Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft
File:                     woh5_sEM6SnBzy5bl4hvHX6hfFo.mft (raw, json)
Hash identifier:          0GnQ3enIWZHENGFFf0+mK9Q+48ARDbETBSHiHyXcDco=
Subject key identifier:   EE:B0:0F:56:D7:68:50:49:7D:A9:A0:E9:C8:D9:56:42:51:51:6B:2B
Authority key identifier: C2:88:79:FE:C1:0C:E9:29:C1:CF:2E:5B:97:88:6F:1D:7E:A1:7C:5A
Certificate issuer:       /CN=A91B6EB1/serialNumber=C28879FEC10CE929C1CF2E5B97886F1D7EA17C5A
Certificate serial:       0C46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woh5_sEM6SnBzy5bl4hvHX6hfFo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft
Manifest number:          0C27
Signing time:             Thu 16 Apr 2026 18:45:00 +0000
Manifest this update:     Thu 16 Apr 2026 18:44:59 +0000
Manifest next update:     Thu 23 Apr 2026 18:44:59 +0000
Files and hashes:         1: woh5_sEM6SnBzy5bl4hvHX6hfFo.crl (hash: djFmPetCQZRZC95y3jZ73Fk0ymXh0A7XQan++ipoafM=)
                          2: CEC1F8CEBCDD11EDA890C37EC4F9AE02.roa (hash: q0lqVS28SrU2+4MJeoLC9pzh7Qgf+qG7CEETocpWonk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.crl
                          rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woh5_sEM6SnBzy5bl4hvHX6hfFo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:44:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3142 (0xc46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6EB1, serialNumber=C28879FEC10CE929C1CF2E5B97886F1D7EA17C5A
        Validity
            Not Before: Apr 16 18:44:59 2026 GMT
            Not After : Apr 23 18:44:59 2026 GMT
        Subject: CN=69e12e2c-5edb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f1:7b:44:3a:b3:5c:88:ac:ca:29:4e:7d:52:
                    e2:33:91:58:69:41:1f:7d:f5:cf:ff:f3:cf:9e:4f:
                    31:d2:5e:f6:5d:7c:d6:23:44:c9:3b:48:c0:ba:16:
                    08:31:fd:f5:11:22:04:20:90:74:5a:8c:dc:87:84:
                    87:be:ca:c2:2e:09:f1:2e:e2:66:d8:3c:d3:f3:82:
                    94:df:de:26:ad:68:ce:56:08:a3:e1:89:d5:a2:cf:
                    48:24:8d:fa:a3:1f:5a:25:b9:74:15:71:47:3a:35:
                    99:2d:75:4f:a2:0a:a9:2e:5b:12:a1:33:3a:18:e9:
                    ac:7d:de:e0:16:c7:b2:42:e4:8f:18:14:08:c6:52:
                    ad:a9:af:21:f3:b7:2b:03:97:16:e3:8c:74:58:26:
                    33:fd:21:25:1f:96:1c:f3:b4:49:91:11:b4:e0:42:
                    b9:5b:12:d4:5f:17:0e:6e:6a:21:85:1c:df:68:0c:
                    60:3e:b8:0e:f3:1a:65:04:ef:db:7f:48:ef:c1:f4:
                    fa:80:86:4e:4f:2d:5a:92:25:15:71:69:56:ea:06:
                    53:f0:dc:ac:81:d8:3b:14:e7:1c:b5:74:54:86:46:
                    4b:c9:1c:01:79:b1:65:5b:fc:05:39:2e:86:f4:cc:
                    4e:31:b5:80:5d:12:ce:60:db:cf:c4:bd:c3:3f:d3:
