Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.mft
File:                     _wsVRthMDZNVkFtsopPiW0QJSMU.mft (raw, json)
Hash identifier:          QmWpFCLKSVBy3pRGRQzmKEuQJUXtIXtNNkOivHkc6f8=
Subject key identifier:   95:CC:8C:70:F6:11:9A:8C:3D:F0:9A:BD:A8:C0:1F:8B:CE:41:51:20
Authority key identifier: FF:0B:15:46:D8:4C:0D:93:55:90:5B:6C:A2:93:E2:5B:44:09:48:C5
Certificate issuer:       /CN=A9198F53/serialNumber=FF0B1546D84C0D9355905B6CA293E25B440948C5
Certificate serial:       0BFA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wsVRthMDZNVkFtsopPiW0QJSMU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.mft
Manifest number:          0BEC
Signing time:             Sun 26 Jul 2026 19:17:52 +0000
Manifest this update:     Sun 26 Jul 2026 19:17:52 +0000
Manifest next update:     Sun 02 Aug 2026 19:17:52 +0000
Files and hashes:         1: _wsVRthMDZNVkFtsopPiW0QJSMU.crl (hash: C468FATj8ZGa5qdTFwYTZlUX3HwlHXwaJG5J6L0IeGw=)
                          2: 0B1FBD4A40F611EAACD44866C4F9AE02.roa (hash: DFdvRHgXchuBm4qDLuYljzDy6YW5jSvcOAQEQdXRUns=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.crl
                          rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wsVRthMDZNVkFtsopPiW0QJSMU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 19:17:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3066 (0xbfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198F53, serialNumber=FF0B1546D84C0D9355905B6CA293E25B440948C5
        Validity
            Not Before: Jul 26 19:17:52 2026 GMT
            Not After : Aug  2 19:17:52 2026 GMT
        Subject: CN=6a665d60-7cc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:89:de:90:81:18:bd:53:fc:95:af:2a:d2:cc:
                    5a:0f:f4:0d:da:14:22:5c:99:c8:97:51:06:a9:3e:
                    0b:58:98:4b:80:0d:ea:c8:82:aa:6b:96:df:99:8f:
                    a1:3f:58:8d:88:37:66:ec:60:7d:4f:a1:74:e1:49:
                    98:36:6e:08:fc:0b:27:7d:27:97:de:53:74:74:49:
                    d5:02:11:17:61:61:f1:42:07:ba:2d:78:ff:8e:3f:
                    1a:62:27:ac:ae:7d:26:bc:88:db:e7:4e:b3:85:f7:
                    2c:d4:88:68:21:2c:f3:6b:c1:24:8d:6e:70:b6:38:
                    68:2b:80:d5:93:02:6b:fc:d1:4c:a1:40:64:a6:2b:
                    c5:8e:3d:a5:9f:be:a1:d1:ae:66:0e:6e:07:f6:96:
                    a0:cc:68:7e:2a:91:78:05:37:ee:4a:f3:73:27:e4:
                    bf:10:4f:70:14:ee:36:56:f1:dc:50:a6:88:16:9d:
                    66:9b:98:47:f9:1c:fc:36:6e:06:fe:9a:ae:11:d9:
                    df:28:ce:93:d7:de:7c:7b:c7:ea:34:ec:fd:89:ee:
                    15:86:c3:21:26:9c:82:5f:f5:06:11:b2:3e:6e:e4:
                    6e:4b:e0:99:77:7d:7c:53:48:f1:35:fd:67:f0:06:
                    89:d6:a6:70:83:19:7e:07:7a:f1:88:f0:00:f4:74:
                    d8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:CC:8C:70:F6:11:9A:8C:3D:F0:9A:BD:A8:C0:1F:8B:CE:41:51:20
