Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft
File:                     WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft (raw, json)
Hash identifier:          TiPmzm0CdNHPadfNWnrkTVA+fkTCPAKUZT3VPdADXNg=
Subject key identifier:   67:F8:B8:39:37:0C:12:8A:68:8B:19:0F:4A:FC:FC:7A:54:DD:60:EC
Authority key identifier: 58:EE:E5:2D:2A:E0:92:EC:55:86:E0:70:E6:46:2C:36:35:0F:A6:E1
Certificate issuer:       /CN=A914A75A/serialNumber=58EEE52D2AE092EC5586E070E6462C36350FA6E1
Certificate serial:       BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WO7lLSrgkuxVhuBw5kYsNjUPpuE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft
Manifest number:          BC
Signing time:             Sun 01 Mar 2026 08:11:21 +0000
Manifest this update:     Sun 01 Mar 2026 08:11:20 +0000
Manifest next update:     Sun 08 Mar 2026 08:11:20 +0000
Files and hashes:         1: WO7lLSrgkuxVhuBw5kYsNjUPpuE.crl (hash: P508ABpO8sKOsNKh5KmFcsyiG/8V7O27/mx/89BvjFM=)
                          2: D56D67B0F48711EFBB2D9D73C4F9AE02.roa (hash: 0HTbq8tBAK4fR+4sUeMKuHfNpFggIF0IOaiwHW3RNno=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.crl
                          rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WO7lLSrgkuxVhuBw5kYsNjUPpuE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:11:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 190 (0xbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A75A, serialNumber=58EEE52D2AE092EC5586E070E6462C36350FA6E1
        Validity
            Not Before: Mar  1 08:11:20 2026 GMT
            Not After : Mar  8 08:11:20 2026 GMT
        Subject: CN=69a3f4a9-dac9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fe:69:51:9c:94:28:61:d7:d7:0c:58:2c:36:
                    3e:8f:cf:84:6a:3b:a0:64:63:6b:d0:8d:b0:4c:d0:
                    91:7d:54:e0:2a:47:9b:31:52:4b:6f:cf:c9:8d:73:
                    58:40:a0:30:ab:56:cb:79:72:74:20:b2:15:65:47:
                    36:0a:05:bd:3c:13:f2:c4:92:db:d4:61:ad:f0:d4:
                    6d:5e:8e:50:a1:7f:59:e1:59:01:d7:24:77:97:5d:
                    9b:aa:0e:9f:b8:21:f9:a8:9e:00:cb:0a:6f:94:9e:
                    a7:6d:c6:40:78:a5:f8:91:6e:aa:28:c9:69:a2:3c:
                    33:0f:41:3a:35:3f:83:d2:21:c5:64:9e:51:7f:68:
                    e6:5e:09:d5:7a:72:7c:dc:81:a1:72:e9:7d:5e:9c:
                    31:c1:25:52:86:aa:95:77:34:1f:32:58:b1:af:2c:
                    46:57:a2:37:3f:3b:1e:e1:ee:09:03:11:97:a5:37:
                    b7:fb:cf:73:94:21:63:97:dc:9a:94:da:ff:5e:9f:
                    e5:23:5b:24:df:27:9f:17:f4:04:e5:90:08:5e:fc:
                    0a:4c:88:53:91:ff:68:06:20:0e:5d:6a:af:f9:9d:
                    ec:32:9c:22:b4:3e:44:81:7f:1d:57:1f:b4:6a:f5:
                    e6:a8:76:97:72:f5:70:3a:9d:1c:22:2d:53:32:b5:
