Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.mft
File:                     Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.mft (raw, json)
Hash identifier:          Uksc+enfSODP0i4wDpoAfZIPrFrowpqVGbPFyAkgwao=
Subject key identifier:   D0:6E:75:3B:E0:CB:1D:23:EE:ED:6E:AC:D5:12:62:6A:F6:6E:26:8E
Authority key identifier: 5A:7D:C0:A4:61:6B:07:D1:F8:5E:2D:59:0F:DD:5F:40:67:D0:BB:C4
Certificate issuer:       /CN=A91C62D3/serialNumber=5A7DC0A4616B07D1F85E2D590FDD5F4067D0BBC4
Certificate serial:       0BAF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.mft
Manifest number:          0BA3
Signing time:             Thu 16 Apr 2026 18:59:36 +0000
Manifest this update:     Thu 16 Apr 2026 18:59:36 +0000
Manifest next update:     Thu 23 Apr 2026 18:59:36 +0000
Files and hashes:         1: Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.crl (hash: cdKu2JkZYMxQTzAAGj+Kc6JDTykpmaqel60AezG/s0s=)
                          2: 47BBB5E4465311EA85CB607EC4F9AE02.roa (hash: 2bpZtWgq5IEwZ44HP+gmi136eiygvsJqmJlEJBVVQXo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.crl
                          rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:59:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2991 (0xbaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C62D3, serialNumber=5A7DC0A4616B07D1F85E2D590FDD5F4067D0BBC4
        Validity
            Not Before: Apr 16 18:59:36 2026 GMT
            Not After : Apr 23 18:59:36 2026 GMT
        Subject: CN=69e13198-c3c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a5:95:c1:32:61:04:20:7b:1c:a4:2a:28:53:
                    1e:22:e4:06:ac:99:26:d6:b6:5b:9e:9b:33:ac:8d:
                    72:8d:e9:52:83:73:c4:ad:ca:03:c6:f7:90:9e:9b:
                    b8:af:18:8f:91:4d:61:26:93:e8:09:29:91:c3:88:
                    d4:8b:dc:c0:70:b5:ed:57:4e:ec:c3:60:e8:b2:cd:
                    3d:a4:c0:3f:e7:f0:04:b4:cf:1e:cb:bb:9c:d7:70:
                    8e:3e:40:5e:ce:26:ae:cd:ab:c3:23:0f:e3:2e:62:
                    74:0b:f7:32:d1:a9:5c:18:5f:e8:a2:21:a1:1f:8f:
                    90:1a:62:bb:fc:00:ea:a9:26:ad:49:7f:a3:a2:90:
                    71:b3:1f:af:10:8c:c6:eb:e9:d1:d0:73:7c:79:8a:
                    42:1b:be:5c:79:a6:8d:0e:78:64:04:54:5f:30:1c:
                    e8:26:80:89:94:1d:00:97:1b:d5:0c:3d:1a:1a:39:
                    65:51:a5:74:80:38:89:1e:b0:98:05:c6:20:7f:b9:
                    8d:21:12:cf:ed:28:74:a4:9e:84:53:24:32:d9:e4:
                    6b:81:7f:0a:19:26:68:17:c2:2d:54:81:9a:39:3d:
                    d4:95:ab:9a:c8:9e:7b:b6:af:52:f4:e5:1e:fa:cd:
                    3e:43:96:54:56:fb:f4:c4:34:b1:19:65:ec:46:db:
                    a6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:6E:75:3B:E0:CB:1D:23:EE:ED:6E:AC:D5:12:62:6A:F6:6E:26:8E
            X509v3 Authority Key Identifier:
                keyid:5A:7D:C0:A4:61:6B:07:D1:F8:5E:2D:59:0F:DD:5F:40:67:D0:BB:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:98:75:32:ab:7c:8e:f0:2e:41:cb:bf:42:5f:26:47:bb:38:
         8d:16:89:96:3b:58:d8:21:fb:4b:cd:a0:f0:15:19:b5:2a:b6:
         15:e8:62:94:89:dc:7a:9d:88:ee:39:d8:05:e9:8c:9d:12:86:
         e5:55:67:a2:5d:99:c4:9d:f1:48:34:4c:87:78:79:9b:2e:86:
         ad:6c:ae:a4:a7:98:be:e4:d5:ec:44:9c:6e:67:cf:51:07:d7:
         8c:1d:1d:ca:5b:44:37:11:4b:b0:5c:e7:39:3f:35:06:32:82:
         34:ec:f2:50:4a:02:08:9c:b0:36:68:f3:39:4e:53:24:2d:e5:
         b8:29:72:12:65:78:68:4c:d7:ea:2c:20:d1:20:6b:d3:15:45:
         2c:94:12:8b:d8:be:68:f2:a8:66:cb:fb:56:05:19:26:ff:88:
         43:79:d8:16:07:dc:d1:47:de:7c:a5:66:fb:d3:a8:43:fa:da:
         d7:9a:71:01:82:6a:e4:eb:44:a7:88:b5:16:cf:c0:cc:52:fc:
         4f:a5:8b:d3:e9:94:66:99:f2:b5:37:a5:9d:10:ce:62:2b:7c:
         6a:68:72:eb:25:c1:ed:97:3c:2b:75:48:6f:ca:b4:3a:fb:12:
         b7:2e:e8:2d:f8:39:93:9c:76:99:b1:d0:39:c7:03:c1:1d:34:
         ca:91:51:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:28:17 2026 by rpki-client