            X509v3 Authority Key Identifier:
                keyid:FF:0B:15:46:D8:4C:0D:93:55:90:5B:6C:A2:93:E2:5B:44:09:48:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wsVRthMDZNVkFtsopPiW0QJSMU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:65:03:74:4d:46:ed:a9:e2:c5:04:ab:b2:3a:5f:d3:0c:2b:
         a1:c8:ad:05:1b:1d:f1:41:a8:1b:c7:14:d5:3a:56:1c:9e:31:
         0e:42:68:ae:cd:8a:74:df:d3:5c:f0:0d:c6:73:8d:bc:61:09:
         07:4f:ca:71:8f:5e:6f:53:a5:46:4c:e5:cb:c3:d2:a4:21:70:
         b2:9b:b7:d8:97:eb:8a:10:2b:e8:15:03:fe:89:e6:df:c6:22:
         bf:66:f6:71:4b:f3:97:eb:27:7a:22:6a:9d:ae:66:d4:0e:f3:
         bf:07:77:7d:eb:63:f6:aa:ec:cc:d6:a8:4f:6d:54:e0:9a:6b:
         50:0c:15:4d:4e:93:f7:44:c9:1d:d7:68:b0:00:f2:7c:76:6c:
         83:46:ef:dc:a8:b2:ff:4f:7b:f5:45:c0:4d:05:ba:15:1f:4c:
         41:f7:4b:9b:1c:48:47:63:35:f3:9a:3e:67:dd:86:90:00:cf:
         df:4c:d4:93:a5:a9:a4:f6:3d:7f:fd:7f:d8:7b:0b:3e:a7:ad:
         b8:00:9e:b9:2a:57:38:01:e1:b3:a4:02:70:09:4c:18:5f:77:
         3c:85:ef:31:f9:bd:2a:93:18:eb:a5:c6:c7:5f:83:17:96:29:
         db:90:9e:78:d4:c0:07:42:96:6e:21:5a:f6:46:91:66:f9:f9:
         7a:dc:62:62
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC/owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OThGNTMxMTAvBgNVBAUTKEZGMEIxNTQ2RDg0QzBEOTM1NTkwNUI2Q0EyOTNFMjVC
NDQwOTQ4QzUwHhcNMjYwNzI2MTkxNzUyWhcNMjYwODAyMTkxNzUyWjAYMRYwFAYD
VQQDEw02YTY2NWQ2MC03Y2M0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApYnekIEYvVP8la8q0sxaD/QN2hQiXJnIl1EGqT4LWJhLgA3qyIKqa5bfmY+h
P1iNiDdm7GB9T6F04UmYNm4I/AsnfSeX3lN0dEnVAhEXYWHxQge6LXj/jj8aYies
rn0mvIjb506zhfcs1IhoISzza8EkjW5wtjhoK4DVkwJr/NFMoUBkpivFjj2ln76h
0a5mDm4H9pagzGh+KpF4BTfuSvNzJ+S/EE9wFO42VvHcUKaIFp1mm5hH+Rz8Nm4G
/pquEdnfKM6T1958e8fqNOz9ie4VhsMhJpyCX/UGEbI+buRuS+CZd318U0jxNf1n
8AaJ1qZwgxl+B3rxiPAA9HTYCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJXMjHD2
EZqMPfCavajAH4vOQVEgMB8GA1UdIwQYMBaAFP8LFUbYTA2TVZBbbKKT4ltECUjF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OEY1My9DRDA2MjE3NjQw
RjQxMUVBQUU3NzgyNjFDNEY5QUUwMi9fd3NWUnRoTURaTlZrRnRzb3BQaVcwUUpT
TVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL193c1ZSdGhNRFpOVmtGdHNvcFBpVzBRSlNNVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OEY1My9DRDA2MjE3NjQwRjQxMUVBQUU3NzgyNjFDNEY5QUUwMi9fd3NWUnRoTURa
TlZrRnRzb3BQaVcwUUpTTVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAf2UDdE1G7anixQSrsjpf0wwrocitBRsd8UGoG8cU1TpWHJ4xDkJors2KdN/T
XPANxnONvGEJB0/KcY9eb1OlRkzly8PSpCFwspu32JfrihAr6BUD/onm38Yiv2b2
cUvzl+sneiJqna5m1A7zvwd3fetj9qrszNaoT21U4JprUAwVTU6T90TJHddosADy
fHZsg0bv3Kiy/0979UXATQW6FR9MQfdLmxxIR2M185o+Z92GkADP30zUk6WppPY9
f/1/2HsLPqetuACeuSpXOAHhs6QCcAlMGF93PIXvMfm9KpMY66XGx1+DF5Yp25Ce
eNTAB0KWbiFa9kaRZvn5etxiYg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:24:25 2026 by rpki-client