Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D81D4/DAE382AA1D9A11E288D06C8808B02CD2/W2r-ya7p6tTclkY7oanLJyM9bf8.mft
File:                     W2r-ya7p6tTclkY7oanLJyM9bf8.mft (raw, json)
Hash identifier:          yL2j6XO/E/lNR1m1YP8HFbR9PqOweXo4ABCwO95744Q=
Subject key identifier:   D9:13:6F:8B:21:25:D0:2D:E5:28:E0:84:D2:65:25:FF:54:E8:8F:2A
Authority key identifier: 5B:6A:FE:C9:AE:E9:EA:D4:DC:96:46:3B:A1:A9:CB:27:23:3D:6D:FF
Certificate issuer:       /CN=A91D81D4/serialNumber=5B6AFEC9AEE9EAD4DC96463BA1A9CB27233D6DFF
Certificate serial:       353C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2r-ya7p6tTclkY7oanLJyM9bf8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D81D4/DAE382AA1D9A11E288D06C8808B02CD2/W2r-ya7p6tTclkY7oanLJyM9bf8.mft
Manifest number:          3534
Signing time:             Sat 18 Apr 2026 14:54:24 +0000
Manifest this update:     Sat 18 Apr 2026 14:54:23 +0000
Manifest next update:     Sat 25 Apr 2026 14:54:23 +0000
Files and hashes:         1: W2r-ya7p6tTclkY7oanLJyM9bf8.crl (hash: 3GCEFZnJamYLZ+0ahVo5iL4Qktrd2sAe9WL2xVZUSe4=)
                          2: 1317969A55B711EBAAFF6E4DC4F9AE02.roa (hash: eu2kAhhbc8QLlxvq0tkId26sGJatqL9ipE8llbMkMo0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D81D4/DAE382AA1D9A11E288D06C8808B02CD2/W2r-ya7p6tTclkY7oanLJyM9bf8.crl
                          rsync://rpki.apnic.net/member_repository/A91D81D4/DAE382AA1D9A11E288D06C8808B02CD2/W2r-ya7p6tTclkY7oanLJyM9bf8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2r-ya7p6tTclkY7oanLJyM9bf8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 14:54:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13628 (0x353c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D81D4, serialNumber=5B6AFEC9AEE9EAD4DC96463BA1A9CB27233D6DFF
        Validity
            Not Before: Apr 18 14:54:23 2026 GMT
            Not After : Apr 25 14:54:23 2026 GMT
        Subject: CN=69e39b20-eca9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:47:47:01:cd:b1:03:e5:91:ee:d4:89:26:d4:
                    58:ab:80:6c:53:2e:36:0b:a7:cf:5c:a4:69:ef:c9:
                    33:83:7f:05:5f:87:0d:4a:0f:f2:d6:ae:6d:dd:91:
                    71:a1:8a:e6:3b:a3:5f:f8:ce:12:f7:2d:75:6b:ea:
                    4b:42:48:87:cc:dd:91:e9:6f:38:80:33:6a:51:ce:
                    26:79:6d:ae:46:e6:80:6f:f2:76:b8:0a:1a:f3:21:
                    06:ed:98:d6:24:47:bc:17:42:1f:01:a9:a8:c1:bf:
                    ea:ff:34:e8:79:d2:15:6f:0c:39:f4:69:00:61:da:
                    b9:d0:dc:b9:77:ca:22:50:84:c7:74:d0:d6:24:a0:
                    29:a5:cf:3a:04:de:cd:4e:d3:19:a0:18:e0:3a:8b:
                    af:32:b4:d0:4e:47:29:eb:9b:1c:c4:17:ca:98:8d:
                    d4:f5:d3:2a:22:49:ba:00:5a:41:e5:c7:09:6f:98:
                    0f:bb:c9:b4:b2:21:bd:9b:9f:b6:f8:35:7b:9c:fe:
                    dc:5a:47:0a:16:26:0c:85:a8:04:fe:60:c8:24:1b:
                    e1:f0:8d:f7:34:b2:a3:1a:d4:05:1c:20:d6:9c:6f:
                    47:30:66:5f:0b:c9:ef:5e:11:00:70:90:05:83:a7:
                    c8:a9:87:05:0c:06:57:88:5c:bf:07:da:3c:8a:5c:
                    e1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:13:6F:8B:21:25:D0:2D:E5:28:E0:84:D2:65:25:FF:54:E8:8F:2A
            X509v3 Authority Key Identifier:
                keyid:5B:6A:FE:C9:AE:E9:EA:D4:DC:96:46:3B:A1:A9:CB:27:23:3D:6D:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D81D4/DAE382AA1D9A11E288D06C8808B02CD2/W2r-ya7p6tTclkY7oanLJyM9bf8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2r-ya7p6tTclkY7oanLJyM9bf8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D81D4/DAE382AA1D9A11E288D06C8808B02CD2/W2r-ya7p6tTclkY7oanLJyM9bf8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:f9:5a:5a:7c:63:76:60:c3:4a:5e:da:17:bb:51:f4:f2:6a:
         3d:05:a8:5a:5f:a8:ce:84:41:4b:45:5f:ce:01:82:e3:9a:de:
         4f:56:ef:0c:c4:65:17:2b:b4:a7:18:c1:7b:5a:7a:13:88:de:
         f5:ff:da:12:31:32:8c:9e:5e:b3:30:40:5b:e4:77:c7:41:19:
         68:d4:d2:ce:96:af:f2:ad:7b:e6:3d:21:f6:aa:c9:5f:99:37:
         39:d3:50:df:cf:ed:ca:94:08:a0:b6:76:ea:4e:67:79:26:fc:
         bf:a7:cf:f0:8d:24:3d:7d:a8:c6:20:25:c9:eb:4b:2c:27:43:
         e9:c9:4e:1b:cc:8f:a9:f2:93:d2:5a:1d:0b:54:98:88:02:eb:
         d1:5c:b8:fc:65:44:aa:56:28:fa:2d:ab:98:a2:2f:3b:b1:2a:
         e6:71:47:ec:83:c7:cd:ed:45:68:cc:f6:8c:d2:58:75:16:a9:
         83:fe:96:57:9e:ed:6d:5f:0f:22:9b:6a:7d:70:3f:e0:72:3e:
         82:70:2e:0d:20:53:90:ff:89:61:30:0b:a4:e2:ec:8e:a7:42:
         4c:48:7b:b4:0d:60:c3:d0:20:b8:87:70:a5:87:09:48:d7:e7:
         f3:9a:80:5f:89:7d:fc:b0:55:ed:0a:e7:78:0a:8d:39:29:19:
         b3:e0:9b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:39:18 2026 by rpki-client