Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft
File:                     wzct4f6eU8GLMFFtlkxDZyLrPss.mft (raw, json)
Hash identifier:          sTiYlGfrJIAXV4WFlK7B3JnrYNEmeQ66FPM307Jg5QM=
Subject key identifier:   10:81:A6:3E:01:39:80:A3:9B:3D:83:75:C6:52:53:98:34:E2:C9:75
Authority key identifier: C3:37:2D:E1:FE:9E:53:C1:8B:30:51:6D:96:4C:43:67:22:EB:3E:CB
Certificate issuer:       /CN=A911C7CD/serialNumber=C3372DE1FE9E53C18B30516D964C436722EB3ECB
Certificate serial:       0163
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wzct4f6eU8GLMFFtlkxDZyLrPss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft
Manifest number:          015A
Signing time:             Sat 13 Jun 2026 05:04:05 +0000
Manifest this update:     Sat 13 Jun 2026 05:04:04 +0000
Manifest next update:     Sat 20 Jun 2026 05:04:04 +0000
Files and hashes:         1: wzct4f6eU8GLMFFtlkxDZyLrPss.crl (hash: Jask8KmTAAvSmoglPztYAE4DAYUH5GG5JvtmQE+sZ1U=)
                          2: 5C8F0D505ECB11EFA4D8E07CC4F9AE02.roa (hash: fz5wGX8TCKnp2pv3oEZJbnk1JDuLkYxlHREJYhGasR8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.crl
                          rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wzct4f6eU8GLMFFtlkxDZyLrPss.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 05:04:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 355 (0x163)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C7CD, serialNumber=C3372DE1FE9E53C18B30516D964C436722EB3ECB
        Validity
            Not Before: Jun 13 05:04:04 2026 GMT
            Not After : Jun 20 05:04:04 2026 GMT
        Subject: CN=6a2ce4c5-05a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7a:4a:31:0f:b1:e4:50:ca:0f:e7:79:3a:58:
                    e5:24:be:69:c6:89:5d:22:25:21:40:fe:26:20:1c:
                    67:cc:8a:44:62:a5:c2:a9:fd:8c:47:0f:85:58:b9:
                    a6:1f:d4:eb:aa:b4:5a:76:6d:70:43:61:7d:f8:54:
                    77:46:91:36:10:16:c0:17:d6:55:18:b4:81:e5:82:
                    8b:b8:46:ac:39:0b:7f:5c:c7:b1:91:d2:56:05:af:
                    12:74:2a:cc:04:39:70:10:89:aa:36:9a:5a:6a:57:
                    f4:bb:18:7a:cc:b1:0e:d3:e2:5b:12:f3:d3:40:bb:
                    bc:29:ee:fe:97:74:08:97:53:20:9a:57:a3:63:8f:
                    ec:1b:15:0e:1f:da:e9:46:2f:14:06:c5:65:c0:b3:
                    61:5a:18:11:db:c7:48:66:ea:05:96:d0:af:10:35:
                    4e:38:6e:74:54:b3:95:34:f9:61:79:b3:65:65:b6:
                    7e:06:20:f3:27:cc:70:bc:81:d9:22:a6:b8:fe:fd:
                    a9:75:ed:bf:39:fd:0a:b0:ad:00:74:8b:7c:77:55:
                    b2:8f:0b:9c:d2:69:f1:2e:45:8a:c9:92:33:b6:bb:
                    6d:94:ae:6f:65:f6:ee:69:b2:7f:f2:ec:5b:b8:0f:
                    6f:39:85:ee:c6:98:da:ef:1c:e1:9e:2e:0c:82:90:
