Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft
File:                     W1n8tlNB_TN4m_uvqWN98M5ATas.mft (raw, json)
Hash identifier:          05naygEZ+q3bGh7/IszuQzDpmof5OIHNuexMT/jDajY=
Subject key identifier:   4E:57:28:95:B0:16:AC:73:63:38:54:DB:7B:41:ED:64:62:E1:AE:8A
Authority key identifier: 5B:59:FC:B6:53:41:FD:33:78:9B:FB:AF:A9:63:7D:F0:CE:40:4D:AB
Certificate issuer:       /CN=A91FA5A2/serialNumber=5B59FCB65341FD33789BFBAFA9637DF0CE404DAB
Certificate serial:       01CA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1n8tlNB_TN4m_uvqWN98M5ATas.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft
Manifest number:          01C2
Signing time:             Fri 17 Apr 2026 03:39:42 +0000
Manifest this update:     Fri 17 Apr 2026 03:39:41 +0000
Manifest next update:     Fri 24 Apr 2026 03:39:41 +0000
Files and hashes:         1: W1n8tlNB_TN4m_uvqWN98M5ATas.crl (hash: r7nVD6LLzNpTS88WAGzhANl2zydss+jw/ljvyU1+CgY=)
                          2: D61299F2D8C011EFB41E1319C4F9AE02.roa (hash: 1Mnu5Kcr8+QSDHHvBWqO3NthqVgKtFSxzfASTz7l5b8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.crl
                          rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1n8tlNB_TN4m_uvqWN98M5ATas.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 458 (0x1ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA5A2, serialNumber=5B59FCB65341FD33789BFBAFA9637DF0CE404DAB
        Validity
            Not Before: Apr 17 03:39:41 2026 GMT
            Not After : Apr 24 03:39:41 2026 GMT
        Subject: CN=69e1ab7e-040c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:da:f1:c4:83:94:33:fc:d5:df:ae:88:ef:5d:
                    62:20:f7:68:42:6a:cb:42:4c:33:b5:df:aa:9c:ea:
                    a3:46:62:4d:ad:c9:49:79:d9:b3:06:55:b3:6f:81:
                    60:6e:35:f4:4d:8e:33:71:07:7c:a6:6c:98:36:9e:
                    e2:21:cf:c1:ee:4a:53:ec:db:60:c1:48:a4:77:26:
                    61:34:b7:69:37:46:00:72:e6:ab:0c:57:c6:7b:17:
                    08:f1:8f:5d:51:70:31:2f:03:96:70:c2:f6:c4:dc:
                    bf:4e:f4:3a:0b:f8:d6:d0:50:75:cc:fd:cc:f7:e7:
                    bc:54:52:1f:e2:95:f5:bc:3f:b4:2b:26:8c:a7:cc:
                    54:b3:4e:0a:2c:68:28:21:4c:17:9e:54:43:08:12:
                    0c:19:7b:e3:17:d2:9a:a1:d9:22:21:26:7e:e4:34:
                    bb:13:f3:94:cc:67:2d:de:41:fb:de:06:15:7e:2e:
                    d6:b6:4c:af:5e:eb:e9:27:61:fe:97:e7:55:9d:7f:
                    8f:a8:27:88:31:88:d5:d9:26:52:e4:18:46:7c:fa:
                    24:7e:46:cf:bd:c5:c6:06:f5:1f:b4:91:f0:35:d5:
                    70:58:a4:11:8d:5c:40:c1:61:7b:25:a7:57:f5:45:
                    ca:2e:ba:d7:6f:b6:ed:3f:80:e5:10:b8:bc:c8:df:
                    70:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:57:28:95:B0:16:AC:73:63:38:54:DB:7B:41:ED:64:62:E1:AE:8A
