Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft
File:                     whEvRNRFjxhc25rZqRr4KQZInMY.mft (raw, json)
Hash identifier:          gYlxtnfQMzDTs0WyviCeu/4fk8hqBubHCbX7TQwY0b0=
Subject key identifier:   B4:D0:4C:16:BE:24:25:EC:65:CA:01:24:95:53:EE:A7:2F:F1:4B:BA
Authority key identifier: C2:11:2F:44:D4:45:8F:18:5C:DB:9A:D9:A9:1A:F8:29:06:48:9C:C6
Certificate issuer:       /CN=A91C167F/serialNumber=C2112F44D4458F185CDB9AD9A91AF82906489CC6
Certificate serial:       0189
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/whEvRNRFjxhc25rZqRr4KQZInMY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft
Manifest number:          0186
Signing time:             Sun 01 Mar 2026 05:29:04 +0000
Manifest this update:     Sun 01 Mar 2026 05:29:04 +0000
Manifest next update:     Sun 08 Mar 2026 05:29:04 +0000
Files and hashes:         1: whEvRNRFjxhc25rZqRr4KQZInMY.crl (hash: o/GHbjOhcvlDv9FpGVnzYWeUE8sze3nh/nqT0rZKqTM=)
                          2: 7FC75E34C4B211EEB684BF7FC4F9AE02.roa (hash: q05ljgath9EJ2Ml9Q3ZPGNUrePFu/Fa2fuhBhk1dNp0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.crl
                          rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/whEvRNRFjxhc25rZqRr4KQZInMY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 05:29:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 393 (0x189)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C167F, serialNumber=C2112F44D4458F185CDB9AD9A91AF82906489CC6
        Validity
            Not Before: Mar  1 05:29:04 2026 GMT
            Not After : Mar  8 05:29:04 2026 GMT
        Subject: CN=69a3cea0-1105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bb:75:8c:7d:35:22:28:b3:8e:91:2e:9e:0a:
                    c7:41:7c:df:de:2b:4f:16:cc:2c:fe:77:6b:ea:71:
                    9e:98:9d:77:33:dc:d8:b5:11:5a:9b:cd:0a:1d:18:
                    ab:59:a5:a7:9d:60:a7:d6:ff:f0:e3:81:89:f0:9f:
                    c0:7e:5d:bf:ed:01:fd:67:21:e0:4f:9f:ab:35:9a:
                    30:ef:f8:dd:b9:19:54:be:d7:93:4b:2e:8f:bc:75:
                    c5:14:0a:65:88:69:a9:47:e0:b7:f1:45:93:8c:a4:
                    cc:12:51:c2:3b:f4:7d:9d:85:b5:e9:4a:b5:35:3d:
                    67:34:f4:97:af:0a:cc:b5:cb:91:4f:ff:3e:e2:01:
                    dc:ae:cd:35:87:5d:18:20:b9:ea:01:56:d9:35:f5:
                    74:d5:27:dd:41:ca:ce:74:17:9e:54:92:43:2b:ff:
                    b5:c2:ff:5a:93:09:04:42:39:d3:9a:de:07:cf:93:
                    34:57:96:a6:c2:f4:ca:c3:28:49:b7:ea:6e:bf:1a:
                    30:13:92:bb:3c:ff:f6:b7:bb:ec:e5:04:60:93:b3:
                    5f:86:8d:f2:01:ea:b9:1e:b7:7f:1e:72:03:33:67:
                    da:bf:a0:40:0f:aa:8f:e4:18:ed:8d:48:19:3e:a1:
                    92:c7:40:d6:9e:2b:83:71:bd:90:c1:d2:c5:96:ad:
                    1d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:D0:4C:16:BE:24:25:EC:65:CA:01:24:95:53:EE:A7:2F:F1:4B:BA
            X509v3 Authority Key Identifier:
                keyid:C2:11:2F:44:D4:45:8F:18:5C:DB:9A:D9:A9:1A:F8:29:06:48:9C:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/whEvRNRFjxhc25rZqRr4KQZInMY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:94:02:fd:47:c5:75:c0:7f:05:c8:f0:cf:ff:c9:38:9e:df:
         08:cd:e8:17:53:cc:fb:d3:05:3a:22:f3:17:e1:b3:44:6a:e0:
         6d:36:09:cf:a9:44:97:64:27:6e:4b:7f:99:e6:ef:2a:4a:58:
         87:96:01:6d:13:22:cd:89:41:7d:61:75:25:de:9e:23:e3:24:
         fc:fc:fc:83:93:05:44:9a:0f:5f:01:b2:ac:91:c1:f3:56:73:
         af:99:68:c2:cb:90:d1:3c:ba:2f:45:5f:bf:23:5f:59:99:22:
         5d:bf:ba:4d:fd:57:90:d6:0b:97:5e:83:24:e8:fa:2c:ce:d5:
         fd:74:e6:e9:08:9f:3f:49:59:3e:69:f6:75:1d:14:05:1c:93:
         2b:72:6d:29:70:f1:d7:0d:8b:64:6c:cd:2f:52:31:cc:92:f3:
         e2:83:3b:05:c0:78:2d:dc:8d:0b:7e:5c:16:38:62:82:b7:77:
         b0:d0:50:5e:0c:89:bc:19:6f:a5:98:2c:73:89:19:1a:e2:65:
         9c:f6:68:da:3f:44:4f:ca:72:c3:1c:c6:5b:b7:5f:c5:3a:0e:
         e8:be:b0:42:3d:11:98:30:9f:24:4f:da:d6:dc:4a:bf:2f:07:
         fc:11:25:d1:9c:60:bb:07:8f:08:3a:c3:f3:31:31:e7:2e:77:
         c4:94:cd:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:04:37 2026 by rpki-client