Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft
File:                     wbdm2intKT3fpczrCuQpdFRE1hU.mft (raw, json)
Hash identifier:          w/rbY2ImchQY8cI0acVH+4UVv+A/pB3biABQI88g9cU=
Subject key identifier:   E0:5E:28:37:CE:A2:A4:95:23:AF:5A:B3:CA:44:6D:74:2B:65:23:06
Authority key identifier: C1:B7:66:DA:29:ED:29:3D:DF:A5:CC:EB:0A:E4:29:74:54:44:D6:15
Certificate issuer:       /CN=A912F281/serialNumber=C1B766DA29ED293DDFA5CCEB0AE429745444D615
Certificate serial:       012D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft
Manifest number:          0129
Signing time:             Mon 27 Jul 2026 07:39:20 +0000
Manifest this update:     Mon 27 Jul 2026 07:39:19 +0000
Manifest next update:     Mon 03 Aug 2026 07:39:19 +0000
Files and hashes:         1: wbdm2intKT3fpczrCuQpdFRE1hU.crl (hash: OsbG4SVW1ChoNdiWlDM6clIkweXf3YABaA+Nvb07GTo=)
                          2: 8A69BFBAC67011EFAE929D0DC4F9AE02.roa (hash: 8sa62+T7pJg8Z/Ix+b37ZqcmW0JmMLxyohi49hkjzWc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.crl
                          rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 07:39:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 301 (0x12d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F281, serialNumber=C1B766DA29ED293DDFA5CCEB0AE429745444D615
        Validity
            Not Before: Jul 27 07:39:19 2026 GMT
            Not After : Aug  3 07:39:19 2026 GMT
        Subject: CN=6a670b28-ad6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a5:e3:a7:5d:bb:32:55:0a:e7:16:fe:b2:43:
                    c5:af:49:4b:1d:ad:6d:c6:44:59:80:95:10:57:97:
                    88:ff:13:65:66:05:95:3f:a6:47:95:d2:df:49:5f:
                    be:65:83:3c:a5:80:5f:fa:db:64:b0:f4:75:6d:c9:
                    cb:af:c4:a8:f6:ac:2f:53:e7:15:a1:ef:84:54:3d:
                    c7:1b:14:02:64:02:ef:1c:93:f7:8e:f8:c0:73:26:
                    be:a7:3a:aa:3a:e8:05:5e:d3:15:c0:db:34:2f:01:
                    5c:db:8f:a5:43:04:25:96:db:b7:16:53:7e:84:f2:
                    ad:80:64:b7:39:3b:0a:8f:d1:46:74:24:21:7c:d3:
                    ef:c7:0e:aa:20:f5:5b:36:6b:ad:fd:d2:53:92:8a:
                    31:b6:f6:dd:27:f9:2e:4e:a5:94:49:0d:0d:81:97:
                    c6:dc:82:b1:6b:e7:dd:87:0e:5a:42:a3:59:2d:08:
                    bc:e7:33:6e:60:d1:d2:d5:71:ce:ee:a7:62:b6:97:
                    14:1d:c6:af:72:84:7b:fe:3a:3c:92:6f:61:9a:d7:
                    40:d6:4d:a2:20:32:4f:4d:85:e2:6d:9c:4a:b3:77:
                    23:5e:95:1a:56:58:1b:e3:8f:31:30:6b:37:73:4f:
                    2c:62:df:6c:c7:7b:da:c2:63:d6:3e:61:18:00:19:
                    c7:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:5E:28:37:CE:A2:A4:95:23:AF:5A:B3:CA:44:6D:74:2B:65:23:06
