Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft
File:                     WdWIElpxZphzjR0enm2KaNdAmyc.mft (raw, json)
Hash identifier:          21TcOK7jjiNfqPGJyk+HsBPaTTdB55s0E1u1tr6/VHs=
Subject key identifier:   B4:AA:3B:39:74:25:76:4A:4D:1C:0A:2E:A6:38:FA:5E:B8:7F:A8:3F
Authority key identifier: 59:D5:88:12:5A:71:66:98:73:8D:1D:1E:9E:6D:8A:68:D7:40:9B:27
Certificate issuer:       /CN=A91A27AB/serialNumber=59D588125A716698738D1D1E9E6D8A68D7409B27
Certificate serial:       023E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft
Manifest number:          021E
Signing time:             Fri 17 Apr 2026 02:52:18 +0000
Manifest this update:     Fri 17 Apr 2026 02:52:18 +0000
Manifest next update:     Fri 24 Apr 2026 02:52:18 +0000
Files and hashes:         1: WdWIElpxZphzjR0enm2KaNdAmyc.crl (hash: O4C2c/XS+YynuDQ2fwgCI4X6JjGLJ601x4JzzMtXsmc=)
                          2: 74444F50490E11EFA7EAAA70C4F9AE02.roa (hash: NMrm1g9FM9NJPr1lYfQZFfpW90lnT17RE5GP7Fw1OY4=)
                          3: E7AA3C5A37D911F1B36666D1C4833773.roa (hash: siCvmhGtqnY35C3NOh4YSIg2JyFDveLmbf9cMd4ZK0U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.crl
                          rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:52:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 574 (0x23e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A27AB, serialNumber=59D588125A716698738D1D1E9E6D8A68D7409B27
        Validity
            Not Before: Apr 17 02:52:18 2026 GMT
            Not After : Apr 24 02:52:18 2026 GMT
        Subject: CN=69e1a062-e2ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:04:1d:3c:5c:00:cd:f1:47:0a:2b:fa:27:34:
                    2a:a9:e0:4b:06:e1:53:b8:02:21:43:8e:42:16:76:
                    5f:2f:8b:64:e1:2b:5e:06:ab:3f:3f:0e:a1:23:b5:
                    96:a0:b9:bf:25:f0:bb:96:a4:d3:e5:4d:04:cc:b0:
                    be:c3:f9:93:47:c9:78:4d:da:fe:a9:21:f8:2e:3f:
                    21:cc:cc:ac:dd:52:b4:50:2d:d3:e4:86:e5:db:7b:
                    b8:69:96:89:f3:13:79:96:a3:8f:ba:84:97:2b:a3:
                    0d:d9:c0:38:07:17:60:d7:ef:0a:f1:15:62:e1:26:
                    f4:0c:6e:9a:ef:36:8f:8a:a8:a4:37:29:b8:78:ad:
                    ff:b9:20:52:1f:7f:ca:29:09:0a:f4:46:8a:bc:39:
                    4c:55:17:dc:08:f1:cc:04:27:3e:d1:0e:6e:30:d4:
                    a7:a0:29:88:c2:a0:42:63:3d:8e:75:52:2a:42:52:
                    d6:30:51:67:13:44:39:c9:e5:7a:3a:3c:da:fd:06:
                    81:73:74:df:4b:c6:ba:e4:d3:9e:1a:a7:9b:36:7b:
                    cd:92:b3:35:42:ae:f1:78:a6:f5:55:26:41:6b:07:
                    a8:99:d9:1a:d5:33:e6:ef:d1:f9:fc:7a:6f:97:a9:
                    75:ea:b5:fc:29:c7:0f:f4:70:62:88:ef:0f:47:24:
                    41:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:AA:3B:39:74:25:76:4A:4D:1C:0A:2E:A6:38:FA:5E:B8:7F:A8:3F
            X509v3 Authority Key Identifier:
                keyid:59:D5:88:12:5A:71:66:98:73:8D:1D:1E:9E:6D:8A:68:D7:40:9B:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:9d:89:c4:07:0c:4d:25:9b:98:39:e6:78:14:9a:74:09:ed:
         55:94:e6:1a:2b:5c:04:a9:35:9a:4e:da:b0:c2:96:8a:4c:c0:
         d8:78:93:ef:12:7b:19:c8:f8:2c:52:73:87:11:53:1f:26:2b:
         70:cf:91:51:75:6f:45:bc:24:71:2e:e5:aa:2e:a3:bb:df:95:
         1a:bd:69:3f:ea:6c:6e:eb:79:49:85:7f:b2:77:82:73:09:70:
         9b:43:b8:eb:1c:88:b6:58:18:98:93:65:1e:02:d4:0c:41:03:
         0d:2c:84:88:d2:c5:f7:45:e6:6b:06:a5:38:a3:9d:cb:7b:77:
         e2:75:61:1d:d3:e6:52:87:52:a2:84:52:e0:68:f0:aa:4b:0c:
         97:22:4f:c3:36:6f:45:3b:f9:06:9f:c3:01:41:88:f5:45:82:
         08:89:0e:d6:5b:1e:4a:a1:e0:7c:2b:7e:bb:4f:03:1d:72:9a:
         a8:9d:a1:2a:a3:dc:c0:75:28:27:3a:9f:8e:84:1d:3a:59:b4:
         9e:a3:00:b0:43:d7:b3:07:7a:b0:cf:cf:45:bf:ca:2a:18:7b:
         eb:9c:42:53:bc:ce:8a:da:3f:fe:29:53:c6:e5:e1:c3:29:76:
         34:45:bc:33:a9:1c:f7:17:5f:95:84:c5:52:61:96:b0:94:e6:
         fd:be:c1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:29:21 2026 by rpki-client