Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft
File:                     Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft (raw, json)
Hash identifier:          MfvYrKkUPHLpWClkYj+7oWgzaFYuS+9a/UmzGawxi0k=
Subject key identifier:   E3:CB:36:0C:A0:5F:56:E4:AE:1B:7F:73:D9:A2:FA:EC:2C:3C:C7:C0
Authority key identifier: 5A:8F:C6:D9:B9:92:32:2F:2D:7C:07:73:45:43:F7:98:97:ED:80:37
Certificate issuer:       /CN=A9153AC4/serialNumber=5A8FC6D9B992322F2D7C07734543F79897ED8037
Certificate serial:       0C53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wo_G2bmSMi8tfAdzRUP3mJftgDc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft
Manifest number:          0C47
Signing time:             Thu 16 Apr 2026 18:39:27 +0000
Manifest this update:     Thu 16 Apr 2026 18:39:26 +0000
Manifest next update:     Thu 23 Apr 2026 18:39:26 +0000
Files and hashes:         1: Wo_G2bmSMi8tfAdzRUP3mJftgDc.crl (hash: IUrfmEH0O0uFIVaoVFxTqnAQrR0MVxrTzU8JSueem7g=)
                          2: 0E50DF10261311EAAD88B67EC4F9AE02.roa (hash: OXlRXctoNSDJ6TpM3+c7wRIDQ9aRsPHJbIj87+gWXqY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.crl
                          rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wo_G2bmSMi8tfAdzRUP3mJftgDc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:39:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3155 (0xc53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153AC4, serialNumber=5A8FC6D9B992322F2D7C07734543F79897ED8037
        Validity
            Not Before: Apr 16 18:39:26 2026 GMT
            Not After : Apr 23 18:39:26 2026 GMT
        Subject: CN=69e12cdf-f5a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:41:14:98:d3:84:00:2e:d0:b6:a4:c2:4b:5e:
                    2d:0d:84:bf:33:b6:d5:7f:f4:36:dc:59:a7:d8:fd:
                    f0:ee:39:ee:9b:2c:ac:b4:ce:31:82:06:c4:d9:c5:
                    62:b4:36:03:e2:38:c7:30:0e:e6:84:4a:9c:52:84:
                    e7:04:d6:33:15:70:19:d4:00:46:28:52:e5:8c:a6:
                    d5:5b:0e:13:a3:7c:39:7e:ad:bc:1d:c8:80:82:1b:
                    00:48:09:d5:be:b0:3a:6a:ea:85:62:07:44:c2:d5:
                    78:0d:a1:54:62:bc:fa:60:2a:18:2e:73:38:28:10:
                    28:e6:db:ea:2c:f8:de:a9:88:92:ab:22:0f:ab:f2:
                    ba:cc:f9:02:2f:f5:0a:78:a4:8c:2e:4f:df:4a:5a:
                    16:0b:bd:7e:31:40:f6:50:25:a4:1f:3b:5d:20:ac:
                    2c:07:75:05:c8:dc:36:f4:26:51:c8:c3:f5:36:1a:
                    0a:f7:1e:29:62:8f:60:88:c8:13:c1:1c:aa:5e:7a:
                    51:b3:44:80:65:9c:4d:b7:44:d5:25:74:1d:8c:fe:
                    df:6d:28:5e:f0:64:7e:14:f2:cd:b4:90:8f:a3:07:
                    d9:6a:ad:02:9a:31:0e:87:61:7c:4b:8e:e8:51:06:
                    b3:01:97:31:a0:fc:06:1f:98:68:79:0b:96:17:aa:
                    3b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:CB:36:0C:A0:5F:56:E4:AE:1B:7F:73:D9:A2:FA:EC:2C:3C:C7:C0