                    2c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:B0:0F:56:D7:68:50:49:7D:A9:A0:E9:C8:D9:56:42:51:51:6B:2B
            X509v3 Authority Key Identifier:
                keyid:C2:88:79:FE:C1:0C:E9:29:C1:CF:2E:5B:97:88:6F:1D:7E:A1:7C:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woh5_sEM6SnBzy5bl4hvHX6hfFo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:5a:ff:80:cb:7d:99:8e:0a:cb:03:5c:c8:d6:95:be:f4:fb:
         c8:50:67:0b:5f:23:75:5e:44:c1:71:16:cf:b5:3a:6e:f2:7b:
         96:d5:a5:d3:23:bc:ff:35:b5:92:b5:bf:0d:2e:ff:3c:9c:64:
         5e:55:63:46:16:b9:2b:bd:48:37:d4:78:9a:93:ea:c6:07:61:
         17:70:68:19:5a:9e:4b:21:23:78:6c:df:eb:ba:7c:ca:ac:8c:
         fe:4f:09:46:5c:b1:cd:95:a7:b9:77:5c:f3:73:44:dc:64:1b:
         20:cc:1b:37:3a:e0:48:68:48:f7:59:ef:3a:06:42:c5:8d:39:
         8f:67:28:a5:02:fc:ed:04:3a:5d:0b:8d:f9:ff:a8:97:a3:e7:
         eb:28:c6:6a:70:03:06:c2:68:11:72:6e:da:63:df:8d:09:56:
         f1:40:21:90:43:b3:2d:a5:cd:4f:35:a7:18:4b:49:65:cd:16:
         d8:52:0a:0d:57:39:de:44:54:55:9e:df:e7:42:92:d5:9a:cc:
         2a:c3:6a:05:0c:c7:8e:c0:c9:ea:bf:94:44:97:64:a5:9d:ba:
         29:b8:ab:b3:ed:7b:d7:64:fb:2b:ea:c4:7c:99:14:82:8c:5b:
         b9:93:4f:88:80:42:86:8c:1d:da:24:d1:27:b9:b2:e8:d2:ec:
         c0:19:58:75
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjZFQjExMTAvBgNVBAUTKEMyODg3OUZFQzEwQ0U5MjlDMUNGMkU1Qjk3ODg2RjFE
N0VBMTdDNUEwHhcNMjYwNDE2MTg0NDU5WhcNMjYwNDIzMTg0NDU5WjAYMRYwFAYD
VQQDEw02OWUxMmUyYy01ZWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvvF7RDqzXIisyilOfVLiM5FYaUEfffXP//PPnk8x0l72XXzWI0TJO0jAuhYI
Mf31ESIEIJB0Wozch4SHvsrCLgnxLuJm2DzT84KU394mrWjOVgij4YnVos9IJI36
ox9aJbl0FXFHOjWZLXVPogqpLlsSoTM6GOmsfd7gFseyQuSPGBQIxlKtqa8h87cr
A5cW44x0WCYz/SElH5Yc87RJkRG04EK5WxLUXxcObmohhRzfaAxgPrgO8xplBO/b
f0jvwfT6gIZOTy1akiUVcWlW6gZT8Nysgdg7FOcctXRUhkZLyRwBebFlW/wFOS6G
9MxOMbWAXRLOYNvPxL3DP9MsrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO6wD1bX
aFBJfamg6cjZVkJRUWsrMB8GA1UdIwQYMBaAFMKIef7BDOkpwc8uW5eIbx1+oXxa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkVCMS80QzVGNzIwODMx
RjMxMUVBQTBBOTY4NzZDNEY5QUUwMi93b2g1X3NFTTZTbkJ6eTVibDRodkhYNmhm
Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dvaDVfc0VNNlNuQnp5NWJsNGh2SFg2aGZGby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NkVCMS80QzVGNzIwODMxRjMxMUVBQTBBOTY4NzZDNEY5QUUwMi93b2g1X3NFTTZT
bkJ6eTVibDRodkhYNmhmRm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAF1r/gMt9mY4KywNcyNaVvvT7yFBnC18jdV5EwXEWz7U6bvJ7ltWl0yO8/zW1
krW/DS7/PJxkXlVjRha5K71IN9R4mpPqxgdhF3BoGVqeSyEjeGzf67p8yqyM/k8J
RlyxzZWnuXdc83NE3GQbIMwbNzrgSGhI91nvOgZCxY05j2copQL87QQ6XQuN+f+o
l6Pn6yjGanADBsJoEXJu2mPfjQlW8UAhkEOzLaXNTzWnGEtJZc0W2FIKDVc53kRU
VZ7f50KS1ZrMKsNqBQzHjsDJ6r+URJdkpZ26Kbirs+1712T7K+rEfJkUgoxbuZNP
iIBChowd2iTRJ7my6NLswBlYdQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:11:43 2026 by rpki-client