Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9720/5A450750E55911F0B2288958386F56BC/wuV00hDNcViHNr83nUfNEUasN7I.mft
File:                     wuV00hDNcViHNr83nUfNEUasN7I.mft (raw, json)
Hash identifier:          9Io+ssKnVNKWsiZi/lKcnt0WqpCmHM0d6S64yRuJE1k=
Subject key identifier:   60:18:E6:B2:8B:1A:0C:63:97:D2:71:9F:F8:DA:46:D6:8E:3D:91:FA
Authority key identifier: C2:E5:74:D2:10:CD:71:58:87:36:BF:37:9D:47:CD:11:46:AC:37:B2
Certificate issuer:       /CN=A91A9720/serialNumber=C2E574D210CD71588736BF379D47CD1146AC37B2
Certificate serial:       29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuV00hDNcViHNr83nUfNEUasN7I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9720/5A450750E55911F0B2288958386F56BC/wuV00hDNcViHNr83nUfNEUasN7I.mft
Manifest number:          26
Signing time:             Sun 01 Mar 2026 10:18:35 +0000
Manifest this update:     Sun 01 Mar 2026 10:18:34 +0000
Manifest next update:     Sun 08 Mar 2026 10:18:34 +0000
Files and hashes:         1: wuV00hDNcViHNr83nUfNEUasN7I.crl (hash: M3kTEi6BP7HIeaFzO1l/mWxmds917clAu5DC+NYYJAo=)
                          2: 48A87092E55C11F0AC7781DC396F56BC.roa (hash: I0wBboWIudBQ7dYBJo2wUoCVtx7RIy0Rqyv4U3HVGRg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9720/5A450750E55911F0B2288958386F56BC/wuV00hDNcViHNr83nUfNEUasN7I.crl
                          rsync://rpki.apnic.net/member_repository/A91A9720/5A450750E55911F0B2288958386F56BC/wuV00hDNcViHNr83nUfNEUasN7I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuV00hDNcViHNr83nUfNEUasN7I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:18:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9720, serialNumber=C2E574D210CD71588736BF379D47CD1146AC37B2
        Validity
            Not Before: Mar  1 10:18:34 2026 GMT
            Not After : Mar  8 10:18:34 2026 GMT
        Subject: CN=69a4127b-3b25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4c:50:d0:c9:d9:d8:a1:87:84:76:fc:0f:f0:
                    d8:5e:42:85:99:44:7d:bf:0a:b6:d8:15:ce:28:59:
                    2b:3f:bc:b8:d8:7d:11:a8:93:a3:bd:80:36:8a:eb:
                    a4:a7:00:d4:b2:84:7a:53:f4:18:23:09:2a:3c:77:
                    0f:b9:3f:9f:65:28:5d:c4:b4:d5:17:f0:c6:47:c7:
                    0e:05:0f:c9:15:8b:c6:c4:c6:b6:11:c5:74:1c:ef:
                    d2:c3:4c:9c:5a:eb:49:04:2a:85:33:46:3e:2e:27:
                    38:94:e5:20:91:a2:cb:df:ab:c9:00:c6:c1:6f:8b:
                    27:38:19:40:5b:fd:4d:f5:fb:aa:03:08:22:ee:34:
                    1d:20:63:69:27:5a:10:eb:4d:f4:8d:50:9b:c1:b2:
                    0b:bc:53:c2:0a:8d:c1:71:84:77:72:83:69:81:bb:
                    50:4c:66:7a:c7:86:d3:27:ef:6e:de:bd:72:11:8a:
                    19:5b:77:4d:39:b3:31:87:6a:45:63:ee:80:39:5e:
                    ea:9e:a7:51:e6:17:a6:64:96:72:35:ed:65:1b:0f:
                    85:83:f6:3d:c3:7a:ab:c1:89:d4:67:bd:2a:e0:c2:
                    4c:c9:fd:74:aa:86:ac:a0:e3:3d:47:40:e4:af:be:
                    e7:0f:d1:f7:dc:e8:37:78:4d:f6:64:15:05:73:8e:
                    d1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:18:E6:B2:8B:1A:0C:63:97:D2:71:9F:F8:DA:46:D6:8E:3D:91:FA
            X509v3 Authority Key Identifier:
                keyid:C2:E5:74:D2:10:CD:71:58:87:36:BF:37:9D:47:CD:11:46:AC:37:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9720/5A450750E55911F0B2288958386F56BC/wuV00hDNcViHNr83nUfNEUasN7I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuV00hDNcViHNr83nUfNEUasN7I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9720/5A450750E55911F0B2288958386F56BC/wuV00hDNcViHNr83nUfNEUasN7I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:81:ff:95:a4:68:2e:a5:83:91:9f:4e:db:c5:b6:27:fc:0d:
         91:d5:fc:e1:12:48:82:a9:a4:40:0a:76:80:c2:97:6b:59:d8:
         05:d5:74:b2:40:83:02:59:cc:13:78:ac:41:23:0c:71:47:26:
         19:e4:e8:1e:f4:6b:75:dd:fc:3a:e9:2d:14:5e:4e:9f:4e:fb:
         12:75:69:61:14:9b:57:12:f1:c5:99:7a:de:8a:06:d8:bc:a3:
         02:c1:c3:36:87:b7:7b:54:cf:b5:71:a4:4f:40:12:26:b5:8d:
         c7:d5:71:ee:71:28:8e:dc:fd:71:76:62:da:d6:64:2d:f7:fd:
         d4:d1:57:85:74:58:2e:8c:e9:86:66:fa:ed:d5:51:4b:fb:ac:
         94:69:f0:91:07:37:65:4b:c4:0d:ac:72:fd:97:cd:dc:01:91:
         3a:0c:1b:03:97:ef:9d:e8:05:63:7b:09:1e:c7:c1:ec:3f:0a:
         6d:e8:9b:47:63:fd:d9:d0:e7:e8:6e:8e:1f:91:ac:b8:e9:f8:
         e5:21:9c:e1:41:32:dc:d9:24:82:83:50:7f:ff:d5:f9:d1:06:
         1d:22:34:bf:43:e7:8b:30:71:6d:d2:ef:8d:9b:10:d3:ee:a5:
         86:1f:50:28:ee:a3:2c:e0:15:aa:b5:f0:bb:9d:cd:8c:d3:67:
         92:65:56:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:25:01 2026 by rpki-client