Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft
File:                     waLHH9itWCWJ8EkC3a-DmIXf0zc.mft (raw, json)
Hash identifier:          ByMRrnd0ImhcB5WfxQgLWzhKLruo5WyjSliy0nIWimc=
Subject key identifier:   41:A6:47:D5:27:7C:E6:30:A0:5A:3C:47:FC:BF:0C:DE:F4:6B:8A:93
Authority key identifier: C1:A2:C7:1F:D8:AD:58:25:89:F0:49:02:DD:AF:83:98:85:DF:D3:37
Certificate issuer:       /CN=A91A87AB/serialNumber=C1A2C71FD8AD582589F04902DDAF839885DFD337
Certificate serial:       0603
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft
Manifest number:          05FC
Signing time:             Sat 28 Feb 2026 23:28:54 +0000
Manifest this update:     Sat 28 Feb 2026 23:28:53 +0000
Manifest next update:     Sat 07 Mar 2026 23:28:53 +0000
Files and hashes:         1: waLHH9itWCWJ8EkC3a-DmIXf0zc.crl (hash: DHupGuJinaw+fevxjRc5vNLXHHZtjbXK+YUqotOHQrs=)
                          2: 9C3424A08F7F11F09A0D9529C4F9AE02.roa (hash: ZA5UxS/Qn+BQMvE6/5a9WAr6SmB6K+GiSiFlgc2ArlQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.crl
                          rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 23:28:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1539 (0x603)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A87AB, serialNumber=C1A2C71FD8AD582589F04902DDAF839885DFD337
        Validity
            Not Before: Feb 28 23:28:53 2026 GMT
            Not After : Mar  7 23:28:53 2026 GMT
        Subject: CN=69a37a35-998c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:63:33:b4:52:b7:74:f7:f0:b5:1b:b0:a3:7a:
                    92:e3:22:80:6c:60:cc:0e:8a:8a:d7:7c:10:f1:6c:
                    dd:3d:4d:6f:3d:e5:f6:79:4d:f9:51:a6:fa:2e:67:
                    36:92:18:e6:19:4a:58:27:67:62:f0:bc:50:e8:06:
                    d5:af:44:c4:a4:0d:d9:ea:3c:a6:78:11:2c:3d:2c:
                    9a:a2:c7:04:fe:ec:6b:93:22:1a:e1:89:cf:25:0e:
                    47:8d:05:01:1c:ca:80:9f:06:95:7f:83:0a:27:5f:
                    a5:d0:7c:4d:e9:ff:73:3f:2f:14:cb:29:3a:db:81:
                    75:00:75:a5:fa:87:c8:4f:8a:d2:06:e6:05:35:dc:
                    26:f0:ec:85:67:da:b6:fa:8c:4b:98:36:fc:cf:db:
                    55:43:dc:f4:87:dd:54:b7:b8:1d:62:f2:ae:09:08:
                    1d:09:0e:17:80:17:8b:c0:22:f1:7a:0d:d5:57:cd:
                    63:bf:c3:2a:4f:ab:cf:46:93:61:f1:23:74:8d:47:
                    0a:4a:73:7b:51:fa:b8:25:5b:61:b2:21:af:22:0e:
                    b4:d7:c5:88:e1:ed:48:27:9d:34:6b:7b:67:28:70:
                    23:86:ec:60:62:b8:b5:fe:c5:56:ae:d8:1f:ac:2b:
                    ee:df:68:af:71:fc:69:c9:98:c6:1d:cb:0c:6a:23:
                    79:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A6:47:D5:27:7C:E6:30:A0:5A:3C:47:FC:BF:0C:DE:F4:6B:8A:93
            X509v3 Authority Key Identifier:
                keyid:C1:A2:C7:1F:D8:AD:58:25:89:F0:49:02:DD:AF:83:98:85:DF:D3:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:94:a3:9e:4b:ee:41:44:d3:15:48:c4:76:5c:a7:ad:d8:a9:
         13:26:be:a0:f3:bd:2c:63:5f:9b:cd:e5:1e:95:5a:32:7c:ed:
         64:7c:b9:61:32:c2:05:93:a1:4e:c2:55:ab:28:52:2b:60:40:
         4e:bd:34:ae:10:7d:ff:52:8a:c1:ca:24:1b:46:9f:a5:a4:23:
         3c:1b:e1:3a:33:51:9d:20:f3:93:fb:5c:72:9d:b6:5f:21:f7:
         b0:2a:14:ee:5a:df:24:82:01:48:e5:30:cb:e8:44:0d:a2:05:
         86:2a:65:50:de:db:4a:74:5a:a8:4e:0b:90:dc:7b:8e:32:d0:
         3e:cd:45:73:20:91:c6:89:29:38:01:a6:3a:ef:54:7e:2b:f0:
         0d:f9:9d:db:a8:52:28:a9:c9:ff:59:9e:3b:f0:3a:05:34:8a:
         6f:3e:72:3d:58:d7:83:99:77:c4:05:9d:b1:33:dd:66:0c:b0:
         1c:5a:51:69:ab:01:2f:a3:0a:3f:b9:76:2f:46:c5:61:5d:11:
         9d:a2:ba:89:c7:03:a9:92:56:df:ab:ea:13:0c:36:92:86:b3:
         ea:e3:dc:11:42:e5:ae:fe:71:c2:66:89:38:1b:5c:56:83:91:
         2e:2d:f5:ae:c4:d1:fc:ae:97:97:35:03:f7:73:a7:df:07:d9:
         b2:42:28:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:53:23 2026 by rpki-client