                    ed:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:81:A6:3E:01:39:80:A3:9B:3D:83:75:C6:52:53:98:34:E2:C9:75
            X509v3 Authority Key Identifier:
                keyid:C3:37:2D:E1:FE:9E:53:C1:8B:30:51:6D:96:4C:43:67:22:EB:3E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wzct4f6eU8GLMFFtlkxDZyLrPss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:c0:a6:10:45:54:25:d8:ab:57:cc:f0:55:92:ec:d8:71:ef:
         89:12:e2:14:de:b5:e4:8c:d9:f0:cd:b6:00:da:88:41:e3:92:
         f5:0a:3b:5c:8c:1c:a3:6e:53:0c:e0:f6:7a:b5:d0:49:9f:c7:
         b0:c3:f4:27:e8:00:e9:ec:5f:fa:9a:05:44:1f:7d:47:b5:93:
         45:a5:d7:24:b0:22:ad:e3:d4:9f:bd:c1:66:f4:c7:18:d3:7a:
         b2:ce:78:fa:5d:b1:56:81:b1:cd:3c:18:4c:5e:62:56:fb:27:
         22:b6:00:b0:49:dd:28:96:bd:68:0c:53:23:3d:b0:8b:52:97:
         d5:12:c5:03:68:76:55:6b:46:e5:53:8d:8f:00:cd:d1:0d:3c:
         64:e9:c8:c0:1e:55:c1:06:ca:a0:55:bc:8f:f4:16:39:1c:79:
         db:81:b4:a5:35:b3:0d:e2:fd:83:07:60:ef:02:d5:af:70:2b:
         3a:e5:ad:c9:b5:2d:0b:17:98:d2:0e:65:1e:a5:d3:b8:c5:b0:
         96:ec:10:c0:6e:c4:f9:0b:b9:81:2b:f0:7e:48:2c:b1:eb:72:
         f1:98:db:83:9b:1e:15:3b:42:90:6c:3a:9d:ef:e0:6b:23:31:
         1f:82:a9:4b:54:57:f0:47:4e:95:ce:eb:6f:34:75:d3:95:50:
         d0:d4:71:93
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUM3Q0QxMTAvBgNVBAUTKEMzMzcyREUxRkU5RTUzQzE4QjMwNTE2RDk2NEM0MzY3
MjJFQjNFQ0IwHhcNMjYwNjEzMDUwNDA0WhcNMjYwNjIwMDUwNDA0WjAYMRYwFAYD
VQQDEw02YTJjZTRjNS0wNWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApnpKMQ+x5FDKD+d5OljlJL5pxoldIiUhQP4mIBxnzIpEYqXCqf2MRw+FWLmm
H9TrqrRadm1wQ2F9+FR3RpE2EBbAF9ZVGLSB5YKLuEasOQt/XMexkdJWBa8SdCrM
BDlwEImqNppaalf0uxh6zLEO0+JbEvPTQLu8Ke7+l3QIl1MgmlejY4/sGxUOH9rp
Ri8UBsVlwLNhWhgR28dIZuoFltCvEDVOOG50VLOVNPlhebNlZbZ+BiDzJ8xwvIHZ
Iqa4/v2pde2/Of0KsK0AdIt8d1Wyjwuc0mnxLkWKyZIztrttlK5vZfbuabJ/8uxb
uA9vOYXuxpja7xzhni4MgpDtWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBCBpj4B
OYCjmz2DdcZSU5g04sl1MB8GA1UdIwQYMBaAFMM3LeH+nlPBizBRbZZMQ2ci6z7L
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzdDRC9ENjRBMUZCNDVF
QTIxMUVGQjE2NzcyNDNDNEY5QUUwMi93emN0NGY2ZVU4R0xNRkZ0bGt4RFp5THJQ
c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3d6Y3Q0ZjZlVThHTE1GRnRsa3hEWnlMclBzcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QzdDRC9ENjRBMUZCNDVFQTIxMUVGQjE2NzcyNDNDNEY5QUUwMi93emN0NGY2ZVU4
R0xNRkZ0bGt4RFp5THJQc3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAxcCmEEVUJdirV8zwVZLs2HHviRLiFN615IzZ8M22ANqIQeOS9Qo7XIwco25T
DOD2erXQSZ/HsMP0J+gA6exf+poFRB99R7WTRaXXJLAirePUn73BZvTHGNN6ss54
+l2xVoGxzTwYTF5iVvsnIrYAsEndKJa9aAxTIz2wi1KX1RLFA2h2VWtG5VONjwDN
0Q08ZOnIwB5VwQbKoFW8j/QWORx524G0pTWzDeL9gwdg7wLVr3ArOuWtybUtCxeY
0g5lHqXTuMWwluwQwG7E+Qu5gSvwfkgssety8Zjbg5seFTtCkGw6ne/gayMxH4Kp
S1RX8EdOlc7rbzR105VQ0NRxkw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:32:48 2026 by rpki-client