Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft
File:                     WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft (raw, json)
Hash identifier:          zWbFcsSH3dtTHGn1CV4a3jWJtY2KTtIQEm8VWfqezhk=
Subject key identifier:   F4:17:CB:0A:DF:59:EC:7E:3F:18:2F:36:F8:46:E7:4A:2B:4B:47:7F
Authority key identifier: 59:CA:0E:D6:B9:6B:70:C2:9B:3D:D8:E4:EC:59:8E:A1:2E:0D:C2:E6
Certificate issuer:       /CN=A91C7AB9/serialNumber=59CA0ED6B96B70C29B3DD8E4EC598EA12E0DC2E6
Certificate serial:       0221
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WcoO1rlrcMKbPdjk7FmOoS4NwuY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft
Manifest number:          0213
Signing time:             Mon 21 Sep 2026 03:07:31 +0000
Manifest this update:     Mon 21 Sep 2026 03:07:30 +0000
Manifest next update:     Mon 28 Sep 2026 03:07:30 +0000
Files and hashes:         1: WcoO1rlrcMKbPdjk7FmOoS4NwuY.crl (hash: YcKG00nQATTSDPAR04NNPH72AHdGBwoWmt7tQw4Gaak=)
                          2: 321296E212E711F1ABE68E4F0D3D8C67.roa (hash: fLV89AyiqIKtRsF5UkgoIwTy20rGQz1nx0VUvYpw5g0=)
                          3: 7CF0A45404DF11F0B877A115C4F9AE02.roa (hash: 3zvmMVyOd3Cbubn7cAeWSSyiDSHBJieehrUFUeq/rLk=)
                          4: EAAE802834B911F1B8589B72BC833773.roa (hash: hYHnbi70DEeeHLUAwomrQxmvt6OsQN+4vZ8kSWKcIq4=)
                          5: 5CB841E69B1411EEA456FE83C4F9AE02.roa (hash: vuhGbAXmdFyZHU5zcn6qI6D4hSXtuQyTQbfw33B7PYM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.crl
                          rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WcoO1rlrcMKbPdjk7FmOoS4NwuY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 03:07:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 545 (0x221)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7AB9, serialNumber=59CA0ED6B96B70C29B3DD8E4EC598EA12E0DC2E6
        Validity
            Not Before: Sep 21 03:07:30 2026 GMT
            Not After : Sep 28 03:07:30 2026 GMT
        Subject: CN=6ab09f73-41e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c2:79:cd:a0:6c:f0:76:84:44:5c:45:2e:4b:
                    58:70:ad:75:0e:b3:84:43:42:c2:35:d2:84:d7:b8:
                    2c:e1:59:8d:f8:aa:86:b1:9a:66:83:78:93:0b:49:
                    e5:c1:78:8c:5c:1b:32:63:57:0e:19:39:08:89:26:
                    22:8d:33:c5:9c:2a:6f:95:93:c6:13:15:41:71:fb:
                    9c:24:99:76:51:c2:e5:f1:aa:ee:ed:a5:cc:b5:27:
                    3a:d6:f6:95:10:dd:67:7f:2b:35:0b:97:2c:17:85:
                    4c:c3:b5:f9:d7:36:02:70:d3:36:e9:cc:bc:3f:78:
                    a4:7a:5b:61:5d:0e:af:3d:86:40:dc:26:69:37:bc:
                    5f:de:83:98:43:78:80:7a:99:6e:97:a3:8e:0c:f7:
                    36:9d:c7:ce:58:00:25:5c:8c:d8:b6:4b:df:5b:eb:
                    bc:45:9b:c6:fa:e1:66:a3:50:2f:1f:c7:61:22:16:
                    1a:e5:70:18:19:c5:49:9d:ce:78:93:93:c7:65:be:
                    45:fd:e4:8b:f0:44:6b:3c:51:5c:ca:c4:4b:50:84:
                    62:74:42:7d:c7:64:29:e6:d7:7d:02:5b:11:44:11:
