Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.mft
File:                     wG_wBd4dXvE7qPDCYOljA0paIso.mft (raw, json)
Hash identifier:          azorw5+FDki5kraqY6ve1HVenatpQ8BFbfTZk+gwXSg=
Subject key identifier:   64:CC:D1:EC:44:67:68:C8:6E:3C:A6:93:B9:E8:9E:9E:FC:04:D1:74
Authority key identifier: C0:6F:F0:05:DE:1D:5E:F1:3B:A8:F0:C2:60:E9:63:03:4A:5A:22:CA
Certificate issuer:       /CN=A91A0C5F/serialNumber=C06FF005DE1D5EF13BA8F0C260E963034A5A22CA
Certificate serial:       0223
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wG_wBd4dXvE7qPDCYOljA0paIso.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.mft
Manifest number:          0220
Signing time:             Sun 01 Mar 2026 03:33:16 +0000
Manifest this update:     Sun 01 Mar 2026 03:33:16 +0000
Manifest next update:     Sun 08 Mar 2026 03:33:16 +0000
Files and hashes:         1: wG_wBd4dXvE7qPDCYOljA0paIso.crl (hash: 9TZgDvdU5Kx/JgiOmWq7AWOivHq9Oz9Nd3ei9yMPb9k=)
                          2: 0D53ED80D2BA11ED8E06CC13C4F9AE02.roa (hash: 8W11lhJNXDI/B18v0915hoFQti7BAopL/ni44iL17Lo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.crl
                          rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wG_wBd4dXvE7qPDCYOljA0paIso.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 03:33:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 547 (0x223)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0C5F, serialNumber=C06FF005DE1D5EF13BA8F0C260E963034A5A22CA
        Validity
            Not Before: Mar  1 03:33:16 2026 GMT
            Not After : Mar  8 03:33:16 2026 GMT
        Subject: CN=69a3b37c-c415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:51:12:4d:d1:bc:f9:cc:f9:95:ef:ab:ce:e7:
                    ac:77:a0:da:ef:2a:9e:ee:ee:9a:08:8f:d0:97:eb:
                    90:bb:ef:66:8e:dc:ec:24:45:7a:71:f5:8f:b3:94:
                    e5:a9:fb:65:b9:db:39:cb:4c:06:a9:0e:45:20:35:
                    64:8f:4f:c3:1f:49:d7:22:ed:56:9c:91:52:ce:56:
                    65:9c:f3:fb:17:df:fd:b2:24:40:b4:37:9b:16:1b:
                    9a:76:1d:da:64:db:4c:30:4b:a4:d2:cd:6a:ea:e1:
                    5e:d6:37:c6:11:7d:5b:97:0b:96:ff:63:ba:d9:61:
                    be:77:ea:79:93:dd:f5:cc:46:da:b3:00:e4:2d:d5:
                    a3:08:af:f2:bb:0f:21:ba:1b:52:55:d1:5f:8a:de:
                    9c:d0:12:5e:53:b0:73:f2:85:3c:ac:55:2e:57:49:
                    56:41:71:f4:a8:f7:5b:95:dd:a5:d5:11:24:55:b9:
                    52:5a:12:3f:ce:c3:48:89:28:91:ae:18:aa:07:f0:
                    16:31:ec:bb:b7:4d:89:98:61:8f:c2:f3:b2:e4:38:
                    0d:7d:f1:c8:6c:a4:f7:4b:e6:f7:02:0a:a9:28:16:
                    35:d2:b2:18:57:b2:af:ce:95:d6:b5:2d:2a:90:82:
                    8b:42:20:e2:ec:6b:b7:57:ff:a9:0a:f5:6d:c6:10:
                    28:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:CC:D1:EC:44:67:68:C8:6E:3C:A6:93:B9:E8:9E:9E:FC:04:D1:74
            X509v3 Authority Key Identifier:
                keyid:C0:6F:F0:05:DE:1D:5E:F1:3B:A8:F0:C2:60:E9:63:03:4A:5A:22:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wG_wBd4dXvE7qPDCYOljA0paIso.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:1a:39:6a:9a:04:40:14:4e:8c:c2:d7:17:73:07:5f:92:88:
         2c:cc:19:ba:e6:60:ae:b8:de:36:69:5e:53:21:dd:8d:c3:3c:
         26:c3:cb:07:34:6b:99:02:34:8f:0d:ca:98:07:96:8b:ca:05:
         e8:71:b7:1e:46:e1:eb:36:ee:5f:46:61:da:dd:03:35:85:4d:
         27:67:16:44:ad:f6:31:00:c6:8b:10:17:fa:d7:18:63:51:5f:
         de:20:31:8e:7c:11:7b:b4:63:8c:cb:05:27:0a:f7:48:e3:e0:
         1d:b6:59:10:4e:ce:86:c0:51:c7:27:66:80:12:92:fd:f8:bd:
         34:e3:e8:12:5d:ff:68:91:97:d3:3d:b0:a0:19:94:e6:33:1b:
         e8:27:cf:47:7d:00:dd:ae:42:66:ea:db:be:a1:98:fb:df:cc:
         e0:0d:99:d9:1c:77:23:a9:7c:8c:57:fd:4b:36:87:e5:b9:ba:
         38:65:c1:ad:1d:78:0c:d3:a2:c2:52:ce:15:f4:62:b0:0d:35:
         d1:64:5e:77:81:25:a4:71:dc:dc:70:b1:ca:c7:b8:d6:54:86:
         f5:b6:9a:82:16:2a:b0:6c:70:69:8f:73:ed:a4:e5:0c:8e:dd:
         d7:d1:6b:b4:83:cc:fd:3b:78:80:fd:96:57:fe:17:8c:24:db:
         07:31:e1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:12:16 2026 by rpki-client