Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8601/73AA3EBAF6AF11F0BE1EBC5F436F56BC/WYMt_ndUWn2J_bBhkVxnGef4K98.mft
File:                     WYMt_ndUWn2J_bBhkVxnGef4K98.mft (raw, json)
Hash identifier:          AbB2GeDL4MTr8dNnYIycL+TtktdqQhHwu7TDhT8Crho=
Subject key identifier:   7D:CF:BB:03:57:5A:B7:1D:1A:64:43:7E:2E:93:C4:CF:B8:F0:8E:FC
Authority key identifier: 59:83:2D:FE:77:54:5A:7D:89:FD:B0:61:91:5C:67:19:E7:F8:2B:DF
Certificate issuer:       /CN=A91D8601/serialNumber=59832DFE77545A7D89FDB061915C6719E7F82BDF
Certificate serial:       35
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WYMt_ndUWn2J_bBhkVxnGef4K98.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8601/73AA3EBAF6AF11F0BE1EBC5F436F56BC/WYMt_ndUWn2J_bBhkVxnGef4K98.mft
Manifest number:          32
Signing time:             Fri 17 Apr 2026 08:22:56 +0000
Manifest this update:     Fri 17 Apr 2026 08:22:56 +0000
Manifest next update:     Fri 24 Apr 2026 08:22:56 +0000
Files and hashes:         1: WYMt_ndUWn2J_bBhkVxnGef4K98.crl (hash: jdQtW7Jc4b3R8btKA7oy29aA7f/zpxyhLpARBSRmayc=)
                          2: CBF1F0FEF6AF11F09B571584436F56BC.roa (hash: Bawj5Qb3y5hud9s4mY4i7Q9eoq0uTVRDnGt9JTxtaYQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8601/73AA3EBAF6AF11F0BE1EBC5F436F56BC/WYMt_ndUWn2J_bBhkVxnGef4K98.crl
                          rsync://rpki.apnic.net/member_repository/A91D8601/73AA3EBAF6AF11F0BE1EBC5F436F56BC/WYMt_ndUWn2J_bBhkVxnGef4K98.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WYMt_ndUWn2J_bBhkVxnGef4K98.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:43:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8601, serialNumber=59832DFE77545A7D89FDB061915C6719E7F82BDF
        Validity
            Not Before: Apr 17 08:22:56 2026 GMT
            Not After : Apr 24 08:22:56 2026 GMT
        Subject: CN=69e1ede0-4a56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e9:d6:bb:ae:d5:01:54:b5:e8:d8:a6:9f:b2:
                    df:ca:ed:b4:e4:3a:1d:8e:55:b1:f7:15:3a:e8:cf:
                    f1:a1:4e:5d:60:bd:a0:db:fc:15:34:ec:19:ed:fe:
                    ec:df:23:77:80:2a:97:39:0e:3b:24:50:77:c4:23:
                    08:ab:be:bc:2f:6d:01:d7:14:7a:06:8b:01:f4:3b:
                    14:da:68:7f:49:fd:30:54:f8:6a:03:38:ed:97:c6:
                    99:62:8f:b0:77:6e:f8:e1:6b:9a:f4:24:4c:4c:c9:
                    01:d2:c5:c9:8f:87:72:32:8b:c2:ad:5f:3f:3c:04:
                    d2:e0:0c:3e:10:59:3c:45:1a:1b:dd:fc:7e:84:63:
                    c7:ed:ed:23:43:d6:fb:bf:07:67:86:86:6e:d1:7f:
                    f4:05:80:90:cb:d5:c2:5e:89:42:71:32:8b:23:08:
                    6b:a3:19:7c:ac:a1:e8:d7:e8:d8:f4:d8:09:4a:8f:
                    1b:d5:c7:e8:0c:df:91:86:65:37:c3:a1:3c:e6:b5:
                    95:60:eb:57:16:d3:55:ad:7a:79:b8:2c:41:fa:8e:
                    62:2b:b9:33:ff:70:3c:33:da:f4:8b:cf:66:66:42:
                    d7:c6:4c:88:38:8a:ec:c0:b8:5b:1e:ce:0b:91:af:
                    e6:c6:b9:59:2c:42:c9:1f:93:d7:96:67:42:81:b5:
                    42:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:CF:BB:03:57:5A:B7:1D:1A:64:43:7E:2E:93:C4:CF:B8:F0:8E:FC
            X509v3 Authority Key Identifier:
                keyid:59:83:2D:FE:77:54:5A:7D:89:FD:B0:61:91:5C:67:19:E7:F8:2B:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8601/73AA3EBAF6AF11F0BE1EBC5F436F56BC/WYMt_ndUWn2J_bBhkVxnGef4K98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WYMt_ndUWn2J_bBhkVxnGef4K98.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8601/73AA3EBAF6AF11F0BE1EBC5F436F56BC/WYMt_ndUWn2J_bBhkVxnGef4K98.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:5e:1a:e7:10:04:43:0a:77:1f:1e:30:f2:55:ad:75:f6:c4:
         20:3e:f2:0c:4f:58:a9:15:51:d5:c3:f6:84:d3:96:63:4a:fb:
         7a:ce:f4:de:d9:a1:8f:e0:af:1f:98:9d:66:e5:e7:46:87:33:
         10:21:9c:9e:0e:e0:8b:d6:f0:4e:65:3d:a4:37:08:d4:a2:fb:
         33:55:5f:79:23:03:f5:bc:c7:aa:ad:b2:e4:f3:4e:8c:a5:22:
         e9:81:00:6f:96:cc:05:2b:f6:ea:d3:3e:bc:2b:c3:10:46:aa:
         d4:40:6c:1f:55:2b:b3:ea:39:5b:d1:02:6f:80:ed:56:b0:c1:
         a4:fe:79:c8:14:16:6d:71:af:aa:26:75:48:54:a2:da:3a:54:
         82:44:4f:56:27:45:34:4a:5c:c1:d5:fa:49:b4:a0:fe:4a:f7:
         95:de:39:5d:42:d1:a0:05:60:ae:97:83:8a:3c:a8:6a:8e:cf:
         da:fc:a7:03:45:c0:4c:5e:00:53:c7:33:30:23:12:9c:d4:cf:
         3a:8d:6d:78:52:b4:5e:b5:74:24:a6:11:26:44:31:d5:ae:51:
         17:92:4a:4e:3b:fd:e8:89:10:22:1b:d7:35:86:68:4f:13:c7:
         93:ef:01:36:32:f7:08:0b:89:61:73:3c:dc:13:36:96:0a:9b:
         64:3c:5a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:29:23 2026 by rpki-client