Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft
File:                     WKmVh9VjjYaIwliQx4QfMlG0ltc.mft (raw, json)
Hash identifier:          HL1LyR/YjElBxP4xL3QTEhrtHxbdlCp54ZVjKzEKc2o=
Subject key identifier:   CD:DF:0B:F3:BF:05:4C:76:77:5D:ED:50:6F:4F:AE:40:88:57:F7:06
Authority key identifier: 58:A9:95:87:D5:63:8D:86:88:C2:58:90:C7:84:1F:32:51:B4:96:D7
Certificate issuer:       /CN=A91AB740/serialNumber=58A99587D5638D8688C25890C7841F3251B496D7
Certificate serial:       0751
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKmVh9VjjYaIwliQx4QfMlG0ltc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft
Manifest number:          2D2C
Signing time:             Mon 02 Mar 2026 01:12:26 +0000
Manifest this update:     Mon 02 Mar 2026 01:12:25 +0000
Manifest next update:     Mon 09 Mar 2026 01:12:25 +0000
Files and hashes:         1: WKmVh9VjjYaIwliQx4QfMlG0ltc.crl (hash: KVD6JFmQXH1ah8xpB8daJho9d3V/ObP84JB0Q/1nbog=)
                          2: 182057F63ACE11EC8987F871C4F9AE02.roa (hash: GUJd4j7G7L+UV5G9B1gdyKwwN/+3vzX5xi/seaK9GEw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.crl
                          rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKmVh9VjjYaIwliQx4QfMlG0ltc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:12:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1873 (0x751)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB740, serialNumber=58A99587D5638D8688C25890C7841F3251B496D7
        Validity
            Not Before: Mar  2 01:12:25 2026 GMT
            Not After : Mar  9 01:12:25 2026 GMT
        Subject: CN=69a4e3fa-d906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:31:aa:1e:55:3d:b9:1c:71:67:28:18:ca:50:
                    df:40:17:1a:7b:86:8a:53:7f:44:12:19:e5:44:e8:
                    0a:26:8f:a7:bb:60:1b:68:8b:50:0d:78:9d:db:38:
                    5e:7d:f7:83:34:7e:7d:00:29:c9:48:ff:97:06:d8:
                    72:b5:55:79:e0:54:d8:db:c7:c1:15:34:68:16:55:
                    81:43:09:41:d5:dd:ac:bc:18:8a:93:9b:70:53:94:
                    8d:b6:7d:ec:44:36:c1:0a:8b:bb:78:65:22:fa:c7:
                    12:b7:23:7f:3a:c3:3f:f7:54:5d:a0:09:ba:4b:b0:
                    e6:b3:a3:26:d7:a3:af:0e:b5:bd:82:81:51:d9:b1:
                    f1:4a:d6:03:62:5c:1a:36:d2:83:56:aa:61:48:ab:
                    69:f0:c2:0e:f2:c2:dc:ca:68:b0:bb:14:7a:b9:21:
                    76:fd:91:09:c7:3b:77:b0:e0:2a:6c:e6:21:10:ec:
                    ae:d2:f9:42:8d:ad:f3:ec:f3:9c:26:8b:0b:14:58:
                    a9:dc:0a:6b:62:24:f4:32:7f:1b:ed:2b:39:fa:b5:
                    17:58:81:9b:65:e1:49:c3:95:da:5a:1b:a0:22:3b:
                    37:0b:a7:18:ad:bb:04:bb:16:c2:1b:5a:99:77:c5:
                    ee:13:5b:2f:66:e6:84:15:1b:d4:bc:3c:dd:a4:e9:
                    a0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:DF:0B:F3:BF:05:4C:76:77:5D:ED:50:6F:4F:AE:40:88:57:F7:06
            X509v3 Authority Key Identifier:
                keyid:58:A9:95:87:D5:63:8D:86:88:C2:58:90:C7:84:1F:32:51:B4:96:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKmVh9VjjYaIwliQx4QfMlG0ltc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:d6:12:a3:85:e9:ba:12:90:82:63:69:b0:19:31:14:41:f8:
         8b:ea:d3:94:38:34:6d:46:1a:13:f3:fd:16:17:5a:50:01:f7:
         0e:6d:8c:16:11:d9:aa:08:cc:81:1e:f3:75:08:49:49:1b:ac:
         a9:f3:dd:b2:77:cb:9b:4c:fb:00:a6:d0:31:f0:36:9a:5a:25:
         2f:fe:38:43:0b:24:e6:ad:95:c5:b0:77:8f:52:b2:61:81:fb:
         ab:48:f6:52:ab:b8:ef:ee:01:e4:7a:11:3f:45:e6:73:64:19:
         98:fb:d2:7c:1f:87:e9:9d:66:5e:1a:c8:29:6e:3c:84:1c:ac:
         bc:07:71:77:7d:aa:f1:c8:86:71:41:f2:f2:c5:cc:ad:92:64:
         c4:9d:05:41:24:3d:97:e2:de:29:c7:f5:41:8a:d9:d0:fe:16:
         79:6c:83:69:c2:ef:af:bb:03:18:33:d6:bb:2a:ef:2b:52:f2:
         02:99:65:ec:ad:18:6d:27:a2:45:3e:17:9c:67:01:49:bf:68:
         a8:a5:52:51:f0:25:cf:cb:29:66:fc:54:67:c9:87:1e:65:10:
         66:b4:43:a3:cd:c4:2b:dc:f7:84:6e:25:cd:fa:42:37:49:bd:
         cb:64:fe:3b:59:cf:1a:51:a9:e4:e6:df:d5:5e:fe:c4:7c:23:
         0a:d5:d4:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:50:17 2026 by rpki-client