Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft
File:                     WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft (raw, json)
Hash identifier:          nUEoISbXpWC/CyrLvOYgFdUFQdMDjS84uky0v5R1D9k=
Subject key identifier:   C2:31:D5:06:75:F8:78:BD:7A:05:B0:E2:A2:4B:90:AA:47:2F:FD:93
Authority key identifier: 5B:3B:8B:FB:2C:9F:2C:E8:83:51:5F:A3:DC:F9:D1:C0:CF:AD:07:A4
Certificate issuer:       /CN=A9188D0C/serialNumber=5B3B8BFB2C9F2CE883515FA3DCF9D1C0CFAD07A4
Certificate serial:       03AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft
Manifest number:          03A8
Signing time:             Sat 13 Jun 2026 00:43:22 +0000
Manifest this update:     Sat 13 Jun 2026 00:43:21 +0000
Manifest next update:     Sat 20 Jun 2026 00:43:21 +0000
Files and hashes:         1: WzuL-yyfLOiDUV-j3PnRwM-tB6Q.crl (hash: 2qHAFr8xrDZ2tM7cGT/8nM5Q1hDx2HAlUAMILUyjCB8=)
                          2: 42CD71AEE33511EC9EDB371BC4F9AE02.roa (hash: akLFFGOMj+dAHfljUl6hKPCtbjq9Zn0f4/FQ8M9sWBI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.crl
                          rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 00:43:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 943 (0x3af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188D0C, serialNumber=5B3B8BFB2C9F2CE883515FA3DCF9D1C0CFAD07A4
        Validity
            Not Before: Jun 13 00:43:21 2026 GMT
            Not After : Jun 20 00:43:21 2026 GMT
        Subject: CN=6a2ca7a9-6589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d3:16:4d:ed:44:0d:d9:0c:b5:b2:0e:53:b9:
                    1a:8e:4e:7e:30:fd:df:1c:34:fc:b3:72:99:89:62:
                    f5:52:d0:fd:fc:25:63:f1:64:3d:4b:e7:ca:a1:3d:
                    03:88:eb:f8:ce:84:cc:c1:ea:ce:c0:41:76:0a:c5:
                    41:27:a8:b8:f3:19:b0:01:2f:10:91:d8:9f:65:a6:
                    eb:f9:65:be:cc:b6:dd:eb:68:ac:32:2a:ec:91:74:
                    73:1e:27:0e:3e:d8:72:9a:b5:37:51:3d:8e:d8:de:
                    e4:bc:5a:5d:92:69:f8:8c:e5:df:0c:ca:a4:b7:80:
                    38:39:0a:13:cf:64:cf:a2:24:ab:d3:3b:25:1f:fd:
                    65:de:3c:91:9c:0b:47:f8:23:9d:38:e1:2c:72:23:
                    d9:fe:bf:68:8d:28:1e:64:31:5f:72:0a:23:15:b2:
                    60:c1:84:fd:0a:c5:43:32:c3:b6:00:5a:82:b6:e7:
                    a1:68:6e:67:7e:98:7d:c3:bf:8a:ff:d1:87:50:f2:
                    32:69:65:10:92:be:33:49:da:e9:9c:ba:e5:81:3c:
                    91:1e:a5:30:e7:ee:0b:75:6b:e8:ea:62:b1:7f:e6:
                    7c:61:33:bd:cb:26:4e:c1:d9:cc:f4:1d:80:98:de:
                    b9:fd:09:41:12:0b:b9:3a:10:c5:4a:03:12:e1:53:
                    45:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:31:D5:06:75:F8:78:BD:7A:05:B0:E2:A2:4B:90:AA:47:2F:FD:93
