Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft
File:                     WHRSDaeB94Db1xDULIQcE6etF1c.mft (raw, json)
Hash identifier:          yy1AJ8RlB1KYxmEOhLokUVDYUPsRe6mGjKWTiBGzdVM=
Subject key identifier:   F8:4E:DD:FB:01:D4:52:FD:02:AE:1B:DD:9C:58:F5:4C:49:5B:7B:EF
Authority key identifier: 58:74:52:0D:A7:81:F7:80:DB:D7:10:D4:2C:84:1C:13:A7:AD:17:57
Certificate issuer:       /CN=A91AF2CD/serialNumber=5874520DA781F780DBD710D42C841C13A7AD1757
Certificate serial:       0259
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft
Manifest number:          023B
Signing time:             Sun 01 Mar 2026 23:35:49 +0000
Manifest this update:     Sun 01 Mar 2026 23:35:46 +0000
Manifest next update:     Sun 08 Mar 2026 23:35:46 +0000
Files and hashes:         1: WHRSDaeB94Db1xDULIQcE6etF1c.crl (hash: SAYfQQP3hMQlFnde9sQMLyI4AhlJAeW03JAd+QQ6eqU=)
                          2: B412DC700EC011EE8C18290AC4F9AE02.roa (hash: 3CMrCqDOXwvVF6x32R2mcswD2RmCJaBSI7Dvz74AhRA=)
                          3: 06CD7DF074F211F09D01EA15C4F9AE02.roa (hash: w0Ye2OyPtt1IGX1lChpvNypV2Tkw2qxt2TeDVBCk0eU=)
                          4: CF85B73C74F011F0847A5D0DC4F9AE02.roa (hash: zguPLjQ7EYK5huo8cUQuMnIJCKWigpE0oK0hmMTe1UA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.crl
                          rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 601 (0x259)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF2CD, serialNumber=5874520DA781F780DBD710D42C841C13A7AD1757
        Validity
            Not Before: Mar  1 23:35:46 2026 GMT
            Not After : Mar  8 23:35:46 2026 GMT
        Subject: CN=69a4cd54-6b07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7f:68:ed:af:5f:1f:1e:26:be:ee:b7:80:18:
                    8b:2b:e8:a3:31:c8:55:a3:51:8e:06:c3:07:50:d8:
                    63:54:85:f1:9b:20:05:d4:e4:82:3e:b6:c7:c1:61:
                    af:79:60:b9:96:f1:72:27:b3:ed:d2:4d:12:f8:ba:
                    66:ff:3a:37:81:55:e6:f7:d0:df:fa:f4:05:98:0d:
                    14:35:0f:69:d6:2b:91:f5:35:b0:90:71:d2:c9:e1:
                    04:34:84:9e:3f:9a:cd:37:18:85:0c:ef:d7:19:72:
                    17:49:cb:93:79:b2:83:1c:d0:15:b9:5f:50:e6:d8:
                    72:35:cc:8a:5a:a2:e6:d2:54:4c:99:1d:6e:c4:62:
                    4f:8b:87:0c:6d:a9:fb:30:81:5e:c9:ac:6d:39:b7:
                    16:77:08:52:05:09:14:b4:5d:69:46:20:a4:d8:54:
                    24:3e:4b:6a:c3:fe:b7:78:f2:57:79:ff:77:ed:72:
                    a9:9b:59:84:38:5f:d1:98:bc:b2:6f:00:dc:50:d8:
                    01:1b:1c:8e:70:a7:6b:e0:fc:43:31:e7:5f:26:26:
                    2a:7d:78:df:78:14:0f:bf:85:22:53:1b:38:63:69:
                    14:8e:92:44:71:d5:f5:88:b0:ed:12:cf:8b:a7:a9:
                    05:3f:35:ba:81:4b:65:df:ce:ff:e5:61:c0:3b:c3:
                    64:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:4E:DD:FB:01:D4:52:FD:02:AE:1B:DD:9C:58:F5:4C:49:5B:7B:EF
            X509v3 Authority Key Identifier:
                keyid:58:74:52:0D:A7:81:F7:80:DB:D7:10:D4:2C:84:1C:13:A7:AD:17:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:80:c9:bb:50:e0:03:40:51:db:4b:9d:57:75:c3:eb:7d:ff:
         e6:1b:45:31:6e:66:ff:a0:d2:37:03:bc:84:a4:d1:4c:ff:c9:
         49:31:38:c8:d9:e0:3e:07:59:0f:33:f2:f8:bd:40:84:30:f3:
         fb:6b:dd:1e:67:5f:f4:a7:b7:d3:31:e1:2d:a4:06:dd:64:15:
         97:8e:10:61:4b:fd:5c:01:49:ac:68:da:c2:4a:52:59:f5:33:
         85:3f:ff:21:65:e4:18:3d:9d:1b:b7:49:67:c7:ff:75:05:cb:
         1f:b3:58:b8:fe:55:78:94:36:67:5f:5c:eb:f9:1f:f6:7a:6d:
         79:2c:b3:d3:47:0b:f4:f8:c3:a8:07:73:98:2e:03:f1:4c:f4:
         30:cd:96:d4:c6:7c:d9:31:f8:15:d0:f0:38:98:2f:1f:e5:69:
         23:01:c6:33:7d:57:d0:e1:40:3d:27:20:96:5d:f6:ab:69:c0:
         cd:a4:1b:b3:98:19:cf:74:b6:dc:f9:f6:23:9c:c2:6d:30:b3:
         55:71:49:60:92:32:5e:c7:55:a8:81:09:ca:70:c3:a5:11:0f:
         64:c8:7c:fe:42:dc:d2:f8:2a:65:59:2c:b3:48:66:0d:8a:f9:
         a0:b9:19:0d:2a:ea:11:f9:94:b5:d1:55:c5:3e:5f:40:cd:52:
         8c:0f:a9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:25:23 2026 by rpki-client