Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D81D4/DAE382AA1D9A11E288D06C8808B02CD2/W2r-ya7p6tTclkY7oanLJyM9bf8.mft
File:                     W2r-ya7p6tTclkY7oanLJyM9bf8.mft (raw, json)
Hash identifier:          ThNrugsspVsPFdTQgspB7XECQw3dr1fbyFeyc0zebWA=
Subject key identifier:   5D:9B:CB:A5:E5:54:B3:BA:26:7E:5D:33:B1:4E:BA:0C:B5:2A:27:3C
Authority key identifier: 5B:6A:FE:C9:AE:E9:EA:D4:DC:96:46:3B:A1:A9:CB:27:23:3D:6D:FF
Certificate issuer:       /CN=A91D81D4/serialNumber=5B6AFEC9AEE9EAD4DC96463BA1A9CB27233D6DFF
Certificate serial:       3523
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2r-ya7p6tTclkY7oanLJyM9bf8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D81D4/DAE382AA1D9A11E288D06C8808B02CD2/W2r-ya7p6tTclkY7oanLJyM9bf8.mft
Manifest number:          351B
Signing time:             Mon 02 Mar 2026 01:36:35 +0000
Manifest this update:     Mon 02 Mar 2026 01:36:32 +0000
Manifest next update:     Mon 09 Mar 2026 01:36:32 +0000
Files and hashes:         1: W2r-ya7p6tTclkY7oanLJyM9bf8.crl (hash: pZHsbV2uNBk/gPotdicgHhI8x6u7O+RSe+7XDoccnzI=)
                          2: 1317969A55B711EBAAFF6E4DC4F9AE02.roa (hash: eu2kAhhbc8QLlxvq0tkId26sGJatqL9ipE8llbMkMo0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D81D4/DAE382AA1D9A11E288D06C8808B02CD2/W2r-ya7p6tTclkY7oanLJyM9bf8.crl
                          rsync://rpki.apnic.net/member_repository/A91D81D4/DAE382AA1D9A11E288D06C8808B02CD2/W2r-ya7p6tTclkY7oanLJyM9bf8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2r-ya7p6tTclkY7oanLJyM9bf8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:36:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13603 (0x3523)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D81D4, serialNumber=5B6AFEC9AEE9EAD4DC96463BA1A9CB27233D6DFF
        Validity
            Not Before: Mar  2 01:36:32 2026 GMT
            Not After : Mar  9 01:36:32 2026 GMT
        Subject: CN=69a4e9a3-5a68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:07:74:a0:9d:33:22:66:ba:c3:98:c1:ad:4e:
                    9c:2c:83:c9:5e:12:2e:41:a3:d6:04:b0:ce:5a:b2:
                    bc:c4:b6:38:4e:61:43:dd:5f:ff:3e:d8:c4:69:dc:
                    39:1c:ed:cb:4b:3d:fd:64:0a:70:d2:bd:0a:77:4c:
                    24:4a:7d:2b:2d:3f:21:7f:f6:c6:02:ee:df:0b:33:
                    23:d7:24:2c:5b:1e:57:bf:22:e9:42:de:14:68:01:
                    f1:20:48:17:fb:b7:ea:f1:de:9c:a5:54:6c:1f:2e:
                    86:02:04:db:aa:79:84:e3:7c:b9:90:44:7e:13:14:
                    91:a0:86:cb:6f:0f:39:11:37:28:ea:f6:85:04:4b:
                    72:7b:a4:47:1d:ef:de:6c:a5:8e:f0:79:38:77:44:
                    68:83:30:1e:8a:e0:1b:e2:76:06:fd:cc:02:02:ac:
                    66:0b:ef:57:bc:bd:f9:2e:69:03:12:8c:79:73:e3:
                    26:6b:73:60:37:63:c4:a9:95:4f:6a:02:1a:69:6b:
                    c0:0e:69:2a:4a:f9:15:1f:aa:9c:56:08:a4:92:45:
                    1b:e9:b6:a5:b0:5f:16:11:11:c2:1b:be:49:c2:be:
                    b3:20:af:15:30:0b:e3:aa:f2:f8:a6:17:22:6f:ff:
                    e7:2b:32:10:54:83:a2:8b:d6:27:66:b1:66:af:8b:
                    83:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:9B:CB:A5:E5:54:B3:BA:26:7E:5D:33:B1:4E:BA:0C:B5:2A:27:3C
            X509v3 Authority Key Identifier:
                keyid:5B:6A:FE:C9:AE:E9:EA:D4:DC:96:46:3B:A1:A9:CB:27:23:3D:6D:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D81D4/DAE382AA1D9A11E288D06C8808B02CD2/W2r-ya7p6tTclkY7oanLJyM9bf8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2r-ya7p6tTclkY7oanLJyM9bf8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D81D4/DAE382AA1D9A11E288D06C8808B02CD2/W2r-ya7p6tTclkY7oanLJyM9bf8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:2a:c6:50:e6:e5:52:28:b8:2e:4e:d3:7b:bf:06:1a:89:dd:
         b0:fb:41:8d:40:30:0f:9d:1c:4a:d6:86:28:4f:08:4a:ed:51:
         8b:08:fd:f4:de:18:e0:c8:e2:d4:7e:c9:dd:fe:1e:ec:18:e7:
         2a:a7:19:10:50:8f:c6:44:2b:0f:2e:ac:bf:c2:08:57:22:68:
         4e:bf:cd:42:89:b7:5f:3a:ea:41:bb:dc:36:8e:0f:45:f1:b9:
         aa:51:a3:65:1a:c6:2b:c1:09:3e:19:d2:16:ee:11:94:17:5b:
         37:eb:86:87:cb:bd:6e:30:15:be:f0:fb:0b:f7:55:a8:f6:1e:
         70:c2:b8:06:59:03:8b:dc:82:fe:24:7b:9c:a3:8f:ab:71:1c:
         fd:12:a4:23:a2:eb:c3:24:0f:8e:f5:cf:3d:b5:2f:80:32:da:
         7b:fa:ae:9d:bb:dd:15:4f:17:14:91:2c:09:55:54:9d:96:80:
         72:ca:d2:ea:5e:8e:23:60:f4:5f:c9:98:de:2e:9d:77:ba:24:
         2b:d6:7b:73:c2:72:3e:c3:52:c2:80:ae:1e:0c:29:8b:e4:9e:
         c8:82:7f:3c:0c:a7:06:03:42:48:73:0c:4a:1d:2e:d9:db:5d:
         7f:33:d6:ad:5f:ba:5b:b9:0d:d7:4c:18:21:94:f3:11:55:b6:
         a4:ba:2b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:39:24 2026 by rpki-client