Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D1FE/5DB608AECF8C11F0AEF6C559C4F9AE02/WHxO-IW9QWqZ0Q9VtugWjALQIBw.mft
File:                     WHxO-IW9QWqZ0Q9VtugWjALQIBw.mft (raw, json)
Hash identifier:          4nBvfwZiPubnE6qL1YXPRKjAkajZqSku8jpWAzn9z6g=
Subject key identifier:   F0:DB:F7:39:6B:98:82:FE:BA:10:42:75:FB:F2:FE:86:00:86:DF:0E
Authority key identifier: 58:7C:4E:F8:85:BD:41:6A:99:D1:0F:55:B6:E8:16:8C:02:D0:20:1C
Certificate issuer:       /CN=A919D1FE/serialNumber=587C4EF885BD416A99D10F55B6E8168C02D0201C
Certificate serial:       4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHxO-IW9QWqZ0Q9VtugWjALQIBw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D1FE/5DB608AECF8C11F0AEF6C559C4F9AE02/WHxO-IW9QWqZ0Q9VtugWjALQIBw.mft
Manifest number:          4A
Signing time:             Fri 17 Apr 2026 08:03:21 +0000
Manifest this update:     Fri 17 Apr 2026 08:03:20 +0000
Manifest next update:     Fri 24 Apr 2026 08:03:20 +0000
Files and hashes:         1: WHxO-IW9QWqZ0Q9VtugWjALQIBw.crl (hash: To3BEnGiNz0LUvXAYvhtBxLXlLtAyeIt7Fc+HLos+iU=)
                          2: 84797D8ACF8D11F09FB4175EC4F9AE02.roa (hash: t8gtrbMwzQlauD3gHG5WSBOc5P6tKFnudYJCa+/BPeg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D1FE/5DB608AECF8C11F0AEF6C559C4F9AE02/WHxO-IW9QWqZ0Q9VtugWjALQIBw.crl
                          rsync://rpki.apnic.net/member_repository/A919D1FE/5DB608AECF8C11F0AEF6C559C4F9AE02/WHxO-IW9QWqZ0Q9VtugWjALQIBw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHxO-IW9QWqZ0Q9VtugWjALQIBw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:03:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D1FE, serialNumber=587C4EF885BD416A99D10F55B6E8168C02D0201C
        Validity
            Not Before: Apr 17 08:03:20 2026 GMT
            Not After : Apr 24 08:03:20 2026 GMT
        Subject: CN=69e1e948-7b15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b5:2f:df:a7:02:41:0a:7f:80:ed:2f:57:05:
                    d4:b0:08:14:1a:e7:bb:8e:32:eb:06:9b:d2:48:e9:
                    05:42:b4:c6:3d:77:8f:d9:6e:6f:f3:df:3c:c7:09:
                    9f:91:1b:14:15:58:7b:b0:5c:6b:c1:95:d0:91:ad:
                    8e:de:50:72:40:69:00:c8:35:41:24:f1:34:46:c5:
                    d5:dd:db:e9:91:61:35:31:c2:41:db:c6:39:ec:a9:
                    4f:20:fa:5f:78:0f:0d:66:5f:af:15:eb:64:78:8e:
                    27:62:55:e5:8e:c1:db:b0:4d:08:26:0d:33:74:3b:
                    fb:24:e3:6c:22:35:41:03:bb:26:1e:7a:e1:1e:0c:
                    6e:17:b8:e5:ab:4e:26:55:d7:34:09:52:63:d1:49:
                    61:5f:89:61:b4:3a:25:fa:ec:5f:f5:e1:d0:09:5d:
                    02:7a:e9:8f:9c:c0:94:0f:95:4c:c6:69:f4:f3:45:
                    05:bd:13:d0:ac:84:1a:9b:ac:e1:b7:5b:0d:2d:6c:
                    2d:fc:a5:7b:f9:73:9d:15:72:b3:65:de:4f:b5:ae:
                    3f:2f:0e:95:bf:37:df:37:07:00:38:df:12:ba:34:
                    93:55:95:cc:6c:2b:68:09:42:bb:9f:7d:71:5e:c0:
                    33:08:34:28:7f:eb:6a:0d:ca:a4:27:da:9b:4c:f1:
                    a9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:DB:F7:39:6B:98:82:FE:BA:10:42:75:FB:F2:FE:86:00:86:DF:0E
            X509v3 Authority Key Identifier:
                keyid:58:7C:4E:F8:85:BD:41:6A:99:D1:0F:55:B6:E8:16:8C:02:D0:20:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D1FE/5DB608AECF8C11F0AEF6C559C4F9AE02/WHxO-IW9QWqZ0Q9VtugWjALQIBw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHxO-IW9QWqZ0Q9VtugWjALQIBw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D1FE/5DB608AECF8C11F0AEF6C559C4F9AE02/WHxO-IW9QWqZ0Q9VtugWjALQIBw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:32:e3:f2:b9:5b:9c:3b:ea:b7:99:34:12:c0:72:3b:49:24:
         6b:e8:71:dd:2e:7d:61:80:21:73:3f:10:df:1a:c5:90:6d:37:
         f0:13:4e:87:9e:44:e1:39:68:06:f0:74:fd:b8:73:9a:5c:b6:
         40:25:ef:4b:04:3a:06:be:08:36:71:93:ec:42:5f:11:32:a7:
         1c:50:b2:43:f8:0e:19:f1:82:24:05:19:f2:76:69:69:19:d8:
         b4:b9:1b:87:79:4a:65:23:07:35:b1:7d:2e:77:6f:9d:bb:17:
         76:ac:44:94:33:0f:11:83:7f:ca:11:34:04:72:87:b2:ee:e8:
         1f:91:a5:49:0d:1b:06:00:d1:af:c2:26:52:7e:e5:a8:a9:20:
         fe:d6:16:73:ee:74:40:ac:77:ba:6d:5d:c7:ec:42:98:91:74:
         4c:0a:e4:3c:f9:ba:b5:95:80:5d:d1:00:e8:78:b6:bc:d5:5a:
         35:b9:d5:21:ac:23:10:5e:26:12:aa:89:81:6d:73:ca:04:07:
         3d:0f:15:8c:0b:51:90:11:90:9b:34:72:d0:75:0b:0a:91:6c:
         86:95:62:24:95:4e:d4:ff:4c:43:c9:89:75:a7:09:ce:de:eb:
         9a:da:30:6b:7c:8c:5a:1d:f6:89:20:cb:0f:86:07:75:5c:14:
         ca:e2:4e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:48:08 2026 by rpki-client