            X509v3 Authority Key Identifier:
                keyid:5B:59:FC:B6:53:41:FD:33:78:9B:FB:AF:A9:63:7D:F0:CE:40:4D:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1n8tlNB_TN4m_uvqWN98M5ATas.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:ab:2b:fe:8d:4f:2d:ec:6b:ec:ee:04:21:9e:c5:1d:b3:93:
         67:29:9c:97:a2:01:80:70:56:62:3e:13:af:1f:54:cd:8f:6d:
         e8:1b:38:0f:39:bd:27:5c:ef:60:09:b6:b5:fc:a9:a1:6a:d4:
         eb:e3:0f:0a:ec:bd:32:23:f9:fa:bf:fc:7f:d2:cf:b6:1f:b2:
         48:14:c8:bc:f6:fd:30:39:95:19:db:5b:e2:3d:17:5f:69:a5:
         cb:fd:e0:cb:39:cf:0a:ae:9a:8f:3e:58:93:84:88:37:56:8a:
         d2:37:80:11:39:70:ce:bf:8e:a6:62:83:08:a6:a7:92:a7:03:
         86:c8:62:ec:b8:91:4d:06:9a:8a:96:c2:15:34:29:aa:d6:ec:
         14:c3:2e:cd:8c:ed:63:85:da:66:26:ab:e2:f7:65:69:5b:52:
         31:9e:25:aa:7f:b5:57:08:88:b8:b3:5d:cc:1a:4b:6a:ab:60:
         4b:c1:b0:d5:e1:04:d9:c7:9c:6a:1d:34:3a:fe:d4:d0:d6:36:
         62:41:79:41:e9:20:d8:f6:36:26:07:49:68:38:36:d2:fb:99:
         da:38:4e:af:d8:1a:7e:09:62:97:2e:36:b6:fe:49:21:f8:c7:
         ce:2a:61:e8:d5:fa:8a:04:49:98:83:dd:d6:75:2b:32:dc:0e:
         dc:dd:75:a2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkE1QTIxMTAvBgNVBAUTKDVCNTlGQ0I2NTM0MUZEMzM3ODlCRkJBRkE5NjM3REYw
Q0U0MDREQUIwHhcNMjYwNDE3MDMzOTQxWhcNMjYwNDI0MDMzOTQxWjAYMRYwFAYD
VQQDEw02OWUxYWI3ZS0wNDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAstrxxIOUM/zV366I711iIPdoQmrLQkwztd+qnOqjRmJNrclJedmzBlWzb4Fg
bjX0TY4zcQd8pmyYNp7iIc/B7kpT7NtgwUikdyZhNLdpN0YAcuarDFfGexcI8Y9d
UXAxLwOWcML2xNy/TvQ6C/jW0FB1zP3M9+e8VFIf4pX1vD+0KyaMp8xUs04KLGgo
IUwXnlRDCBIMGXvjF9KaodkiISZ+5DS7E/OUzGct3kH73gYVfi7WtkyvXuvpJ2H+
l+dVnX+PqCeIMYjV2SZS5BhGfPokfkbPvcXGBvUftJHwNdVwWKQRjVxAwWF7JadX
9UXKLrrXb7btP4DlELi8yN9wTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE5XKJWw
FqxzYzhU23tB7WRi4a6KMB8GA1UdIwQYMBaAFFtZ/LZTQf0zeJv7r6ljffDOQE2r
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTVBMi8zRTE2NDE2ODk4
RjYxMUVFQkJGMUY0MTdDNEY5QUUwMi9XMW44dGxOQl9UTjRtX3V2cVdOOThNNUFU
YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1cxbjh0bE5CX1RONG1fdXZxV045OE01QVRhcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QTVBMi8zRTE2NDE2ODk4RjYxMUVFQkJGMUY0MTdDNEY5QUUwMi9XMW44dGxOQl9U
TjRtX3V2cVdOOThNNUFUYXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPKsr/o1PLexr7O4EIZ7FHbOTZymcl6IBgHBWYj4Trx9UzY9t6Bs4Dzm9J1zv
YAm2tfypoWrU6+MPCuy9MiP5+r/8f9LPth+ySBTIvPb9MDmVGdtb4j0XX2mly/3g
yznPCq6ajz5Yk4SIN1aK0jeAETlwzr+OpmKDCKankqcDhshi7LiRTQaaipbCFTQp
qtbsFMMuzYztY4XaZiar4vdlaVtSMZ4lqn+1VwiIuLNdzBpLaqtgS8Gw1eEE2cec
ah00Ov7U0NY2YkF5Qekg2PY2JgdJaDg20vuZ2jhOr9gafglily42tv5JIfjHziph
6NX6igRJmIPd1nUrMtwO3N11og==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:08:15 2026 by rpki-client