Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.mft
File:                     WCInA0DzKvjXCSJhC3CA_DQXes8.mft (raw, json)
Hash identifier:          DvM4WFmC7le68+wVLST4xjI7STQOG1iQLLx/XKqIM8o=
Subject key identifier:   2F:CE:03:6D:F4:80:FA:56:E9:20:83:46:08:CF:38:E8:A0:FD:A1:28
Authority key identifier: 58:22:27:03:40:F3:2A:F8:D7:09:22:61:0B:70:80:FC:34:17:7A:CF
Certificate issuer:       /CN=A91F742D/serialNumber=5822270340F32AF8D70922610B7080FC34177ACF
Certificate serial:       0624
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCInA0DzKvjXCSJhC3CA_DQXes8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.mft
Manifest number:          061D
Signing time:             Thu 16 Apr 2026 22:43:54 +0000
Manifest this update:     Thu 16 Apr 2026 22:43:54 +0000
Manifest next update:     Thu 23 Apr 2026 22:43:54 +0000
Files and hashes:         1: WCInA0DzKvjXCSJhC3CA_DQXes8.crl (hash: OYRRcRw2j3GMb5/1th9CqTy/gWZ6gu26dptYsHMiF/4=)
                          2: 78423A52DE2911EB9B09A334C4F9AE02.roa (hash: 9lkkl4KDzw/JbHGk8Osi7QMjwfaErWLb8bGuvlDA/zY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.crl
                          rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCInA0DzKvjXCSJhC3CA_DQXes8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:43:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1572 (0x624)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F742D, serialNumber=5822270340F32AF8D70922610B7080FC34177ACF
        Validity
            Not Before: Apr 16 22:43:54 2026 GMT
            Not After : Apr 23 22:43:54 2026 GMT
        Subject: CN=69e1662a-b052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9d:6a:54:57:f6:cc:a6:3b:2b:cd:a1:e0:69:
                    29:7f:b7:67:2b:3d:93:e0:5b:84:f1:16:3d:d9:96:
                    c3:09:bc:14:21:12:c2:c3:60:b8:9e:49:6d:0d:2e:
                    ac:a5:80:bc:a2:7f:47:c9:bd:39:e2:92:c1:db:47:
                    1b:6d:b7:f5:aa:a5:75:7c:3d:1a:57:66:22:ee:43:
                    97:bc:ab:2a:4a:21:81:1f:05:b9:6e:cd:af:09:85:
                    99:39:8a:4f:35:06:0a:41:cb:18:95:f4:ad:57:78:
                    29:16:b7:98:9b:18:21:46:d2:17:ac:6f:d3:10:88:
                    29:e7:a7:1d:be:83:5c:b5:f3:c2:5a:a4:5c:ac:6a:
                    89:65:0d:e2:14:3d:81:36:48:45:e8:a8:94:b5:80:
                    6a:3a:38:d9:f8:bd:23:23:ea:4b:52:59:42:89:75:
                    9b:00:6b:aa:3b:8c:5b:73:77:7e:e5:ed:d1:f3:4f:
                    e1:3a:62:ac:f0:1b:30:8c:bc:f5:bc:c1:83:c3:d5:
                    b7:6c:7e:e8:d1:9f:89:4b:e7:76:a7:bf:76:4c:dd:
                    70:79:c6:ad:7d:bb:25:8d:32:3d:1d:07:55:ba:7f:
                    a3:c1:ac:6e:47:e9:ba:a6:10:b6:bb:37:6e:99:56:
                    76:4a:3a:b7:2a:68:d1:01:95:30:8f:10:94:68:c3:
                    cd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:CE:03:6D:F4:80:FA:56:E9:20:83:46:08:CF:38:E8:A0:FD:A1:28
            X509v3 Authority Key Identifier:
                keyid:58:22:27:03:40:F3:2A:F8:D7:09:22:61:0B:70:80:FC:34:17:7A:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCInA0DzKvjXCSJhC3CA_DQXes8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:5c:a4:a3:bc:81:be:30:15:e8:d3:58:17:f1:0d:c2:ad:da:
         22:39:a4:5b:50:91:33:04:87:51:c4:0c:7d:17:a2:37:47:35:
         96:5e:38:db:24:28:cf:92:03:b0:bb:10:4a:5f:f8:8b:04:e7:
         bd:81:e9:69:ba:78:2b:83:81:4c:b2:87:ee:da:15:86:71:e8:
         81:39:e2:4b:4c:f5:bc:c6:8a:cf:29:41:25:34:b0:ed:2a:bc:
         b5:e4:44:83:93:fc:fa:d4:9c:74:52:ca:67:a7:88:96:d7:7d:
         44:37:f8:81:25:d0:43:d9:2d:d1:4b:51:72:3a:3b:69:62:6e:
         f1:2c:90:d3:33:bf:74:ec:89:df:21:f6:df:d3:82:a8:6f:2f:
         99:ed:d4:48:48:f2:02:68:25:3e:24:c2:84:eb:0b:25:bb:09:
         dd:33:b7:2d:01:49:27:44:79:21:69:99:35:99:31:fb:a7:01:
         21:b9:d1:84:06:a9:0c:71:56:c3:f4:d8:01:92:f3:ac:db:ff:
         c8:4c:10:cc:ba:18:70:a1:fd:31:10:22:92:8f:bb:27:02:77:
         d8:ef:b8:86:fb:2f:bd:c8:7d:b1:69:f0:26:36:0a:27:91:51:
         dd:10:5e:bb:57:0a:43:5f:5a:23:e6:5e:76:e8:c1:9d:a5:ac:
         09:ab:70:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:55:11 2026 by rpki-client