                    50:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F8:B8:39:37:0C:12:8A:68:8B:19:0F:4A:FC:FC:7A:54:DD:60:EC
            X509v3 Authority Key Identifier:
                keyid:58:EE:E5:2D:2A:E0:92:EC:55:86:E0:70:E6:46:2C:36:35:0F:A6:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WO7lLSrgkuxVhuBw5kYsNjUPpuE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:dd:30:a1:be:70:d5:78:ed:7e:f5:8a:5b:45:1b:86:92:3c:
         b6:8f:51:5b:67:47:cb:da:5d:ec:77:f0:f2:28:bd:5b:68:8f:
         36:a9:71:78:aa:6b:75:38:31:bc:8f:49:99:cb:da:c5:c6:74:
         9c:95:09:3e:8a:06:ae:27:02:72:37:fe:50:8a:a4:e0:01:64:
         dd:36:f8:34:b4:40:1a:e8:a9:71:83:c1:4c:af:dc:75:df:e3:
         d1:f9:0f:92:ed:d3:f8:c6:68:08:60:b7:76:89:93:d1:59:be:
         33:9f:d9:a0:1c:3f:4a:27:8a:87:5e:37:72:9b:1d:e0:32:86:
         1e:63:8e:53:52:31:f4:88:da:2a:81:bb:10:a9:b6:0c:c2:e0:
         13:a5:92:47:8a:39:d2:3d:1c:e6:3e:c5:1b:03:0a:42:3c:f3:
         91:b4:74:c8:6f:b5:07:25:b4:0f:c6:9d:af:05:5e:12:59:78:
         40:be:8c:99:7b:f2:cc:95:a7:b5:8d:ce:a8:97:c8:c5:c3:bb:
         51:16:08:b2:8c:4c:2b:73:0d:e7:fb:07:1a:f9:e8:39:e6:d2:
         17:35:6e:9d:77:f7:96:f7:8d:89:16:d4:18:bc:ca:dd:1c:dc:
         11:2e:21:d5:ac:92:4a:f6:c4:e6:49:f4:2b:cb:ff:3f:9d:78:
         78:ee:46:99
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEE3NUExMTAvBgNVBAUTKDU4RUVFNTJEMkFFMDkyRUM1NTg2RTA3MEU2NDYyQzM2
MzUwRkE2RTEwHhcNMjYwMzAxMDgxMTIwWhcNMjYwMzA4MDgxMTIwWjAYMRYwFAYD
VQQDEw02OWEzZjRhOS1kYWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwf5pUZyUKGHX1wxYLDY+j8+EajugZGNr0I2wTNCRfVTgKkebMVJLb8/JjXNY
QKAwq1bLeXJ0ILIVZUc2CgW9PBPyxJLb1GGt8NRtXo5QoX9Z4VkB1yR3l12bqg6f
uCH5qJ4AywpvlJ6nbcZAeKX4kW6qKMlpojwzD0E6NT+D0iHFZJ5Rf2jmXgnVenJ8
3IGhcul9XpwxwSVShqqVdzQfMlixryxGV6I3Pzse4e4JAxGXpTe3+89zlCFjl9ya
lNr/Xp/lI1sk3yefF/QE5ZAIXvwKTIhTkf9oBiAOXWqv+Z3sMpwitD5EgX8dVx+0
avXmqHaXcvVwOp0cIi1TMrVQCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGf4uDk3
DBKKaIsZD0r8/HpU3WDsMB8GA1UdIwQYMBaAFFju5S0q4JLsVYbgcOZGLDY1D6bh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTc1QS8zRkFBN0M1NEY0
ODcxMUVGODQ5QTI3NzJDNEY5QUUwMi9XTzdsTFNyZ2t1eFZodUJ3NWtZc05qVVBw
dUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dPN2xMU3Jna3V4Vmh1Qnc1a1lzTmpVUHB1RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QTc1QS8zRkFBN0M1NEY0ODcxMUVGODQ5QTI3NzJDNEY5QUUwMi9XTzdsTFNyZ2t1
eFZodUJ3NWtZc05qVVBwdUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAd0wob5w1XjtfvWKW0UbhpI8to9RW2dHy9pd7Hfw8ii9W2iPNqlxeKprdTgx
vI9JmcvaxcZ0nJUJPooGricCcjf+UIqk4AFk3Tb4NLRAGuipcYPBTK/cdd/j0fkP
ku3T+MZoCGC3domT0Vm+M5/ZoBw/SieKh143cpsd4DKGHmOOU1Ix9IjaKoG7EKm2
DMLgE6WSR4o50j0c5j7FGwMKQjzzkbR0yG+1ByW0D8adrwVeEll4QL6MmXvyzJWn
tY3OqJfIxcO7URYIsoxMK3MN5/sHGvnoOebSFzVunXf3lveNiRbUGLzK3RzcES4h
1aySSvbE5kn0K8v/P514eO5GmQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:38:09 2026 by rpki-client