Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.mft
File:                     WothvFOjJNeitPQVPQd0bsKjNdI.mft (raw, json)
Hash identifier:          UfldiUUupLuTKrqnveIGtegCwugIFgiDu+VFIO9LQVc=
Subject key identifier:   DA:47:F1:D3:E2:68:D2:0C:03:C0:C3:99:F4:29:9B:B1:3A:40:86:E6
Authority key identifier: 5A:8B:61:BC:53:A3:24:D7:A2:B4:F4:15:3D:07:74:6E:C2:A3:35:D2
Certificate issuer:       /CN=A9173D12/serialNumber=5A8B61BC53A324D7A2B4F4153D07746EC2A335D2
Certificate serial:       01C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.mft
Manifest number:          0199
Signing time:             Mon 21 Sep 2026 04:22:27 +0000
Manifest this update:     Mon 21 Sep 2026 04:22:26 +0000
Manifest next update:     Mon 28 Sep 2026 04:22:26 +0000
Files and hashes:         1: WothvFOjJNeitPQVPQd0bsKjNdI.crl (hash: +kQ2i38SOOAElSOi/hAeIsxan511D6GVkFkOHhg9CAU=)
                          2: 02A3523ABC5C11EF9108934FC4F9AE02.roa (hash: q8UDUK+lCCiuMwwyo6M2XjilkBBpUcYJdEaZaA3MWC4=)
                          3: AE51756A556B11EFA5FB1569C4F9AE02.roa (hash: E4V8i1GbSrj3ckCIhJ/JtVFnax8DC57jYmR1XIQG+vk=)
                          4: 014A2E90BC5C11EF9108934FC4F9AE02.roa (hash: zxfTHKrHEVsREM+8xz5AnHMO6VTB3ebrJdSrmp7BSxA=)
                          5: AEDDE1EE556B11EFA5FB1569C4F9AE02.roa (hash: xMJXOqvAMG5TD2hbvlqzUJJYRLCDemupNItYZ2pd+WI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.crl
                          rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 04:22:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 448 (0x1c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173D12, serialNumber=5A8B61BC53A324D7A2B4F4153D07746EC2A335D2
        Validity
            Not Before: Sep 21 04:22:26 2026 GMT
            Not After : Sep 28 04:22:26 2026 GMT
        Subject: CN=6ab0b102-3478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ac:b9:0b:f4:fc:02:ec:99:4a:03:b2:c3:9c:
                    96:a2:ad:99:af:0b:2d:f2:6c:d3:df:c1:50:70:0a:
                    b0:71:1f:bf:13:7d:eb:5c:5c:da:c2:02:a5:08:b5:
                    e9:46:0f:f8:ac:53:cf:cc:d9:09:c3:31:c4:83:68:
                    68:f1:e0:79:e6:81:50:94:f6:3f:45:d7:6c:5c:e3:
                    5c:9b:a4:32:3a:bb:dd:c7:1f:f4:91:28:02:aa:93:
                    dd:28:ad:10:1c:4f:36:d0:62:d2:33:96:01:f9:73:
                    ed:d5:f4:3c:05:1d:e1:7f:2e:91:e9:39:65:56:b9:
                    ea:c3:d0:58:ee:f0:1d:b9:8d:85:f2:18:2d:58:aa:
                    de:d3:92:33:14:26:9b:be:1c:a5:1c:27:c9:2e:50:
                    b4:aa:78:55:01:c7:62:70:ff:77:0f:31:70:b6:ba:
                    06:ea:e7:fb:1a:90:6e:f8:4c:45:9e:2c:eb:66:a9:
                    5d:b2:1d:48:b1:27:f4:c7:81:c6:52:36:c3:8b:fd:
                    87:57:33:38:07:47:5e:24:98:fa:b3:75:2f:14:34:
                    74:c8:90:49:75:05:f5:2e:3e:0c:0b:1d:57:1b:67:
                    91:37:a4:b4:d2:d1:e4:b3:26:0b:4f:e2:1e:03:5e:
                    d0:2c:e5:eb:bb:71:8d:d0:a0:62:a3:9f:86:a3:71:
                    17:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:47:F1:D3:E2:68:D2:0C:03:C0:C3:99:F4:29:9B:B1:3A:40:86:E6
            X509v3 Authority Key Identifier:
                keyid:5A:8B:61:BC:53:A3:24:D7:A2:B4:F4:15:3D:07:74:6E:C2:A3:35:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:2f:c2:4f:85:fb:1f:32:d7:a4:36:d3:9e:85:04:43:50:78:
         1a:fe:31:2b:17:33:87:04:95:57:a2:65:29:7b:6a:ab:87:fd:
         f6:13:67:f3:bb:2b:63:7e:fa:42:3c:a8:2e:31:7e:d5:d0:ad:
         36:e5:29:e2:7e:79:52:11:25:33:46:97:be:2d:d3:9e:f0:40:
         96:b2:78:77:c7:d8:5a:99:d6:d4:fb:af:f6:5a:a6:82:e8:7f:
         7f:7c:93:05:d0:64:1b:ad:63:a0:64:3d:c0:29:4c:20:b3:79:
         f8:c3:8b:71:4e:bd:e5:2e:f8:b9:66:8c:15:47:9b:ee:d7:5d:
         91:9a:88:49:2b:c6:d2:09:f8:52:a8:27:ee:2f:ef:c7:20:ac:
         5d:11:fe:66:30:19:43:12:8f:3b:f3:f6:5d:8b:8d:ee:6e:cf:
         f1:4e:ac:dd:76:3f:05:1a:ab:48:c6:de:75:16:b6:16:e7:c7:
         b4:59:70:4c:7c:80:e3:a4:6f:a3:7f:32:5a:63:30:c4:92:77:
         19:a4:7a:e6:70:2f:44:ba:5b:b6:c9:99:06:b6:b1:34:64:d4:
         08:58:9c:52:35:ad:20:d7:4b:23:32:ae:16:67:83:a7:4e:3c:
         af:32:36:b7:0a:48:55:c1:3f:34:77:73:1d:a8:0d:43:e7:c6:
         ed:3f:66:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:24:38 2026 by rpki-client