCn17A6TOhBXiWE=)
                          2: 980C961041CB11EC9262BD80C4F9AE02.roa (hash: flGZY0OZ/isSxgXY6JSmW0PQxMoPLoOfi+JFDAY+z3c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.crl
                          rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WM2A__9oRR1A_ALHDduR-tjsMT0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 00:14:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1297 (0x511)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D17C, serialNumber=58CD80FFFF68451D40FC02C70DDB91FAD8EC313D
        Validity
            Not Before: Mar  1 00:14:09 2026 GMT
            Not After : Mar  8 00:14:09 2026 GMT
        Subject: CN=69a384d2-9807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:67:3f:64:1d:54:ae:79:13:5e:33:03:c3:6c:
                    ef:81:d2:de:a7:d9:b1:0f:b1:05:64:4b:57:87:19:
                    60:57:5d:ff:e9:fc:ab:48:fd:f0:8d:a9:f8:b9:e6:
                    c5:a1:ef:b8:79:35:cf:4a:2a:4c:d5:36:e8:e8:b3:
                    79:fb:16:c6:a6:29:cc:63:8d:4a:fb:c4:58:8f:a8:
                    c0:0f:70:8d:fa:e3:3d:8f:68:3f:89:d6:46:1b:32:
                    3f:59:ad:dc:83:4c:42:38:c4:f6:6a:a7:1b:67:f4:
                    c6:5b:84:a7:34:2c:e7:bb:fe:56:86:69:0d:73:84:
                    71:07:37:f8:39:8f:2f:25:ec:42:f0:97:50:97:2f:
                    33:44:21:a9:cc:e2:c8:55:fc:0d:cb:48:28:18:8c:
                    1f:c3:94:ff:bc:87:19:c8:e8:18:ec:46:8a:59:45:
                    18:24:48:57:48:5a:cb:18:90:07:b7:24:8a:42:32:
                    09:ef:f6:39:b0:d6:db:af:54:7a:87:1e:76:88:93:
                    68:e8:00:d7:d7:5a:7e:f7:f3:f9:c6:c8:cc:2d:2d:
                    8d:e0:d3:d9:ac:58:bb:5a:6f:86:68:e1:76:87:72:
                    11:81:0a:b3:10:71:2c:5e:94:1d:e8:f6:60:52:ba:
                    b7:dd:ed:77:27:c1:aa:31:23:a8:42:c2:6a:40:ff:
                    ca:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:AA:A6:22:B0:B9:FD:7B:80:70:44:35:A5:01:3B:19:50:63:2A:93
            X509v3 Authority Key Identifier:
                keyid:58:CD:80:FF:FF:68:45:1D:40:FC:02:C7:0D:DB:91:FA:D8:EC:31:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WM2A__9oRR1A_ALHDduR-tjsMT0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:bf:2f:83:0d:1b:12:c0:2d:d4:99:70:a7:dc:d3:98:b3:70:
         25:f5:54:50:70:f7:ee:43:1d:62:88:f8:8c:68:ee:5f:7d:ed:
         a2:a7:ce:a1:8e:56:61:e7:db:39:29:e8:70:04:9d:e5:5d:d0:
         45:78:c9:88:af:bc:c0:9a:ea:38:31:d9:7d:53:f9:86:38:ac:
         9e:72:18:31:48:a2:54:b7:a6:3a:15:55:72:17:d5:70:bb:c4:
         64:c9:d6:6b:04:0d:63:43:27:e5:06:65:4c:52:39:f0:fd:00:
         55:35:f6:73:79:f8:8e:b4:79:62:74:40:d1:7c:95:a5:7b:d6:
         9e:ed:35:48:92:1c:34:2d:96:f9:7d:e0:20:d7:37:73:11:95:
         b6:02:39:ca:0e:30:4a:c4:ce:e5:f1:41:68:28:0d:61:73:b5:
         cf:81:f5:d1:78:df:af:a3:bb:25:27:6a:8a:e1:f0:69:14:ed:
         94:a5:f0:41:b9:31:ea:41:30:37:96:3c:4b:4a:3a:7b:a9:e7:
         97:4e:f8:31:2e:40:bd:eb:31:fb:92:6f:84:50:15:0d:f9:fb:
         22:5b:cc:04:8c:a7:e5:3a:71:47:63:7a:35:ad:c3:d6:c8:eb:
         22:62:2a:03:63:85:96:c4:fd:8e:db:d6:96:ba:9b:52:b8:82:
         4e:de:61:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:30 2026 by rpki-client