                    12:c9:b4:cc:4e:9a:a1:80:b1:7d:82:d5:ec:6f:76:
                    41:7e:04:f2:31:75:b5:20:fc:13:6f:ae:13:0b:ca:
                    d0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:17:CB:0A:DF:59:EC:7E:3F:18:2F:36:F8:46:E7:4A:2B:4B:47:7F
            X509v3 Authority Key Identifier:
                keyid:59:CA:0E:D6:B9:6B:70:C2:9B:3D:D8:E4:EC:59:8E:A1:2E:0D:C2:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WcoO1rlrcMKbPdjk7FmOoS4NwuY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:25:df:80:1e:2a:ae:ee:82:be:42:2e:52:fb:c2:34:f7:74:
         40:53:7f:c8:53:09:94:3a:83:e6:5d:62:f3:3d:94:5d:b6:f2:
         51:10:e4:0d:19:1c:83:c5:fd:4a:f4:dd:6f:d6:2d:22:23:b0:
         58:e8:dd:c4:11:bf:5a:ac:2a:5a:98:7d:b5:1d:99:9c:dc:4e:
         a4:25:55:61:0e:be:05:18:3d:76:23:3f:4f:b6:53:3f:99:4a:
         0b:82:dc:4d:da:c7:c3:8e:c9:32:43:b3:fc:f1:67:95:43:28:
         58:16:05:3b:12:f3:ff:2c:b2:6f:bf:e5:60:c6:52:d1:47:5f:
         44:1e:58:b1:af:51:6a:1f:07:97:26:53:df:0b:e8:5a:77:12:
         c7:55:28:cc:61:d5:d6:f7:76:78:35:3c:05:51:26:4d:d2:44:
         f3:0e:88:4d:72:4a:d4:05:0a:95:c1:35:03:2c:77:e4:ed:f4:
         44:a9:38:49:39:d6:82:a2:02:7b:60:a8:1e:72:35:12:ae:ca:
         b6:6e:04:b5:a1:94:07:85:21:29:08:9d:a8:ad:cb:8e:da:89:
         e6:32:c8:21:b7:80:25:16:11:0f:82:a9:29:6b:54:bd:90:cc:
         94:6d:a1:bd:23:00:06:4b:fd:eb:d3:17:1c:e3:07:ed:ad:e6:
         db:b0:64:7d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzdBQjkxMTAvBgNVBAUTKDU5Q0EwRUQ2Qjk2QjcwQzI5QjNERDhFNEVDNTk4RUEx
MkUwREMyRTYwHhcNMjYwOTIxMDMwNzMwWhcNMjYwOTI4MDMwNzMwWjAYMRYwFAYD
VQQDEw02YWIwOWY3My00MWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxMJ5zaBs8HaERFxFLktYcK11DrOEQ0LCNdKE17gs4VmN+KqGsZpmg3iTC0nl
wXiMXBsyY1cOGTkIiSYijTPFnCpvlZPGExVBcfucJJl2UcLl8aru7aXMtSc61vaV
EN1nfys1C5csF4VMw7X51zYCcNM26cy8P3ikelthXQ6vPYZA3CZpN7xf3oOYQ3iA
eplul6OODPc2ncfOWAAlXIzYtkvfW+u8RZvG+uFmo1AvH8dhIhYa5XAYGcVJnc54
k5PHZb5F/eSL8ERrPFFcysRLUIRidEJ9x2Qp5td9AlsRRBESybTMTpqhgLF9gtXs
b3ZBfgTyMXW1IPwTb64TC8rQBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPQXywrf
Wex+PxgvNvhG50orS0d/MB8GA1UdIwQYMBaAFFnKDta5a3DCmz3Y5OxZjqEuDcLm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0FCOS9BQjU3NTMwNjlC
MTMxMUVFQUFBQTM5ODJDNEY5QUUwMi9XY29PMXJscmNNS2JQZGprN0ZtT29TNE53
dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1djb08xcmxyY01LYlBkams3Rm1Pb1M0Tnd1WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
N0FCOS9BQjU3NTMwNjlCMTMxMUVFQUFBQTM5ODJDNEY5QUUwMi9XY29PMXJscmNN
S2JQZGprN0ZtT29TNE53dVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtSXfgB4qru6CvkIuUvvCNPd0QFN/yFMJlDqD5l1i8z2UXbbyURDkDRkcg8X9
SvTdb9YtIiOwWOjdxBG/WqwqWph9tR2ZnNxOpCVVYQ6+BRg9diM/T7ZTP5lKC4Lc
TdrHw47JMkOz/PFnlUMoWBYFOxLz/yyyb7/lYMZS0UdfRB5Ysa9Rah8HlyZT3wvo
WncSx1UozGHV1vd2eDU8BVEmTdJE8w6ITXJK1AUKlcE1Ayx35O30RKk4STnWgqIC
e2CoHnI1Eq7Ktm4EtaGUB4UhKQidqK3LjtqJ5jLIIbeAJRYRD4KpKWtUvZDMlG2h
vSMABkv969MXHOMH7a3m27BkfQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 13:32:11 2026 by rpki-client