Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft
File:                     WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft (raw, json)
Hash identifier:          ZjFRJFvmdtvhz0X3vK4E1Ed3nbD5iK5sHD1aLmDDdrY=
Subject key identifier:   5E:22:F0:7F:7B:79:89:1A:D5:93:4A:CF:4A:0B:52:2D:04:C1:AD:CC
Authority key identifier: 5A:68:44:1F:B9:D1:B7:90:FC:6C:79:9E:39:51:01:D9:27:60:96:7D
Certificate issuer:       /CN=A91C5F25/serialNumber=5A68441FB9D1B790FC6C799E395101D92760967D
Certificate serial:       0628
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft
Manifest number:          0622
Signing time:             Sat 28 Feb 2026 23:20:30 +0000
Manifest this update:     Sat 28 Feb 2026 23:20:29 +0000
Manifest next update:     Sat 07 Mar 2026 23:20:29 +0000
Files and hashes:         1: WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl (hash: WOcsFj8IsK9BTO2W+8NrBieuM/9Q3HF1saxLyA81fn8=)
                          2: 92C1EB1E044111ECA6AF2D4BC4F9AE02.roa (hash: 1L+jLLrprvKBkFZBr/XRqOG/ctfBn+soIRnPIIukpBY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl
                          rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 23:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1576 (0x628)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5F25, serialNumber=5A68441FB9D1B790FC6C799E395101D92760967D
        Validity
            Not Before: Feb 28 23:20:29 2026 GMT
            Not After : Mar  7 23:20:29 2026 GMT
        Subject: CN=69a3783e-4964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4f:cb:4a:63:52:8a:2b:87:62:52:9f:2a:25:
                    29:11:c4:93:f8:67:77:42:7b:4e:32:cb:4c:63:53:
                    5e:18:50:d8:d7:fb:17:a5:8b:bd:9c:23:6d:f7:f2:
                    69:ac:d7:f3:c1:3a:f0:44:8c:a8:59:c1:ee:6a:21:
                    0c:63:9f:d7:8c:d6:df:fb:d8:ff:5f:81:cd:9b:11:
                    5f:11:1d:31:aa:89:f0:3a:02:7f:ac:2d:e1:d3:5f:
                    e6:5b:a3:08:a5:25:46:fa:6f:95:2d:cc:a5:ac:02:
                    50:7c:07:de:82:7e:28:4f:28:9e:b9:59:10:0a:b5:
                    7f:5f:cf:46:0c:cb:c1:62:5d:34:9c:8d:6c:cd:2e:
                    34:5e:fd:9d:45:10:3d:a1:9a:22:c8:76:3a:a7:64:
                    05:a2:87:cb:c9:22:c0:a3:08:be:9c:fb:f7:bd:80:
                    0f:b8:4c:74:39:f1:6b:d4:19:85:e4:d6:99:a2:cd:
                    48:ce:5c:21:a0:f8:ff:5d:3f:44:01:1e:d1:93:7c:
                    46:c9:27:50:9e:1d:cd:09:58:ef:b7:ab:30:f2:9d:
                    e6:65:05:54:3f:fa:2b:2b:9b:6f:49:01:97:62:75:
                    60:19:cf:3f:f2:b1:e3:26:f7:8e:ba:eb:47:f6:e2:
                    57:57:7f:c0:fd:b0:54:62:b5:0c:05:74:5d:30:c5:
                    4b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:22:F0:7F:7B:79:89:1A:D5:93:4A:CF:4A:0B:52:2D:04:C1:AD:CC
            X509v3 Authority Key Identifier:
                keyid:5A:68:44:1F:B9:D1:B7:90:FC:6C:79:9E:39:51:01:D9:27:60:96:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:91:0e:be:d1:ff:00:ef:c4:c6:5d:ee:51:e8:df:d5:94:a2:
         50:24:56:2f:14:54:8c:65:7b:66:0e:21:31:35:87:4f:6c:73:
         b3:5d:00:89:9f:0b:96:67:2b:a0:c5:96:ad:bf:a1:50:56:91:
         0a:35:ac:e9:42:8d:9b:de:ab:c2:c0:ea:53:b3:5e:4f:9a:dd:
         39:55:10:b1:1c:20:2e:09:4e:9e:17:2b:3d:19:db:c4:d9:3b:
         b6:d9:3e:d7:1a:76:c5:c7:1e:45:93:45:3c:5d:0b:2a:d5:54:
         b9:64:56:91:26:58:16:2f:2c:43:a1:37:82:94:9e:8f:52:fa:
         c4:88:da:53:68:b2:99:72:12:3b:d1:9e:20:50:a2:1f:bb:a9:
         de:fd:83:ff:81:25:d3:32:d2:a4:a4:e2:d9:d6:8a:0f:7c:35:
         25:cd:e0:b8:e1:1d:38:73:c2:ac:ad:5a:d1:61:13:32:0a:4e:
         4e:6e:34:6c:7b:e3:66:9d:88:1e:45:ae:3a:b6:48:7d:2b:9c:
         2e:23:38:3e:fd:e1:b1:7f:17:7c:ac:87:69:3d:a6:85:d4:42:
         7b:55:89:65:a5:62:d5:fa:fb:fd:4f:a4:d3:ef:1e:5c:a5:ac:
         0b:a0:3a:eb:00:86:bb:7d:7d:a5:52:e2:e1:d5:8a:a0:c7:5c:
         bc:4f:f0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:26:55 2026 by rpki-client