Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft
File:                     wbdm2intKT3fpczrCuQpdFRE1hU.mft (raw, json)
Hash identifier:          EsLa1lGkFKUbQZu3+0Y3BL247TzcyVjwpA4dvrNNv/E=
Subject key identifier:   23:B2:98:BE:B7:DB:01:F7:2F:F6:BF:0D:D4:BD:6F:72:F9:9C:4E:70
Authority key identifier: C1:B7:66:DA:29:ED:29:3D:DF:A5:CC:EB:0A:E4:29:74:54:44:D6:15
Certificate issuer:       /CN=A912F281/serialNumber=C1B766DA29ED293DDFA5CCEB0AE429745444D615
Certificate serial:       0149
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft
Manifest number:          0145
Signing time:             Sat 19 Sep 2026 05:26:51 +0000
Manifest this update:     Sat 19 Sep 2026 05:26:51 +0000
Manifest next update:     Sat 26 Sep 2026 05:26:51 +0000
Files and hashes:         1: wbdm2intKT3fpczrCuQpdFRE1hU.crl (hash: AdSEnZCy2j0KHeuTpZmOr/SE1SttE6+mTBapNVYf0lM=)
                          2: 8A69BFBAC67011EFAE929D0DC4F9AE02.roa (hash: 8sa62+T7pJg8Z/Ix+b37ZqcmW0JmMLxyohi49hkjzWc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.crl
                          rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 329 (0x149)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F281, serialNumber=C1B766DA29ED293DDFA5CCEB0AE429745444D615
        Validity
            Not Before: Sep 19 05:26:51 2026 GMT
            Not After : Sep 26 05:26:51 2026 GMT
        Subject: CN=6aae1d1b-b2e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:03:74:e0:5e:9b:37:b6:b3:e9:f8:78:15:d4:
                    a6:e1:f9:1a:91:53:9a:6a:ac:00:f0:80:85:28:d1:
                    ab:fb:3f:15:49:38:03:32:13:cf:09:2d:ae:c5:8c:
                    e3:56:bd:86:2f:72:7e:a4:d4:0a:85:37:20:2f:a0:
                    99:a9:38:e5:bf:8b:01:bb:3b:e1:29:77:8a:ca:a9:
                    c9:2a:93:95:11:79:a8:81:26:cf:ff:55:5b:73:d7:
                    bd:a3:e7:cb:56:cb:ac:66:49:d4:f1:99:e5:d2:cb:
                    04:c3:7c:60:90:a8:88:5f:0f:6e:9a:e1:d1:4f:d7:
                    5f:d7:b8:dc:a9:ee:1d:6b:2b:7f:1e:f2:35:ee:ca:
                    05:35:be:25:c4:8e:90:7b:dc:14:09:a9:53:b7:23:
                    ff:83:38:e5:fa:85:b3:54:b3:08:d4:9a:c0:07:fd:
                    2a:a2:f5:a4:a6:69:43:d9:f7:e0:98:67:38:eb:c2:
                    ee:81:f6:c3:9f:fc:8b:6a:c9:9b:94:ba:7c:3b:f0:
                    73:a5:f0:f0:39:b8:ad:d9:e9:04:86:18:b0:ee:a2:
                    e3:27:b9:cc:d7:8c:9c:cb:48:a0:2f:7e:74:55:32:
                    27:6c:1d:74:d0:e9:3b:97:c9:9a:c6:d5:a2:a6:13:
                    c5:38:7d:9e:e4:03:9a:10:ba:d4:5d:8b:11:e0:f9:
                    63:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:B2:98:BE:B7:DB:01:F7:2F:F6:BF:0D:D4:BD:6F:72:F9:9C:4E:70
            X509v3 Authority Key Identifier:
                keyid:C1:B7:66:DA:29:ED:29:3D:DF:A5:CC:EB:0A:E4:29:74:54:44:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:68:d0:6e:14:f2:f9:be:53:72:87:23:f1:da:cd:88:ce:fc:
         1c:6f:c4:5e:45:a5:3b:75:ca:ec:8c:b8:c1:99:46:5d:0b:c1:
         46:25:fd:d9:9e:47:a5:21:61:8c:48:9c:ed:58:ce:ad:b5:5e:
         d1:29:51:fa:d9:ef:fc:84:1b:12:18:c3:f5:f5:d0:46:7e:b6:
         a3:dd:8d:a6:d7:cb:9a:1d:7f:07:e0:00:10:15:88:cf:6c:04:
         ed:35:0e:a4:40:b8:4a:5e:f3:06:ce:62:2f:a3:6e:a7:d9:2a:
         be:c4:df:cb:8c:05:f9:74:35:e9:18:43:bf:1a:b2:b9:72:72:
         b6:dd:23:83:7b:b6:f9:f6:77:da:68:96:79:8a:e1:4d:78:01:
         5a:bb:3e:1a:35:00:19:f7:1d:85:15:9d:9d:c3:b8:16:dc:0a:
         de:04:fd:ba:ba:a1:ff:2e:3b:c5:73:6a:3a:da:d3:d5:bd:10:
         63:13:e7:08:3d:99:c5:1c:fe:94:4c:67:02:35:13:a5:6e:29:
         fb:07:80:89:0d:e3:f7:af:c6:a1:a4:d9:c6:95:9d:9d:c7:a7:
         bf:a5:11:0c:3a:30:98:2b:d0:8f:99:2c:63:7f:55:af:32:fb:
         78:62:5c:c8:28:20:4a:11:18:37:75:57:5e:2e:be:fc:c0:bc:
         db:72:0b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:15:38 2026 by rpki-client