Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft
File:                     wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft (raw, json)
Hash identifier:          LNHEFLUH2j93UiTUI9NWY/Z5fdJt/W+ZeVjr0fSaFzA=
Subject key identifier:   28:1B:BD:F2:4C:16:F2:2C:DD:8D:1B:39:88:16:37:6A:49:F1:FE:CE
Authority key identifier: C2:22:C1:9E:BF:52:84:4D:4B:7C:DA:0E:F7:54:E6:D3:30:C4:B6:09
Certificate issuer:       /CN=A91CE821/serialNumber=C222C19EBF52844D4B7CDA0EF754E6D330C4B609
Certificate serial:       1552
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wiLBnr9ShE1LfNoO91Tm0zDEtgk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft
Manifest number:          1A35
Signing time:             Mon 02 Mar 2026 01:35:27 +0000
Manifest this update:     Mon 02 Mar 2026 01:35:25 +0000
Manifest next update:     Mon 09 Mar 2026 01:35:25 +0000
Files and hashes:         1: wiLBnr9ShE1LfNoO91Tm0zDEtgk.crl (hash: Fzkgh7qUQnA8JUK82tjfYJvXbOUPNcmUv6lTH0KVopQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.crl
                          rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wiLBnr9ShE1LfNoO91Tm0zDEtgk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:35:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5458 (0x1552)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE821, serialNumber=C222C19EBF52844D4B7CDA0EF754E6D330C4B609
        Validity
            Not Before: Mar  2 01:35:25 2026 GMT
            Not After : Mar  9 01:35:25 2026 GMT
        Subject: CN=69a4e95f-c023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8d:73:ae:f8:c0:0c:bb:dc:33:fc:0c:14:ee:
                    8f:42:a6:53:e8:7b:e0:09:73:1a:03:ab:a0:f8:e7:
                    01:e5:7d:17:c0:93:45:39:60:8b:60:1a:4f:d7:a4:
                    74:e3:1e:02:aa:ba:75:6d:0b:c3:8b:90:cd:97:3d:
                    cf:bb:63:cb:43:b1:82:d1:50:be:44:75:8d:aa:aa:
                    c5:22:2d:97:a4:b5:42:71:77:e7:ee:fc:1c:91:50:
                    b7:ce:a3:2d:a2:c2:96:a7:62:4a:0b:d9:01:8b:f7:
                    b2:a7:fd:a2:cd:0b:f7:64:3f:37:53:9c:70:d1:18:
                    3c:42:a9:14:ff:29:e7:75:b7:8b:05:cb:4d:e7:69:
                    5a:c8:6b:c3:0a:51:e8:30:02:9d:e8:2e:65:1c:62:
                    11:5c:ad:47:a0:0e:4b:b0:e4:b7:74:9c:c3:df:52:
                    73:b8:03:ea:e3:35:b2:bf:e0:1d:c5:7d:e6:bc:37:
                    06:45:67:c8:30:24:06:61:c4:82:32:76:87:60:18:
                    11:9d:81:79:16:26:07:a1:87:09:22:58:0b:f2:ff:
                    17:50:81:68:da:5e:b6:26:e2:a9:e9:7b:99:fb:59:
                    e8:b0:35:e4:f1:74:84:61:20:b0:e8:49:55:24:7a:
                    78:6d:18:2e:4a:d9:a3:ff:2e:82:b9:00:58:77:b6:
                    c5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:1B:BD:F2:4C:16:F2:2C:DD:8D:1B:39:88:16:37:6A:49:F1:FE:CE
            X509v3 Authority Key Identifier:
                keyid:C2:22:C1:9E:BF:52:84:4D:4B:7C:DA:0E:F7:54:E6:D3:30:C4:B6:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wiLBnr9ShE1LfNoO91Tm0zDEtgk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:5a:5e:d9:80:4f:b6:af:02:02:88:d2:99:d2:ad:f6:35:1c:
         8c:00:76:f5:d2:0c:7a:a3:0f:35:3b:ef:1f:37:09:49:1a:11:
         fa:2f:44:b2:f6:44:99:8c:dd:a6:42:f2:33:9d:8c:29:be:13:
         43:e2:5c:5d:00:4b:72:2e:5d:fc:42:9e:70:0a:11:3c:a8:08:
         20:15:e2:13:e8:da:b6:2e:c7:f0:f6:bc:c1:9f:4c:7f:b2:3b:
         37:ae:f8:81:f5:e3:54:fe:e4:c6:18:a1:ef:53:82:39:e3:39:
         e7:2b:4c:33:40:77:41:9a:8e:be:b8:e0:20:03:98:2f:6e:99:
         04:8d:ba:0e:99:cb:13:95:21:e9:09:3f:26:71:4c:79:53:60:
         2b:3b:6c:74:7d:42:03:c2:97:6c:42:d6:2c:44:de:82:a0:c5:
         ff:72:9a:83:36:f0:ed:7a:3c:15:dc:5a:7b:4b:63:7d:61:13:
         b3:95:95:b4:28:f9:88:ef:87:4e:7e:39:ef:62:6b:bb:1c:1f:
         d3:c2:2a:8c:c2:cf:7c:26:d9:4b:cf:ee:f2:b5:d2:4b:cb:7b:
         03:de:f8:28:35:2c:1a:4c:3d:ad:c2:31:fe:55:a5:18:44:a4:
         38:2b:19:83:d0:a2:d2:82:07:01:c6:ab:05:5e:1f:45:17:67:
         86:37:ab:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:09:16 2026 by rpki-client