Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft
File:                     WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft (raw, json)
Hash identifier:          r26qzzvbv0GAFIDmYvZlcybwwzNNDxfW6b/6ePRNtBI=
Subject key identifier:   0F:F4:2E:51:1E:ED:FD:7C:37:71:E4:94:34:CF:61:A2:33:45:81:55
Authority key identifier: 59:F9:D4:8D:D9:16:90:97:83:E3:17:71:D8:AD:7E:CB:30:DC:3B:A2
Certificate issuer:       /CN=A917C909/serialNumber=59F9D48DD916909783E31771D8AD7ECB30DC3BA2
Certificate serial:       010D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfnUjdkWkJeD4xdx2K1-yzDcO6I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft
Manifest number:          0104
Signing time:             Fri 17 Apr 2026 05:56:52 +0000
Manifest this update:     Fri 17 Apr 2026 05:56:51 +0000
Manifest next update:     Fri 24 Apr 2026 05:56:51 +0000
Files and hashes:         1: WfnUjdkWkJeD4xdx2K1-yzDcO6I.crl (hash: PDb85e5Wm+PuI7j7pdmx8InsDZx+D2oXBQ5KQa6EOME=)
                          2: 46C0C4E0770311F09B9D387BC4F9AE02.roa (hash: seNWkSzPB+y0QnMqGd7lzmRBQ9fM1nYcZLpQ+T55VyE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.crl
                          rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfnUjdkWkJeD4xdx2K1-yzDcO6I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:56:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 269 (0x10d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C909, serialNumber=59F9D48DD916909783E31771D8AD7ECB30DC3BA2
        Validity
            Not Before: Apr 17 05:56:51 2026 GMT
            Not After : Apr 24 05:56:51 2026 GMT
        Subject: CN=69e1cba3-ba5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:33:3d:99:c2:70:43:49:c6:1b:61:b6:a5:62:
                    a5:3d:73:bc:59:03:23:41:38:1f:71:90:49:d4:6d:
                    cc:7a:6a:38:55:5d:64:c4:f0:9a:a1:02:80:66:d5:
                    41:95:4c:2b:a6:53:1a:bc:d2:32:40:40:61:0a:8c:
                    2d:eb:92:fa:72:85:ab:c2:b3:d0:df:40:2a:65:45:
                    02:78:25:53:0f:95:99:35:ff:f3:45:a4:ec:48:2d:
                    9f:d8:8b:0c:78:24:dd:77:4d:33:18:8c:5c:84:8d:
                    a7:50:b7:24:39:64:20:b4:02:93:59:49:91:c9:07:
                    95:02:94:60:ba:ec:f1:db:e8:e5:ee:f7:47:f1:6e:
                    1a:e7:a5:01:49:88:26:1b:75:56:87:67:6e:3a:b2:
                    3d:6c:56:30:b9:5e:7b:ca:29:41:45:46:74:f3:2f:
                    a8:f2:c5:3c:33:5d:ed:c0:9b:9e:86:a3:ad:8f:d1:
                    19:94:bd:a7:42:f4:32:48:66:78:a5:80:05:8d:4c:
                    85:e1:85:5f:7c:e5:9f:9c:86:8e:d7:fd:1c:bb:a1:
                    f8:3c:29:8f:e1:bc:70:7b:56:e3:6e:e9:2b:e0:e4:
                    db:0f:dd:c0:54:5d:1f:b3:f2:f3:86:73:cf:5b:2f:
                    50:d3:1f:56:5b:70:cb:e4:32:f7:f6:04:23:44:27:
                    4a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F4:2E:51:1E:ED:FD:7C:37:71:E4:94:34:CF:61:A2:33:45:81:55
            X509v3 Authority Key Identifier:
                keyid:59:F9:D4:8D:D9:16:90:97:83:E3:17:71:D8:AD:7E:CB:30:DC:3B:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfnUjdkWkJeD4xdx2K1-yzDcO6I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:7a:75:24:64:29:5d:a0:6f:62:c8:9d:f2:34:37:da:74:7c:
         a2:f7:3f:cf:fd:7c:c2:c9:77:59:3a:f5:b5:c9:04:24:e1:d6:
         ee:23:da:63:f8:61:f4:ba:a8:cc:2f:c3:16:cb:eb:0c:f2:48:
         6b:62:d2:1b:0e:f1:4c:00:28:cf:dd:7f:1d:b1:aa:81:65:43:
         a7:bc:20:47:54:5e:e1:31:a1:9a:df:7b:45:28:74:b9:84:0e:
         f3:87:b3:25:e3:a9:38:5d:55:b9:2c:fc:1a:30:8c:0e:8b:fa:
         fc:af:32:2f:e3:66:b5:93:c0:cb:e9:f3:a5:0f:c6:6a:68:a1:
         41:3c:ec:72:86:dd:85:f4:9d:03:45:4a:35:e9:59:a6:7b:93:
         c9:21:9a:0c:1f:56:50:b6:cb:ca:24:12:43:c3:22:fb:51:4b:
         42:7a:0d:91:df:6e:ab:99:ce:57:11:82:8b:37:94:90:18:0b:
         0b:a7:a4:d6:54:3d:66:c1:d2:79:0a:cc:bf:34:2f:34:68:b0:
         12:64:86:9e:e9:c4:44:52:01:e2:b4:27:09:cd:6d:a9:21:d2:
         69:e5:43:ee:d8:a9:57:27:91:e2:1e:b9:ef:31:14:50:e3:36:
         21:70:81:5b:06:db:fb:e0:7d:3c:73:e5:99:79:83:f1:db:0f:
         77:eb:81:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:32:41 2026 by rpki-client