            X509v3 Authority Key Identifier:
                keyid:5A:8F:C6:D9:B9:92:32:2F:2D:7C:07:73:45:43:F7:98:97:ED:80:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wo_G2bmSMi8tfAdzRUP3mJftgDc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:48:91:ae:26:0b:21:51:49:44:f4:0c:3a:51:6c:02:d4:96:
         a7:c5:e4:79:88:1b:d8:c9:2d:df:8a:1f:5d:45:8f:ee:2c:77:
         e7:bc:40:73:bb:cd:cc:ae:63:79:6d:51:9b:8f:77:8c:db:e5:
         b1:06:fa:15:51:1a:c3:74:54:c3:ca:02:72:60:1c:1f:7d:10:
         74:d6:22:d5:a5:3c:01:4f:fe:e2:92:15:19:e2:ab:ef:24:fd:
         f6:fe:00:46:24:3b:b7:50:02:1a:e7:71:81:80:4f:f2:ed:bc:
         d6:32:b7:6b:17:c4:9c:fb:e6:6c:b6:4a:6a:0b:17:ce:59:e3:
         f9:ea:44:84:5e:a1:b3:ee:75:3a:c9:18:49:5e:0d:3f:b0:d1:
         6e:6f:bb:28:d1:94:44:b9:b7:a2:90:08:38:8b:a0:5f:81:4f:
         75:03:76:7e:99:90:e0:4a:69:f3:d1:bc:ec:36:e2:d8:43:79:
         36:48:6f:68:48:b5:aa:54:c1:01:c2:7c:6f:cc:01:fa:c6:1e:
         c6:fc:0b:50:78:bc:d4:46:2b:87:40:b1:f7:f7:c2:e7:0d:16:
         4d:2f:f5:3b:0b:df:9c:01:ac:3c:55:e0:9f:5c:88:b6:49:60:
         6c:ff:4c:a3:91:36:49:36:91:15:5d:85:17:14:df:ff:da:9d:
         79:8a:4b:b0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDFMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTNBQzQxMTAvBgNVBAUTKDVBOEZDNkQ5Qjk5MjMyMkYyRDdDMDc3MzQ1NDNGNzk4
OTdFRDgwMzcwHhcNMjYwNDE2MTgzOTI2WhcNMjYwNDIzMTgzOTI2WjAYMRYwFAYD
VQQDEw02OWUxMmNkZi1mNWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApEEUmNOEAC7QtqTCS14tDYS/M7bVf/Q23Fmn2P3w7jnumyystM4xggbE2cVi
tDYD4jjHMA7mhEqcUoTnBNYzFXAZ1ABGKFLljKbVWw4To3w5fq28HciAghsASAnV
vrA6auqFYgdEwtV4DaFUYrz6YCoYLnM4KBAo5tvqLPjeqYiSqyIPq/K6zPkCL/UK
eKSMLk/fSloWC71+MUD2UCWkHztdIKwsB3UFyNw29CZRyMP1NhoK9x4pYo9giMgT
wRyqXnpRs0SAZZxNt0TVJXQdjP7fbShe8GR+FPLNtJCPowfZaq0CmjEOh2F8S47o
UQazAZcxoPwGH5hoeQuWF6o7EQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOPLNgyg
X1bkrht/c9mi+uwsPMfAMB8GA1UdIwQYMBaAFFqPxtm5kjIvLXwHc0VD95iX7YA3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0FDNC8zQkY0QTY5ODI2
MTAxMUVBQUQ3NDY5NzhDNEY5QUUwMi9Xb19HMmJtU01pOHRmQWR6UlVQM21KZnRn
RGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dvX0cyYm1TTWk4dGZBZHpSVVAzbUpmdGdEYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
M0FDNC8zQkY0QTY5ODI2MTAxMUVBQUQ3NDY5NzhDNEY5QUUwMi9Xb19HMmJtU01p
OHRmQWR6UlVQM21KZnRnRGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaEiRriYLIVFJRPQMOlFsAtSWp8XkeYgb2Mkt34ofXUWP7ix357xAc7vNzK5j
eW1Rm493jNvlsQb6FVEaw3RUw8oCcmAcH30QdNYi1aU8AU/+4pIVGeKr7yT99v4A
RiQ7t1ACGudxgYBP8u281jK3axfEnPvmbLZKagsXzlnj+epEhF6hs+51OskYSV4N
P7DRbm+7KNGURLm3opAIOIugX4FPdQN2fpmQ4Epp89G87Dbi2EN5NkhvaEi1qlTB
AcJ8b8wB+sYexvwLUHi81EYrh0Cx9/fC5w0WTS/1OwvfnAGsPFXgn1yItklgbP9M
o5E2STaRFV2FFxTf/9qdeYpLsA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:24:10 2026 by rpki-client