Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.mft
File:                     WbbWzXMF8t7sK45hPF2PSUJeADk.mft (raw, json)
Hash identifier:          vg8Ht3wSpi02ZBoD6Payq6pW8VEAqKfF9Ru3fPxwgUk=
Subject key identifier:   E3:9C:3A:26:B4:3B:25:E0:A9:27:1B:75:31:85:71:B6:48:77:00:B5
Authority key identifier: 59:B6:D6:CD:73:05:F2:DE:EC:2B:8E:61:3C:5D:8F:49:42:5E:00:39
Certificate issuer:       /CN=A9185FD0/serialNumber=59B6D6CD7305F2DEEC2B8E613C5D8F49425E0039
Certificate serial:       0222
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WbbWzXMF8t7sK45hPF2PSUJeADk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.mft
Manifest number:          021A
Signing time:             Fri 17 Apr 2026 02:37:21 +0000
Manifest this update:     Fri 17 Apr 2026 02:37:21 +0000
Manifest next update:     Fri 24 Apr 2026 02:37:21 +0000
Files and hashes:         1: WbbWzXMF8t7sK45hPF2PSUJeADk.crl (hash: Pw/oSNKEPwoAyqOXVI3NwjBAg8wwi/6CbIHW/IS+SpA=)
                          2: 9E5F4D0060E111EEBD81AD43C4F9AE02.roa (hash: szwrfHOT/xYsCIGVHX2T8M49IriuiiWjJIXXeeXlaic=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.crl
                          rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WbbWzXMF8t7sK45hPF2PSUJeADk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:37:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 546 (0x222)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185FD0, serialNumber=59B6D6CD7305F2DEEC2B8E613C5D8F49425E0039
        Validity
            Not Before: Apr 17 02:37:21 2026 GMT
            Not After : Apr 24 02:37:21 2026 GMT
        Subject: CN=69e19ce1-07d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d1:2b:74:fd:30:78:b2:5e:5a:84:1b:9f:72:
                    6f:3e:89:86:d4:50:cb:4b:d6:67:89:60:42:dc:46:
                    d5:2e:74:aa:b7:e9:3d:5c:98:dc:3f:bb:15:93:ce:
                    14:f6:76:16:af:6c:9a:94:7b:ea:8c:2b:da:f1:00:
                    75:05:80:75:d7:64:c1:b5:39:54:4d:72:3d:2b:b8:
                    91:c5:2b:42:74:96:a5:11:75:cf:d3:79:4c:c1:e7:
                    dd:44:b7:d9:c8:53:d0:28:d9:64:d6:9a:fa:94:ba:
                    19:80:d9:69:23:bb:0b:a6:b3:90:d8:36:9b:0a:71:
                    4f:46:c5:06:af:4e:ce:b1:31:8a:fe:cd:9a:ad:bf:
                    30:b0:19:0f:4e:89:e0:e5:e8:a1:29:31:77:19:14:
                    82:f2:74:65:63:30:ad:4b:78:dd:75:91:b7:e3:58:
                    91:58:92:de:bf:a8:f0:27:4f:4b:8e:d6:43:a9:ec:
                    b8:53:60:58:db:75:de:b3:28:9e:04:9d:19:c5:4b:
                    ef:93:2f:7c:30:39:6a:e3:0a:87:ec:7d:36:f9:6f:
                    e3:ad:66:68:7b:fe:ce:7d:24:ba:19:d2:07:0a:2a:
                    db:e6:5d:5c:a7:a9:4b:bc:c1:34:f8:8b:6a:eb:02:
                    68:72:99:91:50:87:32:22:36:4a:5b:d9:32:73:36:
                    5b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:9C:3A:26:B4:3B:25:E0:A9:27:1B:75:31:85:71:B6:48:77:00:B5
            X509v3 Authority Key Identifier:
                keyid:59:B6:D6:CD:73:05:F2:DE:EC:2B:8E:61:3C:5D:8F:49:42:5E:00:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WbbWzXMF8t7sK45hPF2PSUJeADk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:ff:88:01:db:f5:bb:b5:0a:51:93:33:76:56:43:da:31:ea:
         d0:90:61:a7:28:fb:27:0f:ad:02:34:4d:d0:7f:f9:5f:99:96:
         92:c4:c7:03:04:76:7d:e0:72:3d:30:bb:b0:7c:3d:71:02:7e:
         4f:3d:77:a7:fd:25:29:d4:60:60:e9:31:26:36:c2:30:0c:64:
         1d:4b:2b:80:ab:b5:38:6e:18:ab:7f:9f:6d:02:0c:ac:d3:cd:
         1d:a9:e4:4a:81:02:38:02:55:08:68:5f:26:8f:62:d4:92:17:
         bd:fe:d9:ee:2d:24:c2:66:f8:b9:73:98:d5:3b:af:c4:73:28:
         9f:3a:74:b2:e6:c6:eb:ba:d9:23:25:42:94:ff:b4:48:39:a7:
         5d:09:5f:e5:b3:f9:b6:cc:ec:2b:94:ba:7c:44:71:ee:c9:5f:
         d6:0a:4a:b1:8b:15:04:6c:9a:97:17:e9:80:36:21:71:3e:fd:
         23:ee:53:5a:1b:9f:45:fa:e0:1f:db:04:95:1d:7d:61:07:f2:
         89:a1:55:a5:63:2a:2e:8d:b5:60:e9:84:03:de:aa:e9:5e:c4:
         ce:e9:2b:11:d2:7e:c9:ee:e9:8c:dd:30:fc:e8:d3:c7:05:22:
         25:5f:4f:8b:1a:34:b8:cf:c0:05:92:8d:90:ea:de:c6:cf:ca:
         74:cd:73:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:24:08 2026 by rpki-client