            X509v3 Authority Key Identifier:
                keyid:C1:B7:66:DA:29:ED:29:3D:DF:A5:CC:EB:0A:E4:29:74:54:44:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:39:9b:e3:43:32:b4:60:4f:dd:00:bb:c4:84:f1:19:df:48:
         ae:a6:20:bf:5e:bb:3c:b7:bf:15:8b:42:d6:f7:3a:a2:31:ed:
         ff:25:44:ac:a2:2d:98:6e:33:ed:a1:dc:a5:77:63:90:8f:f2:
         5d:d6:ec:49:c3:9d:26:63:a9:c4:0d:43:19:ac:60:53:98:09:
         78:eb:f5:ef:98:51:bd:4e:71:90:48:ec:99:fb:85:b0:f7:0d:
         8f:e2:3f:c7:05:c2:9b:3c:f7:20:ba:c1:da:26:87:61:60:2c:
         e5:18:40:ee:18:98:52:f7:89:c1:fd:b2:3c:d6:06:c0:d7:85:
         f3:57:bd:4b:3f:f5:3e:1f:07:79:c8:e8:78:82:c6:eb:0a:52:
         66:a5:06:5e:bb:35:e6:74:38:48:c0:60:7e:22:4c:66:82:21:
         9a:78:ab:30:0a:34:fd:16:ae:bf:cc:17:ed:f1:69:f3:95:46:
         d6:4d:39:26:3c:ba:36:d1:78:fb:18:fe:d1:ca:42:3a:bd:1d:
         c1:b3:59:e4:5b:05:ff:83:ab:5c:57:af:69:e9:9c:ad:33:3e:
         f8:34:77:cf:8f:09:2e:36:ea:75:68:de:00:29:91:3e:fb:0e:
         76:88:83:31:67:d8:25:e1:b5:a0:b7:3b:de:fd:62:5b:a0:05:
         78:2f:ce:07
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkYyODExMTAvBgNVBAUTKEMxQjc2NkRBMjlFRDI5M0RERkE1Q0NFQjBBRTQyOTc0
NTQ0NEQ2MTUwHhcNMjYwNzI3MDczOTE5WhcNMjYwODAzMDczOTE5WjAYMRYwFAYD
VQQDEw02YTY3MGIyOC1hZDZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA26Xjp127MlUK5xb+skPFr0lLHa1txkRZgJUQV5eI/xNlZgWVP6ZHldLfSV++
ZYM8pYBf+ttksPR1bcnLr8So9qwvU+cVoe+EVD3HGxQCZALvHJP3jvjAcya+pzqq
OugFXtMVwNs0LwFc24+lQwQlltu3FlN+hPKtgGS3OTsKj9FGdCQhfNPvxw6qIPVb
Nmut/dJTkooxtvbdJ/kuTqWUSQ0NgZfG3IKxa+fdhw5aQqNZLQi85zNuYNHS1XHO
7qditpcUHcavcoR7/jo8km9hmtdA1k2iIDJPTYXibZxKs3cjXpUaVlgb448xMGs3
c08sYt9sx3vawmPWPmEYABnHRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOBeKDfO
oqSVI69as8pEbXQrZSMGMB8GA1UdIwQYMBaAFMG3Ztop7Sk936XM6wrkKXRURNYV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjI4MS8xQUY3REY2QUM2
NkUxMUVGQTc4N0Y4NjVDNEY5QUUwMi93YmRtMmludEtUM2ZwY3pyQ3VRcGRGUkUx
aFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3diZG0yaW50S1QzZnBjenJDdVFwZEZSRTFoVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RjI4MS8xQUY3REY2QUM2NkUxMUVGQTc4N0Y4NjVDNEY5QUUwMi93YmRtMmludEtU
M2ZwY3pyQ3VRcGRGUkUxaFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYDmb40MytGBP3QC7xITxGd9IrqYgv167PLe/FYtC1vc6ojHt/yVErKItmG4z
7aHcpXdjkI/yXdbsScOdJmOpxA1DGaxgU5gJeOv175hRvU5xkEjsmfuFsPcNj+I/
xwXCmzz3ILrB2iaHYWAs5RhA7hiYUveJwf2yPNYGwNeF81e9Sz/1Ph8HecjoeILG
6wpSZqUGXrs15nQ4SMBgfiJMZoIhmnirMAo0/Rauv8wX7fFp85VG1k05Jjy6NtF4
+xj+0cpCOr0dwbNZ5FsF/4OrXFevaemcrTM++DR3z48JLjbqdWjeACmRPvsOdoiD
MWfYJeG1oLc73v1iW6AFeC/OBw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:31:06 2026 by rpki-client