            X509v3 Authority Key Identifier:
                keyid:5B:3B:8B:FB:2C:9F:2C:E8:83:51:5F:A3:DC:F9:D1:C0:CF:AD:07:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:85:57:04:8a:57:d8:e5:35:ea:2f:27:4d:26:b7:66:82:37:
         71:8a:19:16:2d:45:27:fe:8a:30:7d:38:1f:54:65:8c:51:5f:
         1c:3c:72:85:c1:d6:4d:f0:02:f9:0b:42:f8:51:57:5c:4c:6c:
         26:cd:f4:d0:f9:70:8e:cd:de:ba:33:2d:3b:b9:3f:0b:db:b2:
         a5:dd:fd:e9:86:1a:3d:e9:e5:66:fd:b8:a3:a9:9e:02:75:3c:
         9e:5c:fa:33:af:50:1f:06:d8:53:a8:3b:bb:fe:fc:d4:e8:86:
         5b:ed:b8:45:b3:4d:a7:91:78:b1:5a:28:06:23:e0:dc:f2:c2:
         9b:97:df:51:9b:2f:7f:ea:1f:bd:b2:45:33:af:b4:1d:bb:a1:
         08:ca:18:26:9f:34:34:17:86:d6:59:64:e1:ad:ed:38:09:b3:
         e0:b2:7a:83:57:07:07:9d:40:92:a5:38:46:84:84:32:fd:a5:
         ec:71:4c:6c:6b:4a:d8:58:b8:8a:bc:b6:8e:7e:26:46:a2:1c:
         1b:12:80:06:86:0f:35:3a:c6:16:1b:4a:68:c0:79:cc:92:1d:
         16:50:1e:2f:cd:22:c9:34:04:54:6b:87:c8:b1:b4:19:59:52:
         96:a3:d7:5a:0b:e3:fe:87:e1:0b:19:cd:24:2a:9b:c8:be:ab:
         a8:12:58:53
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA68wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODhEMEMxMTAvBgNVBAUTKDVCM0I4QkZCMkM5RjJDRTg4MzUxNUZBM0RDRjlEMUMw
Q0ZBRDA3QTQwHhcNMjYwNjEzMDA0MzIxWhcNMjYwNjIwMDA0MzIxWjAYMRYwFAYD
VQQDEw02YTJjYTdhOS02NTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAudMWTe1EDdkMtbIOU7kajk5+MP3fHDT8s3KZiWL1UtD9/CVj8WQ9S+fKoT0D
iOv4zoTMwerOwEF2CsVBJ6i48xmwAS8QkdifZabr+WW+zLbd62isMirskXRzHicO
PthymrU3UT2O2N7kvFpdkmn4jOXfDMqkt4A4OQoTz2TPoiSr0zslH/1l3jyRnAtH
+COdOOEsciPZ/r9ojSgeZDFfcgojFbJgwYT9CsVDMsO2AFqCtuehaG5nfph9w7+K
/9GHUPIyaWUQkr4zSdrpnLrlgTyRHqUw5+4LdWvo6mKxf+Z8YTO9yyZOwdnM9B2A
mN65/QlBEgu5OhDFSgMS4VNFhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMIx1QZ1
+Hi9egWw4qJLkKpHL/2TMB8GA1UdIwQYMBaAFFs7i/ssnyzog1Ffo9z50cDPrQek
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEQwQy9CQTg2QkEyMkUz
MkUxMUVDOTg0ODUwN0JDNEY5QUUwMi9XenVMLXl5ZkxPaURVVi1qM1BuUndNLXRC
NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1d6dUwteXlmTE9pRFVWLWozUG5Sd00tdEI2US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OEQwQy9CQTg2QkEyMkUzMkUxMUVDOTg0ODUwN0JDNEY5QUUwMi9XenVMLXl5ZkxP
aURVVi1qM1BuUndNLXRCNlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqIVXBIpX2OU16i8nTSa3ZoI3cYoZFi1FJ/6KMH04H1RljFFfHDxyhcHWTfAC
+QtC+FFXXExsJs300Plwjs3eujMtO7k/C9uypd396YYaPenlZv24o6meAnU8nlz6
M69QHwbYU6g7u/781OiGW+24RbNNp5F4sVooBiPg3PLCm5ffUZsvf+ofvbJFM6+0
HbuhCMoYJp80NBeG1llk4a3tOAmz4LJ6g1cHB51AkqU4RoSEMv2l7HFMbGtK2Fi4
iry2jn4mRqIcGxKABoYPNTrGFhtKaMB5zJIdFlAeL80iyTQEVGuHyLG0GVlSlqPX
Wgvj/ofhCxnNJCqbyL6rqBJYUw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:09:42 2026 by rpki-client