Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.mft
File:                     wuC1g9pA223YMwUcBSRZnhpZAsY.mft (raw, json)
Hash identifier:          1U6jLJBoZLELTrATs181AAF6YopGCk92fv7N8LaP2hc=
Subject key identifier:   91:D5:4C:2E:50:33:2A:2C:93:25:B8:6C:6A:04:5B:89:39:9C:79:A8
Authority key identifier: C2:E0:B5:83:DA:40:DB:6D:D8:33:05:1C:05:24:59:9E:1A:59:02:C6
Certificate issuer:       /CN=A91CCDD3/serialNumber=C2E0B583DA40DB6DD833051C0524599E1A5902C6
Certificate serial:       090B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuC1g9pA223YMwUcBSRZnhpZAsY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.mft
Manifest number:          08F2
Signing time:             Thu 16 Apr 2026 20:17:52 +0000
Manifest this update:     Thu 16 Apr 2026 20:17:51 +0000
Manifest next update:     Thu 23 Apr 2026 20:17:51 +0000
Files and hashes:         1: wuC1g9pA223YMwUcBSRZnhpZAsY.crl (hash: MkYugbNvyRRMuKFut9TzKsHTgEzmKcHR4vNmvQ4+ocM=)
                          2: 68EAE318D09411EA9D19403FC4F9AE02.roa (hash: gLu0Ymp9wxtx8gvRo+hytcB57SRvuDIDqCH95g4taLY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.crl
                          rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuC1g9pA223YMwUcBSRZnhpZAsY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:17:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2315 (0x90b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCDD3, serialNumber=C2E0B583DA40DB6DD833051C0524599E1A5902C6
        Validity
            Not Before: Apr 16 20:17:51 2026 GMT
            Not After : Apr 23 20:17:51 2026 GMT
        Subject: CN=69e143f0-518e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f9:22:59:dd:e9:4d:7e:c2:1e:60:06:12:71:
                    02:6a:de:ef:f1:42:28:3e:09:21:74:85:6f:b7:ae:
                    1b:d2:a0:ca:fa:c5:f9:93:7e:26:17:f8:2b:52:1b:
                    c8:0a:cd:a8:30:ca:ae:63:20:7d:c5:86:93:89:ca:
                    d3:64:88:79:f1:5d:50:ce:f4:cd:0d:f1:b4:e2:51:
                    41:33:9e:16:12:11:fb:cf:3b:68:73:62:35:3b:94:
                    0f:9d:60:fb:80:5c:65:0a:28:70:89:77:78:b4:ba:
                    29:b9:fb:85:f2:49:4d:45:97:64:0a:83:92:6a:fb:
                    d2:18:c1:b2:eb:7e:b8:de:3a:82:f3:a0:70:40:c3:
                    b3:d9:8f:57:37:58:50:1e:73:e3:45:7a:16:78:9c:
                    97:7e:27:6b:18:cf:69:8f:34:fa:14:d7:75:dc:47:
                    2c:9f:41:52:1d:bd:df:43:34:d5:bf:14:50:51:ad:
                    18:39:a2:bd:c5:81:9b:c9:d4:21:79:2a:ea:08:54:
                    05:e7:9c:60:73:67:9a:06:d9:27:b9:0b:e1:ed:ce:
                    13:1b:63:ae:af:f8:4e:2f:b5:5d:3e:8e:39:4b:ea:
                    cf:f1:42:38:0e:af:e6:3c:5b:2b:c6:74:45:ef:56:
                    e2:9d:9b:e8:04:2c:c4:22:1d:a8:c1:3d:a8:e2:2e:
                    ad:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:D5:4C:2E:50:33:2A:2C:93:25:B8:6C:6A:04:5B:89:39:9C:79:A8
            X509v3 Authority Key Identifier:
                keyid:C2:E0:B5:83:DA:40:DB:6D:D8:33:05:1C:05:24:59:9E:1A:59:02:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuC1g9pA223YMwUcBSRZnhpZAsY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:72:de:05:2a:aa:03:62:d9:11:68:25:ab:4a:59:60:e7:9d:
         43:7e:98:b2:d2:e7:b0:d6:4b:fc:6f:f6:43:22:52:32:96:c0:
         d0:5a:8e:04:9f:a3:7b:a5:53:35:af:5f:f8:81:c4:57:8f:90:
         d9:ad:2d:a0:c9:d1:84:91:ce:0c:31:1e:b9:7c:0b:98:04:b4:
         da:65:88:fd:18:0d:72:98:c3:4d:05:3d:c3:30:e4:6d:e5:5b:
         95:a0:dd:a9:ee:c9:ec:4c:47:f1:02:65:16:43:76:01:b6:db:
         b3:48:89:6b:c5:7d:04:0e:06:f6:2e:4a:dd:b9:eb:68:e0:23:
         97:ad:8d:e2:1e:a4:bd:b2:ca:00:3c:8b:bb:e0:61:1d:2a:cc:
         3c:c1:de:dd:b1:33:6c:d1:96:37:2c:9c:84:ad:5a:c4:c1:87:
         78:1c:cd:db:a8:b8:ae:be:d1:b8:23:e4:e1:df:6e:53:47:0e:
         d7:9f:e7:ed:42:49:3b:e6:45:a1:24:21:e0:37:3b:4a:71:f5:
         3b:6d:75:47:0f:bb:3e:da:a8:51:5d:30:40:80:9d:73:18:36:
         65:04:67:75:06:c1:9d:bf:25:1c:88:2c:a3:9d:db:95:50:a6:
         9c:e6:71:33:ad:5b:f7:77:52:8c:b2:e7:54:eb:9c:0a:e1:07:
         42:8f:08:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:43:27 2026 by rpki-client