Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft
File:                     Wsl8kSmaL6nIztiqxnD_78e2mhs.mft (raw, json)
Hash identifier:          /qG1215kG3YeDMnsqL5iU7+oEc0JB66OX70/77ScWHU=
Subject key identifier:   AB:18:12:66:59:9E:80:E0:CA:5F:F0:E4:D7:9E:0E:24:41:E4:A3:94
Authority key identifier: 5A:C9:7C:91:29:9A:2F:A9:C8:CE:D8:AA:C6:70:FF:EF:C7:B6:9A:1B
Certificate issuer:       /CN=A91F3260/serialNumber=5AC97C91299A2FA9C8CED8AAC670FFEFC7B69A1B
Certificate serial:       0751
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft
Manifest number:          073A
Signing time:             Thu 16 Apr 2026 21:41:53 +0000
Manifest this update:     Thu 16 Apr 2026 21:41:52 +0000
Manifest next update:     Thu 23 Apr 2026 21:41:52 +0000
Files and hashes:         1: Wsl8kSmaL6nIztiqxnD_78e2mhs.crl (hash: RO6j/IshhKRyOXpZ5F7C1iN7TkOLRvdFm8I/6wNos/Y=)
                          2: C5058712A3B911EC9709462AC4F9AE02.roa (hash: TbGbT+LPow5rz8JGgfsHT1Q0vL5d/bm4eFUkOIio6DA=)
                          3: 36F318D0890A11EE9F4C014DC4F9AE02.roa (hash: cxuC5mt/lZwqNGffF4CA11kwoRK1UHDLlLVN+mB5XQU=)
                          4: 8B75957671A811EB8698AD67C4F9AE02.roa (hash: 7rQsxODOe8S8wCpj2cJIytKVy/MVPp6W4O54/79yfuw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.crl
                          rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:41:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1873 (0x751)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3260, serialNumber=5AC97C91299A2FA9C8CED8AAC670FFEFC7B69A1B
        Validity
            Not Before: Apr 16 21:41:52 2026 GMT
            Not After : Apr 23 21:41:52 2026 GMT
        Subject: CN=69e157a1-da2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9a:5c:45:3a:29:8b:c0:c0:87:1d:a6:2d:5f:
                    25:66:df:a6:03:87:78:cd:cb:8d:3e:47:cd:88:4d:
                    79:0f:2a:7b:0e:1c:aa:00:55:74:c9:c3:f3:bf:18:
                    28:06:d2:d4:95:0b:c8:a4:9d:9b:39:75:55:2d:2e:
                    53:09:11:f2:1d:7a:e0:35:3c:9c:c1:c7:99:38:24:
                    37:03:a0:4b:16:5d:32:d4:a4:7f:ee:92:c9:e9:78:
                    cd:b8:04:8c:40:cd:27:4e:16:b6:6b:c7:9d:e5:b3:
                    08:eb:95:93:13:9f:0e:06:7b:98:67:1d:04:e9:7c:
                    17:5e:d7:14:3a:20:b7:64:de:d7:5d:f8:f3:12:a7:
                    31:4f:26:9e:be:37:e1:83:be:90:bb:5e:ac:2b:a3:
                    ad:1e:e0:ed:5d:41:a6:fe:40:84:fe:7b:7e:1e:39:
                    1c:ec:b3:80:06:80:6d:d8:cc:57:39:e3:ad:d6:cc:
                    87:37:d4:d7:a1:4b:51:52:1a:3e:d5:31:ef:9b:41:
                    b4:f4:3f:d1:35:f9:73:e9:35:02:be:f7:54:02:30:
                    db:75:67:c2:ad:38:b1:8c:a6:03:06:e2:77:13:ed:
                    ed:2e:20:b8:42:18:78:84:3a:a4:b4:6c:04:0b:ac:
                    84:7a:a9:db:3f:c8:3b:de:ba:72:c6:ea:6a:bf:f1:
                    b0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:18:12:66:59:9E:80:E0:CA:5F:F0:E4:D7:9E:0E:24:41:E4:A3:94
            X509v3 Authority Key Identifier:
                keyid:5A:C9:7C:91:29:9A:2F:A9:C8:CE:D8:AA:C6:70:FF:EF:C7:B6:9A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:64:53:4c:a1:80:19:66:8d:c6:14:91:13:0b:94:2c:66:24:
         1b:bb:8b:13:19:59:6d:07:ee:db:45:4f:ed:47:67:51:56:a4:
         cf:ee:73:2f:41:58:6e:a9:e8:34:e4:c8:ba:ba:fa:58:c0:47:
         a5:c0:fe:a9:bc:60:7d:11:22:e1:52:91:3f:3c:ac:24:f6:37:
         6f:0c:ef:70:6e:a7:c6:2a:2a:c7:76:fc:32:65:58:68:f3:7f:
         b1:08:b9:e3:95:e6:9c:ff:dc:26:af:a7:be:11:a7:66:20:cf:
         ca:6a:64:6c:8c:5c:4b:8f:0f:3f:e7:ed:26:6d:ff:2c:22:22:
         92:c1:c6:7f:c2:7d:dd:6e:67:1e:85:70:18:f8:5d:52:97:dd:
         36:1f:de:1e:5d:69:f7:1a:2a:af:c4:d2:26:3b:cc:9d:8e:9b:
         13:d4:fd:3a:e4:00:b7:c4:8a:ec:1b:54:e2:fa:1c:15:0a:8a:
         00:fc:4d:60:83:01:50:c1:1e:6b:5c:3a:3a:3a:87:1f:0b:5c:
         67:15:67:32:29:f6:bd:bf:5d:77:7b:86:df:31:63:fc:dd:6d:
         e1:ae:fc:66:09:73:3f:cd:10:7b:1f:6f:0b:0c:51:97:1d:e3:
         0a:11:5a:e5:ea:82:3d:a0:1b:fd:30:70:a7:ee:d6:0a:e1:b5:
         e0:81:d3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:21:29 2026 by rpki-client