Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft
File:                     WF3cT9n54xQAXzcZj9HiLmgknes.mft (raw, json)
Hash identifier:          GTWnmrVPQ8ZUCpdHk/FIQ4J2QTIltVhxA0QLpYnJLHw=
Subject key identifier:   A8:35:74:5B:91:25:B4:2D:BC:A3:2A:9F:3B:E7:F0:10:57:DC:78:5D
Authority key identifier: 58:5D:DC:4F:D9:F9:E3:14:00:5F:37:19:8F:D1:E2:2E:68:24:9D:EB
Certificate issuer:       /CN=A912871A/serialNumber=585DDC4FD9F9E314005F37198FD1E22E68249DEB
Certificate serial:       0523
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WF3cT9n54xQAXzcZj9HiLmgknes.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft
Manifest number:          051C
Signing time:             Fri 12 Jun 2026 23:37:45 +0000
Manifest this update:     Fri 12 Jun 2026 23:37:44 +0000
Manifest next update:     Fri 19 Jun 2026 23:37:44 +0000
Files and hashes:         1: WF3cT9n54xQAXzcZj9HiLmgknes.crl (hash: 1ma/dFx/cTAlI3k3gjvzt7YYj27Itb9ieTz0Omq3rsY=)
                          2: 5431D022524211ECA52D990FC4F9AE02.roa (hash: OxBZXjM5WU3mTzBTkJpk2hM02aP7JRhZY0bot56cYO4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.crl
                          rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WF3cT9n54xQAXzcZj9HiLmgknes.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 23:37:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1315 (0x523)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912871A, serialNumber=585DDC4FD9F9E314005F37198FD1E22E68249DEB
        Validity
            Not Before: Jun 12 23:37:44 2026 GMT
            Not After : Jun 19 23:37:44 2026 GMT
        Subject: CN=6a2c9849-c593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f4:53:55:96:86:84:49:dc:e4:c6:5b:bf:c7:
                    9f:f6:c9:be:76:d9:26:d3:b9:e5:f4:e4:e4:e1:4a:
                    94:f7:e0:d7:2c:30:c0:f2:56:18:29:4d:33:bc:28:
                    54:f3:2c:d1:0b:f3:f3:b8:b6:ef:10:54:3b:1c:8e:
                    6d:fb:50:ce:8f:56:2a:8f:89:81:5c:8d:03:9c:65:
                    d7:4c:75:e9:60:bd:80:79:50:58:82:91:ab:a3:60:
                    51:82:55:27:5d:f1:b1:37:b0:7f:49:4e:01:4b:47:
                    50:09:48:b8:f8:96:a9:89:9b:ee:56:6d:17:53:bc:
                    a4:bc:8e:c8:15:ad:50:c6:d8:6a:90:0f:00:46:83:
                    d5:62:c5:63:86:69:12:81:a5:63:26:61:61:8b:cb:
                    d9:17:ff:5c:b9:94:56:8d:28:78:82:93:64:55:1e:
                    54:3e:b9:43:b2:4a:3e:9d:00:5c:4e:36:0a:8d:01:
                    8e:78:8e:53:70:78:21:d7:45:62:d4:ce:95:88:8a:
                    0c:29:b3:b9:c0:8f:1a:e6:87:8e:9b:51:a6:68:e6:
                    e4:07:80:ed:b2:21:c8:c2:df:f8:5b:0d:a9:79:40:
                    b6:d7:61:45:92:7f:51:c8:19:83:28:fb:24:ce:8f:
                    47:87:e1:83:77:01:ea:dd:f4:ed:d6:87:7a:36:8a:
                    78:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:35:74:5B:91:25:B4:2D:BC:A3:2A:9F:3B:E7:F0:10:57:DC:78:5D
            X509v3 Authority Key Identifier:
                keyid:58:5D:DC:4F:D9:F9:E3:14:00:5F:37:19:8F:D1:E2:2E:68:24:9D:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WF3cT9n54xQAXzcZj9HiLmgknes.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:6e:14:c3:b6:07:29:78:6d:7b:48:e7:ee:33:1d:77:08:ce:
         65:18:a3:47:b3:c8:eb:a8:cc:c9:f2:ab:5e:33:fc:bb:d0:88:
         62:4d:34:5a:5d:f3:48:83:7b:8b:59:6e:fe:c9:33:cf:9d:eb:
         85:a4:f1:cc:64:1a:75:73:bb:ac:8b:70:f6:3f:ae:27:c5:61:
         83:c4:bc:76:5f:94:11:f9:ae:fc:d9:9c:7a:fe:85:f5:f1:84:
         8f:55:7f:11:be:14:ca:81:54:5c:9e:35:86:56:bd:79:46:ab:
         e8:84:55:8a:8f:4a:97:8e:e7:3e:50:1f:d0:31:7d:9e:d6:a6:
         2d:43:ef:37:b8:e2:10:9b:3b:84:6b:13:1b:ec:28:40:69:cf:
         88:e7:45:4e:f7:aa:0f:45:2d:79:83:67:5f:a1:33:53:b1:95:
         8e:05:d0:7f:f9:a3:09:79:c8:f0:4b:f4:8a:af:c8:25:da:de:
         f6:71:fa:57:cf:9e:a3:e8:5b:21:32:8b:60:29:c0:77:a3:62:
         30:51:35:c6:a3:96:c9:ce:39:51:f1:79:7b:f0:a1:55:ba:54:
         de:ce:46:1a:5a:4c:f8:50:c9:2b:e9:ad:39:10:96:65:f0:76:
         db:4a:19:23:b7:d7:0e:73:bf:74:d0:a0:72:71:be:cb:d2:df:
         f0:7d:84:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:54:35 2026 by rpki-client