Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E007B/09DE3482671311EAA4D26753C4F9AE02/wngM_VepmGmT2_bA1r3u92tFGXI.mft
File:                     wngM_VepmGmT2_bA1r3u92tFGXI.mft (raw, json)
Hash identifier:          UYDc9pIBkZv3YGWur45jhVVYyE6bvSOxlHc1wBl6N08=
Subject key identifier:   5F:F8:7A:7C:57:95:88:2A:43:22:C7:40:2B:F8:C6:D1:FB:59:D3:65
Authority key identifier: C2:78:0C:FD:57:A9:98:69:93:DB:F6:C0:D6:BD:EE:F7:6B:45:19:72
Certificate issuer:       /CN=A91E007B/serialNumber=C2780CFD57A9986993DBF6C0D6BDEEF76B451972
Certificate serial:       0B1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wngM_VepmGmT2_bA1r3u92tFGXI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E007B/09DE3482671311EAA4D26753C4F9AE02/wngM_VepmGmT2_bA1r3u92tFGXI.mft
Manifest number:          0AFC
Signing time:             Thu 16 Apr 2026 19:17:09 +0000
Manifest this update:     Thu 16 Apr 2026 19:17:09 +0000
Manifest next update:     Thu 23 Apr 2026 19:17:09 +0000
Files and hashes:         1: wngM_VepmGmT2_bA1r3u92tFGXI.crl (hash: aM9nlTucZ6cyLO8oMZYBb6GOymX4/VJftfN082vJt+Y=)
                          2: BCFA6274C35C11F0BCE51340C4F9AE02.roa (hash: xE3/3MEwofV0kWri8MhE1BrfouBJnkKU5c1QnemDypU=)
                          3: 828FBA521E3511EB800DB148C4F9AE02.roa (hash: MmP9CWch/CybHk20ueTTvYOMTqnpCBQ9lSrVxPBzIT0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E007B/09DE3482671311EAA4D26753C4F9AE02/wngM_VepmGmT2_bA1r3u92tFGXI.crl
                          rsync://rpki.apnic.net/member_repository/A91E007B/09DE3482671311EAA4D26753C4F9AE02/wngM_VepmGmT2_bA1r3u92tFGXI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wngM_VepmGmT2_bA1r3u92tFGXI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:17:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2844 (0xb1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E007B, serialNumber=C2780CFD57A9986993DBF6C0D6BDEEF76B451972
        Validity
            Not Before: Apr 16 19:17:09 2026 GMT
            Not After : Apr 23 19:17:09 2026 GMT
        Subject: CN=69e135b5-ff3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ea:61:6b:99:ed:b1:01:34:e0:a5:e6:25:46:
                    a9:bf:ba:f5:f3:10:dc:7c:23:1c:8b:da:4b:66:59:
                    4d:e2:90:a0:d9:a3:4f:9c:f6:ef:1e:c1:51:bd:64:
                    47:e7:0b:7d:00:f7:ea:6e:7c:06:50:56:a7:8f:82:
                    06:4e:b1:f4:17:9a:d0:3a:41:29:8e:72:e4:6f:8f:
                    a8:73:ed:63:ee:3b:26:03:6d:1b:9f:17:fb:26:31:
                    08:38:08:f0:1b:bf:4f:fd:aa:1e:c5:c8:6a:f2:6f:
                    2e:51:c7:39:82:f3:77:0a:a4:e3:2c:fd:33:44:fe:
                    e5:1c:d2:f7:e9:b6:02:75:3c:91:11:f1:04:d7:67:
                    e9:9e:8c:ef:93:76:e6:ef:ae:c8:f4:f8:fd:c2:50:
                    f4:86:2f:15:8a:fc:71:3e:74:4f:76:5e:2b:f6:d1:
                    db:5c:11:1b:1f:96:e8:42:88:ab:72:ff:0f:e1:43:
                    da:e9:c2:fb:cb:78:f1:84:55:57:9a:62:8a:bc:ec:
                    df:39:2e:da:be:18:51:32:0b:34:ab:74:84:5d:fe:
                    73:86:c1:a7:3d:a4:09:67:7f:09:a3:d6:c4:ee:21:
                    be:c0:b2:9c:f2:40:13:1b:a8:db:93:de:47:3b:e7:
                    bd:e1:c4:97:e6:81:40:81:80:e6:2a:82:24:30:49:
                    62:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F8:7A:7C:57:95:88:2A:43:22:C7:40:2B:F8:C6:D1:FB:59:D3:65
            X509v3 Authority Key Identifier:
                keyid:C2:78:0C:FD:57:A9:98:69:93:DB:F6:C0:D6:BD:EE:F7:6B:45:19:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E007B/09DE3482671311EAA4D26753C4F9AE02/wngM_VepmGmT2_bA1r3u92tFGXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wngM_VepmGmT2_bA1r3u92tFGXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E007B/09DE3482671311EAA4D26753C4F9AE02/wngM_VepmGmT2_bA1r3u92tFGXI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:bc:90:57:9f:f5:9f:c0:71:2e:29:7f:a9:71:0c:d4:7d:88:
         d3:4a:ed:b0:a3:5f:42:d1:06:85:54:eb:4f:0a:71:47:9f:26:
         cb:af:27:9f:7a:3b:47:17:ec:03:98:42:83:b2:14:a6:f2:14:
         f1:59:ae:e1:aa:b4:20:d0:48:57:d8:4e:b1:cd:8a:43:9c:12:
         9c:cc:ae:ff:ea:ad:9f:0f:ea:2a:b6:37:b3:4e:38:95:53:10:
         9d:c9:cb:1a:b1:d5:a0:ca:97:b8:87:9d:10:12:1b:a1:a8:49:
         ff:38:9e:4d:b0:cb:24:c2:ec:64:6f:0a:cd:27:90:0c:74:af:
         41:60:18:5b:82:77:4f:ca:8f:78:c0:6f:9a:2b:4e:04:28:b4:
         ea:a9:40:16:f6:8d:0f:5e:8d:1b:8a:17:a6:99:ff:b4:d5:76:
         d6:d6:4b:43:69:e9:d9:55:7a:10:46:05:38:a0:97:03:a7:4d:
         4f:51:4a:ff:3e:04:96:28:6c:d8:98:d6:b7:36:de:dc:0f:26:
         48:4e:d0:98:34:0d:7f:88:a7:71:c2:50:b4:ed:9b:7e:68:e9:
         30:18:c5:d4:b2:37:46:3d:db:5c:c8:e3:aa:61:47:2e:53:98:
         87:a4:95:6f:18:6f:7d:76:06:27:b2:3d:7b:88:70:e4:28:d8:
         be:b0:41:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:47:11 2026 by rpki-client