Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft
File:                     Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft (raw, json)
Hash identifier:          2dvexLPQzzvZlgkcdnotdT8UF9BH4xYfp3i+RYUZLNU=
Subject key identifier:   94:69:CE:6E:72:EB:D3:95:31:7C:13:AB:3A:90:1E:DC:D8:34:40:96
Authority key identifier: 5A:8F:C6:D9:B9:92:32:2F:2D:7C:07:73:45:43:F7:98:97:ED:80:37
Certificate issuer:       /CN=A9153AC4/serialNumber=5A8FC6D9B992322F2D7C07734543F79897ED8037
Certificate serial:       0C70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wo_G2bmSMi8tfAdzRUP3mJftgDc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft
Manifest number:          0C64
Signing time:             Fri 12 Jun 2026 18:42:32 +0000
Manifest this update:     Fri 12 Jun 2026 18:42:32 +0000
Manifest next update:     Fri 19 Jun 2026 18:42:32 +0000
Files and hashes:         1: Wo_G2bmSMi8tfAdzRUP3mJftgDc.crl (hash: CjYq0qJdHgA/v/BDKsCHCb5mzPy4BBUhqiMY4xLwUxY=)
                          2: 0E50DF10261311EAAD88B67EC4F9AE02.roa (hash: OXlRXctoNSDJ6TpM3+c7wRIDQ9aRsPHJbIj87+gWXqY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.crl
                          rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wo_G2bmSMi8tfAdzRUP3mJftgDc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 18:42:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3184 (0xc70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153AC4, serialNumber=5A8FC6D9B992322F2D7C07734543F79897ED8037
        Validity
            Not Before: Jun 12 18:42:32 2026 GMT
            Not After : Jun 19 18:42:32 2026 GMT
        Subject: CN=6a2c5318-c996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:6f:e9:4a:7c:cf:ff:a8:0e:78:8e:59:48:ac:
                    42:18:fc:9e:e3:6a:84:bd:aa:75:cc:5b:14:a2:e3:
                    d7:82:22:41:d8:6d:23:7e:8a:91:99:13:c9:42:65:
                    74:a8:23:be:54:07:0e:a3:9b:8a:0b:46:80:b9:89:
                    bb:4a:3c:1e:97:d8:72:c1:a9:95:92:1a:08:f5:fb:
                    cf:7f:aa:5e:cf:2a:00:44:eb:29:e7:8e:7a:14:b7:
                    cd:9d:31:54:73:82:d5:55:05:cc:6c:37:94:ad:80:
                    7c:1e:87:c9:09:57:b8:23:be:42:d4:65:12:98:03:
                    36:33:a2:7f:03:3f:66:2d:e1:7e:7c:74:2a:15:e0:
                    bb:a0:ef:75:99:67:51:c2:0b:a8:85:36:23:67:54:
                    ed:f5:17:d0:f3:c2:37:ec:26:ca:18:6b:af:25:f9:
                    5b:8d:80:f0:82:95:cc:8b:3e:5f:f7:4e:05:af:77:
                    ca:82:f7:03:50:da:5e:ed:23:e6:95:24:50:1a:87:
                    f0:58:56:09:ee:31:a4:cc:84:a0:92:80:a8:e5:6d:
                    2f:98:18:f5:86:fa:45:43:8f:1b:21:9d:33:1c:eb:
                    cf:94:91:9f:7b:fe:79:c8:eb:de:44:12:b5:9d:89:
                    75:7f:c6:e3:42:73:0f:b4:7f:84:84:af:f4:28:9a:
                    38:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:69:CE:6E:72:EB:D3:95:31:7C:13:AB:3A:90:1E:DC:D8:34:40:96
            X509v3 Authority Key Identifier:
                keyid:5A:8F:C6:D9:B9:92:32:2F:2D:7C:07:73:45:43:F7:98:97:ED:80:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wo_G2bmSMi8tfAdzRUP3mJftgDc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:c3:1e:09:ee:90:2f:00:01:9c:a0:ff:66:54:b8:75:b9:f8:
         03:9a:4b:60:8a:af:4c:0c:0a:f4:51:55:37:ea:c4:5a:f5:35:
         47:a1:98:4e:32:2b:c6:cd:56:1a:94:1d:30:f9:61:70:94:68:
         6b:44:fc:b0:24:78:95:10:39:5c:4e:9d:19:f0:b6:00:e3:50:
         54:ed:c9:e9:0e:e2:fd:27:6c:0f:6c:82:23:54:fa:10:d4:58:
         31:a1:61:b4:ac:b8:07:8c:65:ba:ae:48:6a:a6:6e:e4:13:a5:
         47:a8:29:7a:3c:89:c9:ba:37:7f:b1:d6:9d:ff:19:41:4b:25:
         df:45:56:8c:0c:0f:df:88:d3:c4:43:81:b4:7d:02:d2:5b:bb:
         54:7c:36:bb:01:5b:16:f7:86:d4:6c:6e:0b:84:41:66:d9:00:
         b2:f3:65:59:75:68:66:aa:3b:d3:89:2e:2a:3c:ec:12:65:72:
         4a:96:f1:23:f1:08:1a:f7:30:07:c6:4e:c2:f1:35:f6:34:74:
         6d:91:6a:2c:a4:9b:27:75:5f:02:e8:c8:9d:26:8b:95:39:3b:
         90:c5:9e:97:4f:ac:2e:07:a7:d3:0f:0b:a9:a2:90:09:5a:a0:
         43:4f:70:21:6a:3c:18:f1:f0:94:f8:6e:9c:0d:67:92:c0:4f:
         13:3f:98:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:32:58 2026 by rpki-client