Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft
File:                     WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft (raw, json)
Hash identifier:          IPSwDfQqQByPSnd/pZ4xTmqKo7QxcGhwk+B6ka/B3KY=
Subject key identifier:   EE:4A:30:60:66:AE:97:C6:6B:BA:24:D6:C5:54:52:32:C6:70:A6:B3
Authority key identifier: 59:90:F4:C3:BB:23:43:6C:95:10:0B:48:48:DC:91:86:AA:49:53:19
Certificate issuer:       /CN=A913C4FD/serialNumber=5990F4C3BB23436C95100B4848DC9186AA495319
Certificate serial:       0162
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZD0w7sjQ2yVEAtISNyRhqpJUxk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft
Manifest number:          015D
Signing time:             Mon 21 Sep 2026 05:08:01 +0000
Manifest this update:     Mon 21 Sep 2026 05:08:00 +0000
Manifest next update:     Mon 28 Sep 2026 05:08:00 +0000
Files and hashes:         1: WZD0w7sjQ2yVEAtISNyRhqpJUxk.crl (hash: p00+fmGp4oLqrzNM+RUcdHd1xleTCcy12zYErkkwhss=)
                          2: 7C321BDEA55711EFB8317F6BC4F9AE02.roa (hash: 0iiaisEVoFgTOH2CCzbwqWu/DbOaNizKGC5fWfvGWtw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.crl
                          rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZD0w7sjQ2yVEAtISNyRhqpJUxk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 05:07:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 354 (0x162)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C4FD, serialNumber=5990F4C3BB23436C95100B4848DC9186AA495319
        Validity
            Not Before: Sep 21 05:08:00 2026 GMT
            Not After : Sep 28 05:08:00 2026 GMT
        Subject: CN=6ab0bbb0-5144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:01:6d:14:1e:ff:c5:bd:6a:54:78:0c:4d:ce:
                    18:86:11:75:7e:e0:7d:35:f9:89:85:60:97:05:db:
                    3e:07:90:61:ce:c5:30:f5:62:52:13:6c:87:63:e7:
                    58:10:5a:52:e5:c1:85:66:6f:91:ed:5c:ba:86:8b:
                    51:bf:62:6a:8f:1f:87:6c:82:bd:d0:e7:90:8a:f0:
                    6c:8c:29:b5:39:3a:34:8f:ec:fc:05:43:3b:f4:7e:
                    8e:5e:81:92:40:ca:96:76:7e:dd:c8:89:f5:7c:97:
                    5f:dc:29:40:68:24:9a:0f:33:64:07:53:e0:24:22:
                    62:ea:75:ea:6f:13:8b:83:c3:12:fe:6d:57:1b:2a:
                    f8:4a:c6:43:7e:40:5f:6b:57:e4:82:7e:a2:29:99:
                    ae:20:d2:27:12:e2:01:51:2c:e2:f3:b1:22:ac:1f:
                    d2:16:0f:bd:9f:a9:81:1f:d7:94:ae:7b:11:71:9a:
                    ab:30:59:8c:39:9a:e3:2e:4b:8e:f9:b1:bb:b3:83:
                    c8:13:b0:73:42:24:8a:df:6f:e7:dc:0b:bd:97:42:
                    32:84:6a:c3:2c:c0:b5:09:12:36:48:59:e1:94:14:
                    26:9d:84:4b:57:bc:00:03:75:4e:92:b6:5e:92:c7:
                    3a:29:ac:6f:d2:f8:d1:69:62:98:21:8d:8c:e9:1d:
                    ca:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:4A:30:60:66:AE:97:C6:6B:BA:24:D6:C5:54:52:32:C6:70:A6:B3
            X509v3 Authority Key Identifier:
                keyid:59:90:F4:C3:BB:23:43:6C:95:10:0B:48:48:DC:91:86:AA:49:53:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZD0w7sjQ2yVEAtISNyRhqpJUxk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:67:bc:36:67:09:e3:57:d3:94:05:20:f6:46:d5:ba:c8:f2:
         a5:1c:d6:85:aa:cf:f8:cf:62:24:56:eb:a6:fd:b0:35:69:29:
         73:b0:1b:8a:98:e1:c7:3a:21:43:7b:22:1f:23:f2:ea:b8:91:
         74:25:7d:63:bd:06:9e:cd:9d:0c:d6:15:8b:f1:cf:6b:c3:33:
         0d:1a:9c:e6:35:4b:cd:18:ff:d7:ab:aa:65:b6:bc:85:59:82:
         94:8c:c9:90:4b:34:cd:53:49:fe:03:ec:ea:12:71:0c:e3:a4:
         95:22:3e:a6:be:a1:3e:8f:c9:1d:70:7c:43:9d:6e:4e:6b:27:
         9e:4a:98:16:6f:2a:1b:18:4e:b8:dc:f4:c2:b3:46:03:7d:f4:
         5f:0c:c4:b3:93:53:f7:5b:7c:c3:41:66:18:4c:b4:14:c9:94:
         cf:c6:35:ab:f1:d3:d5:e8:4c:76:ba:cb:f3:22:a9:d8:b2:69:
         10:d9:c1:29:80:29:d6:77:4b:e3:4e:79:7f:b9:ba:3b:b0:98:
         0d:0e:01:1d:f1:57:94:09:84:9e:08:5e:8c:41:59:4f:81:f3:
         c6:8f:b8:49:3e:40:17:94:73:95:b6:e3:03:1c:71:27:8f:a9:
         50:e5:c1:56:ee:5b:d1:3a:c9:af:f0:ac:87:1d:00:cc:20:d1:
         9f:04:6f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:52:45 2026 by rpki-client