Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.mft
File:                     Wlb4n1CBKoEP8t6EVHDxCSckoas.mft (raw, json)
Hash identifier:          IAWVQpf09kU0/Nm9JTbkhM6O+KfVGbqig9tClaA/rd4=
Subject key identifier:   48:1F:2D:2B:2A:3C:7A:48:1F:C4:79:D6:DC:F9:18:95:6E:D2:D7:D8
Authority key identifier: 5A:56:F8:9F:50:81:2A:81:0F:F2:DE:84:54:70:F1:09:27:24:A1:AB
Certificate issuer:       /CN=A9193235/serialNumber=5A56F89F50812A810FF2DE845470F1092724A1AB
Certificate serial:       01E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wlb4n1CBKoEP8t6EVHDxCSckoas.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.mft
Manifest number:          089A
Signing time:             Thu 16 Apr 2026 22:15:07 +0000
Manifest this update:     Thu 16 Apr 2026 22:15:06 +0000
Manifest next update:     Thu 23 Apr 2026 22:15:06 +0000
Files and hashes:         1: Wlb4n1CBKoEP8t6EVHDxCSckoas.crl (hash: E6QrbQqR5qPnL/D3KfAhYfOgyDVF44v/8kp8BzW/7lk=)
                          2: 105A1F50778211EE997FD552C4F9AE02.roa (hash: VJb/MYYXgapvW6oZ8weDqeGFcx6jxW/gZrD/WXjQRgg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.crl
                          rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wlb4n1CBKoEP8t6EVHDxCSckoas.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:15:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 482 (0x1e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193235, serialNumber=5A56F89F50812A810FF2DE845470F1092724A1AB
        Validity
            Not Before: Apr 16 22:15:06 2026 GMT
            Not After : Apr 23 22:15:06 2026 GMT
        Subject: CN=69e15f6b-c902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:07:90:8d:0c:e3:52:1f:ae:fe:64:8e:46:7e:
                    9e:28:15:c6:59:f1:4c:c9:cf:4f:a3:67:cb:7a:61:
                    b2:c7:6d:8e:08:8b:f6:6e:27:d8:cc:bd:47:d5:66:
                    b2:96:12:36:c1:72:cc:89:bd:7f:29:57:fb:8a:fd:
                    db:4a:72:a6:ca:aa:37:2b:49:a5:be:e2:6f:4d:ae:
                    22:77:af:5d:4c:36:a0:7e:f9:e2:fd:bf:90:ce:41:
                    42:f8:2f:13:09:2c:dd:cf:fd:32:04:cb:47:66:00:
                    25:9c:5f:82:b8:df:f3:81:ef:da:bc:6f:9a:7f:97:
                    ec:ab:18:a9:94:81:de:07:64:65:e3:ce:9a:0e:45:
                    b8:ef:da:e6:b4:54:43:d4:24:4b:1f:bc:bb:0c:31:
                    f7:c7:4f:11:6f:a3:12:ab:57:41:24:15:43:b6:5f:
                    83:3c:0a:f9:6a:d6:50:41:d6:79:8a:0a:1d:ff:ad:
                    59:ae:e2:ce:44:8a:58:d3:0a:74:24:92:94:83:99:
                    40:6a:a7:3b:0f:2f:d5:20:6f:41:80:cf:2d:73:b2:
                    90:f1:19:f2:24:4d:9b:ef:e9:ef:93:20:75:26:a3:
                    de:69:09:a6:c7:36:1c:15:3b:49:d4:8c:17:51:20:
                    22:4c:12:d2:bc:70:13:86:89:f3:29:91:a1:57:6a:
                    a3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:1F:2D:2B:2A:3C:7A:48:1F:C4:79:D6:DC:F9:18:95:6E:D2:D7:D8
            X509v3 Authority Key Identifier:
                keyid:5A:56:F8:9F:50:81:2A:81:0F:F2:DE:84:54:70:F1:09:27:24:A1:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wlb4n1CBKoEP8t6EVHDxCSckoas.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:b7:c7:b7:6c:c5:a3:d4:b2:1a:8b:4c:cb:d2:e0:b0:a3:4d:
         22:d2:5d:a5:07:65:20:86:15:b1:82:05:4c:38:3e:e4:b8:90:
         aa:30:69:14:e1:76:bf:fb:8a:78:a6:8c:75:59:35:21:53:44:
         4b:a3:f0:f1:d2:cc:c8:9f:f9:a7:fc:f8:c8:3e:bc:9f:ec:e8:
         f4:68:2f:9d:8c:d3:42:79:f5:ab:47:ae:f7:62:0c:39:8d:25:
         6d:3a:6c:55:56:3b:f9:5e:04:bf:a4:cf:18:03:36:03:10:9a:
         67:35:e9:30:e9:ca:0a:71:ac:62:8d:d4:b1:32:62:76:22:2f:
         54:1e:28:90:05:54:b9:04:a4:c7:a7:82:55:c7:39:9f:72:e7:
         98:86:38:88:5d:a0:89:74:ec:ad:3f:89:99:5c:00:22:6a:f4:
         5e:d1:7f:a4:7a:20:09:25:e0:a2:ea:33:2b:16:73:15:0c:f9:
         2c:cc:d5:d8:16:51:53:1a:17:77:20:01:b1:37:dd:65:f4:a7:
         f9:11:c5:bc:64:c0:23:8e:7a:52:d2:b2:c0:02:8d:04:3e:f2:
         db:cf:cc:ec:68:89:e9:b2:f4:61:1e:fd:80:66:3e:b7:b7:50:
         81:b3:6a:d2:57:10:15:5a:d4:e5:18:1e:b7:5d:d7:96:ed:67:
         54:c6:66:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:05:09 2026 by rpki-client