Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft
File:                     WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft (raw, json)
Hash identifier:          zAyIg2oNBSo3nMRjPkPlnD8lH60ZJv+7YbKifHe/7MA=
Subject key identifier:   48:5A:5C:ED:4D:80:4B:3C:3F:49:0C:30:18:CA:8B:79:65:E7:CB:66
Authority key identifier: 59:90:F4:C3:BB:23:43:6C:95:10:0B:48:48:DC:91:86:AA:49:53:19
Certificate issuer:       /CN=A913C4FD/serialNumber=5990F4C3BB23436C95100B4848DC9186AA495319
Certificate serial:       012F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZD0w7sjQ2yVEAtISNyRhqpJUxk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft
Manifest number:          012A
Signing time:             Sat 13 Jun 2026 05:40:54 +0000
Manifest this update:     Sat 13 Jun 2026 05:40:54 +0000
Manifest next update:     Sat 20 Jun 2026 05:40:54 +0000
Files and hashes:         1: WZD0w7sjQ2yVEAtISNyRhqpJUxk.crl (hash: u2CFV51l0BZPsU7qgCP43KQ/PPfSmquANmTUg+pnoVI=)
                          2: 7C321BDEA55711EFB8317F6BC4F9AE02.roa (hash: 0iiaisEVoFgTOH2CCzbwqWu/DbOaNizKGC5fWfvGWtw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.crl
                          rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZD0w7sjQ2yVEAtISNyRhqpJUxk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 303 (0x12f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C4FD, serialNumber=5990F4C3BB23436C95100B4848DC9186AA495319
        Validity
            Not Before: Jun 13 05:40:54 2026 GMT
            Not After : Jun 20 05:40:54 2026 GMT
        Subject: CN=6a2ced66-d328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:30:13:13:50:c2:b1:16:a4:57:99:cd:3f:83:
                    d9:73:4e:71:60:dd:d6:33:20:f4:e4:f1:f0:5a:f7:
                    64:19:c1:f4:2c:8b:4e:af:8c:f8:ec:6b:7e:af:cc:
                    7b:63:80:a9:54:32:c3:78:4f:73:a5:21:e9:ed:90:
                    ad:d5:e1:68:ec:9a:df:17:24:d9:2f:f7:07:6a:2b:
                    23:60:43:e8:93:8f:23:1c:e3:61:b8:c4:50:6a:de:
                    3f:75:87:89:58:84:3d:6c:58:2b:22:b0:4b:4d:9c:
                    e1:0e:69:be:8f:0e:ba:8f:31:33:97:7e:3b:3b:15:
                    93:b2:05:2f:16:67:91:26:5c:83:93:ed:15:a1:f2:
                    bb:66:e4:8f:db:23:52:83:6c:52:1d:74:38:65:6e:
                    2f:c5:c1:de:3b:c3:89:4d:2d:3a:fc:e5:f9:2f:2d:
                    5a:27:0c:31:ce:38:86:d1:4c:34:71:e7:23:65:6f:
                    18:f6:da:13:68:17:a8:a3:5c:8c:f2:32:30:c6:b4:
                    6f:28:ac:ae:15:15:f9:9e:cc:c0:8e:20:83:57:e0:
                    d9:cc:f9:9f:70:7f:33:62:73:00:4a:2a:4a:0f:f6:
                    e4:6b:49:30:2f:0b:d4:e1:f4:cb:2c:27:cc:d0:55:
                    52:67:56:30:11:fd:ca:34:6e:d1:36:96:5a:41:b7:
                    35:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:5A:5C:ED:4D:80:4B:3C:3F:49:0C:30:18:CA:8B:79:65:E7:CB:66
            X509v3 Authority Key Identifier:
                keyid:59:90:F4:C3:BB:23:43:6C:95:10:0B:48:48:DC:91:86:AA:49:53:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZD0w7sjQ2yVEAtISNyRhqpJUxk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:8c:6f:74:9d:80:98:a5:0c:3b:04:44:a2:34:28:12:50:ed:
         c7:70:dd:b8:b1:7d:50:e4:8b:c7:1e:d3:2c:8b:0b:d0:be:60:
         60:7d:b2:63:3b:5c:0b:c8:96:1b:b9:c3:b4:84:49:36:64:04:
         cb:47:77:03:c3:f5:82:88:9b:98:0c:ba:88:b9:06:4b:54:ba:
         c1:3b:c4:e4:80:01:fc:17:23:13:7f:c8:89:0d:5e:5c:83:70:
         c2:df:bd:9f:67:48:bc:7f:51:05:22:83:be:b1:b4:71:5a:dd:
         44:0c:97:89:f2:8c:06:8e:dc:e5:63:ed:45:ff:a1:c2:28:50:
         fa:7e:41:78:2a:3a:84:12:97:bd:36:98:3f:11:5d:aa:6a:44:
         a6:93:66:a8:8e:4a:5f:57:df:d8:d6:4b:fa:12:a0:ac:8f:b1:
         b0:1c:7b:53:d1:f7:bf:76:60:3c:e2:a6:ab:36:db:2a:8b:94:
         80:ba:ab:83:18:96:53:2c:b7:b8:5a:5f:2d:ca:90:40:cf:1e:
         c7:8d:68:c9:aa:ff:5c:d8:58:59:97:d6:8e:56:c1:b5:e5:28:
         f8:5d:92:87:75:6a:fa:0d:69:56:ed:13:3a:a3:d0:4d:f4:e1:
         33:ba:3c:b9:05:66:a5:c3:92:a7:a5:cb:b2:93:4c:58:fd:8d:
         b5:f9:0d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:02:14 2026 by rpki-client