Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5490/321F591E146211EC9868C246C4F9AE02/-W-uKIpkMK3M-V4OqJ8IW7boKdQ.mft
File:                     -W-uKIpkMK3M-V4OqJ8IW7boKdQ.mft (raw, json)
Hash identifier:          c+B9V++V+dkybgoRHnqX34U7EzpstDm+OqYtoCx/lrU=
Subject key identifier:   18:F9:DC:1E:05:21:EC:C0:C5:CE:46:0C:35:CA:DD:4B:87:8F:89:F3
Authority key identifier: F9:6F:AE:28:8A:64:30:AD:CC:F9:5E:0E:A8:9F:08:5B:B6:E8:29:D4
Certificate issuer:       /CN=A91E5490/serialNumber=F96FAE288A6430ADCCF95E0EA89F085BB6E829D4
Certificate serial:       05AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-W-uKIpkMK3M-V4OqJ8IW7boKdQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5490/321F591E146211EC9868C246C4F9AE02/-W-uKIpkMK3M-V4OqJ8IW7boKdQ.mft
Manifest number:          059F
Signing time:             Thu 16 Apr 2026 23:07:21 +0000
Manifest this update:     Thu 16 Apr 2026 23:07:21 +0000
Manifest next update:     Thu 23 Apr 2026 23:07:21 +0000
Files and hashes:         1: -W-uKIpkMK3M-V4OqJ8IW7boKdQ.crl (hash: FrWoLOnF7CFCPqwmUebhiEt2xhJxxV5X+tyzMboqa+I=)
                          2: 8608449A356511EC9715F015C4F9AE02.roa (hash: 6cpkIlvY+eAWkZd1IGQR7w8+Mu+zR4HanQ7ax6nwheE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5490/321F591E146211EC9868C246C4F9AE02/-W-uKIpkMK3M-V4OqJ8IW7boKdQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E5490/321F591E146211EC9868C246C4F9AE02/-W-uKIpkMK3M-V4OqJ8IW7boKdQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-W-uKIpkMK3M-V4OqJ8IW7boKdQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:07:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1452 (0x5ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5490, serialNumber=F96FAE288A6430ADCCF95E0EA89F085BB6E829D4
        Validity
            Not Before: Apr 16 23:07:21 2026 GMT
            Not After : Apr 23 23:07:21 2026 GMT
        Subject: CN=69e16ba9-0e63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:64:af:53:dd:9e:90:83:42:b5:da:84:f5:f8:
                    36:71:31:83:46:5f:2e:19:9a:84:97:a3:7d:13:6c:
                    1b:25:15:70:ea:d4:8e:1d:2a:05:1c:7c:9a:0e:95:
                    f0:71:79:6a:b9:e1:d5:09:39:63:ba:42:bf:5b:33:
                    fe:15:b8:b1:21:c8:8c:7a:d9:5a:4e:2a:96:96:63:
                    56:14:b4:59:c5:57:8c:9a:2f:99:a4:b3:aa:a7:fc:
                    c9:44:53:eb:92:6e:90:0c:63:19:96:89:1e:58:5a:
                    ae:f5:2f:dc:0d:58:49:ef:bf:8c:75:13:a8:49:aa:
                    4e:45:f1:e2:d7:d1:78:e8:1d:33:3d:b6:c0:82:9c:
                    48:78:95:33:05:1c:fb:53:8a:27:be:df:85:36:74:
                    f0:a7:8c:12:48:18:4f:74:dc:57:a0:2b:b9:42:96:
                    77:4e:f4:cc:06:df:23:57:1d:dd:50:06:0d:c0:b2:
                    de:db:7a:a3:ba:2b:e4:f7:92:a3:0a:60:99:fe:68:
                    95:81:0f:2f:48:dd:12:ec:d0:c6:93:28:33:39:66:
                    68:43:87:66:54:df:a6:96:3d:3c:c6:0e:9c:f5:06:
                    5f:68:64:3f:21:1b:81:00:3f:a0:80:de:28:44:dd:
                    a3:54:c1:1b:5e:ab:36:74:46:78:b3:70:9b:32:b8:
                    bc:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F9:DC:1E:05:21:EC:C0:C5:CE:46:0C:35:CA:DD:4B:87:8F:89:F3
            X509v3 Authority Key Identifier:
                keyid:F9:6F:AE:28:8A:64:30:AD:CC:F9:5E:0E:A8:9F:08:5B:B6:E8:29:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5490/321F591E146211EC9868C246C4F9AE02/-W-uKIpkMK3M-V4OqJ8IW7boKdQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-W-uKIpkMK3M-V4OqJ8IW7boKdQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5490/321F591E146211EC9868C246C4F9AE02/-W-uKIpkMK3M-V4OqJ8IW7boKdQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:2c:19:05:7e:6a:b4:0d:a6:ad:56:92:8a:fa:46:a3:f0:56:
         33:81:47:ac:a0:09:30:de:96:63:b8:da:1c:20:f7:78:cc:31:
         b4:02:92:6f:e8:72:1d:24:c8:1b:35:36:92:7e:81:7d:4f:df:
         d4:b5:8a:41:94:c5:2e:e4:7b:96:53:57:dd:cb:03:17:48:78:
         bb:b7:8d:77:17:4d:0c:cb:7e:bf:ee:03:c0:13:c5:60:9a:f0:
         cd:72:d1:a8:bb:9a:8b:6a:11:a1:59:6c:a9:1c:d2:7f:39:3b:
         5c:ab:b2:3c:be:bd:e9:bd:8c:05:8b:f2:cd:9d:5c:f0:01:47:
         6d:3d:ea:ac:39:7b:ee:40:b3:5b:4e:f8:83:1e:14:1f:52:c4:
         fc:d4:25:59:a4:15:14:d6:68:b0:fc:76:00:18:55:af:7b:55:
         2e:5d:b4:4a:00:94:89:97:07:a7:6a:aa:9f:c6:7d:c8:0a:99:
         f6:19:89:88:fb:14:df:86:1f:96:80:cc:27:ae:8c:c5:37:e9:
         a1:34:02:cc:16:20:dc:10:ef:80:9a:ac:0d:0f:79:88:97:5f:
         d7:46:22:fe:ae:c7:c0:93:9b:4f:0b:b3:3e:27:71:fd:67:82:
         b3:d6:fa:0d:25:d5:ab:47:ab:f0:e3:77:12:00:1c:b4:c5:63:
         0e:c9:85:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:42:26 2026 by rpki-client