Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft
File:                     s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft (raw, json)
Hash identifier:          nIr2DmWZuZUbXXyg3yQepL0zOJQGqRAnOoU9vGob+SU=
Subject key identifier:   66:11:DF:54:76:E8:A0:38:AF:9E:0A:93:AB:B2:AC:1C:BE:D7:8D:8C
Authority key identifier: B3:EC:1F:F6:AD:55:2A:A1:6E:E1:01:95:64:BA:D9:F7:61:FD:B5:D8
Certificate issuer:       /CN=A91A381A/serialNumber=B3EC1FF6AD552AA16EE1019564BAD9F761FDB5D8
Certificate serial:       01E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-wf9q1VKqFu4QGVZLrZ92H9tdg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft
Manifest number:          01D2
Signing time:             Fri 17 Apr 2026 03:24:40 +0000
Manifest this update:     Fri 17 Apr 2026 03:24:40 +0000
Manifest next update:     Fri 24 Apr 2026 03:24:40 +0000
Files and hashes:         1: s-wf9q1VKqFu4QGVZLrZ92H9tdg.crl (hash: oefrhKm3hsUhclZ9nysBjBCzgLExKneQ+kzvlT9TmqA=)
                          2: EBB7A41AB4DA11EEBD650259C4F9AE02.roa (hash: SDwmGnNA62CDBnu6SIeNZtXcNKrSVhcMHLtnwpsVMtg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.crl
                          rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-wf9q1VKqFu4QGVZLrZ92H9tdg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:24:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 480 (0x1e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A381A, serialNumber=B3EC1FF6AD552AA16EE1019564BAD9F761FDB5D8
        Validity
            Not Before: Apr 17 03:24:40 2026 GMT
            Not After : Apr 24 03:24:40 2026 GMT
        Subject: CN=69e1a7f8-d7ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:82:81:ec:40:a2:d4:e0:43:e7:38:9f:77:97:
                    c1:63:6c:d6:fa:50:43:01:6a:6b:1f:94:dc:97:1a:
                    a7:d8:e8:be:82:7b:8c:45:5a:06:8a:c6:01:b0:dc:
                    9c:ff:d6:14:2b:f7:2c:31:16:77:62:1d:d5:d6:8a:
                    88:c5:5a:16:45:04:a1:df:ce:da:72:5b:cd:b3:4d:
                    00:da:70:79:e9:88:23:4c:9a:3b:14:45:43:ec:47:
                    67:19:18:51:9d:4c:a9:83:00:45:25:cc:52:2c:01:
                    ed:b2:63:2d:a7:5f:0b:b7:ed:65:d7:a4:39:1b:57:
                    a4:9c:56:ca:03:1f:38:b5:e7:15:6e:7e:48:69:39:
                    c0:89:d0:39:e8:8a:e4:0f:84:11:59:81:04:06:c2:
                    42:21:0c:f8:44:df:88:f6:18:a5:fc:81:b0:67:cc:
                    cb:fd:e6:05:a0:6a:1b:97:35:ba:ba:ca:43:36:96:
                    13:e2:7f:e4:2f:44:87:9d:bb:bc:b4:db:10:8d:3f:
                    03:ea:e8:ff:24:cd:d4:52:12:0a:40:42:57:ef:0a:
                    c2:16:33:9a:95:be:ae:77:f2:e9:c1:70:1c:5e:36:
                    d6:91:d9:ee:63:a4:e3:80:c5:fa:41:e9:1f:2c:89:
                    6d:19:26:df:dc:29:a4:e8:2a:8e:71:f0:ea:70:74:
                    ed:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:11:DF:54:76:E8:A0:38:AF:9E:0A:93:AB:B2:AC:1C:BE:D7:8D:8C
            X509v3 Authority Key Identifier:
                keyid:B3:EC:1F:F6:AD:55:2A:A1:6E:E1:01:95:64:BA:D9:F7:61:FD:B5:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-wf9q1VKqFu4QGVZLrZ92H9tdg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:97:9d:9d:96:dc:b4:c1:b6:6d:8b:90:09:a5:23:68:27:55:
         d0:6b:02:5c:2e:9b:11:62:69:bf:77:7d:96:cc:07:ec:1a:fe:
         6a:41:d1:ec:bd:d6:b9:2a:99:c6:72:ab:35:06:77:c4:f3:97:
         25:5c:51:f3:5a:df:84:bf:fd:2d:05:28:3c:ab:8e:d3:74:7a:
         1e:92:ba:26:5f:f7:f2:50:66:92:e4:55:b2:e1:9a:91:25:ab:
         de:2d:59:36:54:03:9a:9f:b1:23:5d:82:ef:25:ff:26:ba:ca:
         af:39:80:25:59:a6:ad:89:98:45:87:b9:7c:d6:72:d0:9b:4d:
         4a:04:89:43:25:51:8f:c2:d9:62:cd:88:9d:38:1d:c8:3c:25:
         81:44:29:35:f6:9a:17:4d:60:58:c3:b8:b0:e7:45:9d:44:24:
         30:bc:c7:2a:f5:c7:d5:1a:3f:7e:49:ab:39:e5:8f:f9:10:92:
         44:0d:47:49:53:41:08:33:6e:4d:44:88:38:4f:7c:46:42:7d:
         08:99:aa:62:b6:b3:36:03:87:28:bd:1b:f7:4a:01:c2:8a:94:
         9e:73:c8:f4:94:ed:c9:c2:a0:3e:31:79:9a:ec:65:55:50:73:
         9d:41:88:d6:fc:63:35:d9:c3:f8:84:2e:21:3b:4e:3e:27:e6:
         df:a1:3a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:10:18 2026 by rpki-client