Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft
File:                     Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft (raw, json)
Hash identifier:          ZxJOYCNYLzCTdpA5n41qJk72sFgUSa/Yl/BX1XdlAdM=
Subject key identifier:   91:2C:AF:C6:AB:47:C8:D5:5F:33:41:73:6A:F2:D0:8A:9B:EB:0B:D9
Authority key identifier: 5B:2C:F0:FB:62:F1:60:F1:83:8A:EE:3E:6C:DE:07:54:4D:FF:8B:FF
Certificate issuer:       /CN=A9123D9C/serialNumber=5B2CF0FB62F160F1838AEE3E6CDE07544DFF8BFF
Certificate serial:       111E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft
Manifest number:          10A2
Signing time:             Wed 18 Mar 2026 17:12:15 +0000
Manifest this update:     Wed 18 Mar 2026 17:12:15 +0000
Manifest next update:     Wed 25 Mar 2026 17:12:15 +0000
Files and hashes:         1: Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl (hash: CmxYgPDAEKYaDR+P1eQgY24MQDPs69nOrXKTLB5yq3E=)
                          2: ED4C74EC5B2911EDAC608856C4F9AE02.roa (hash: c4KIZ7sVtzVDPX25+FzQ/O+y1BOxGSAb3CkDDL2gT68=)
                          3: F47561669C3B11EABC59DA11C4F9AE02.roa (hash: x8RxxSceiWsll8aKdp4onnVgfhxxvJp6geOEYhZHJgc=)
                          4: 9DE197A2168511EAB282BB44C4F9AE02.roa (hash: okPNLIYHqUe2+LRXDuE5SiF4zzmmje5rGzctyXR1y8I=)
                          5: B7D67B4ECC3011EA9B54C679C4F9AE02.roa (hash: EE7xiFt8zHUSdbXxMdyXG6Wpd6uFiY1gYTraSn4pB98=)
                          6: 727F33429FAD11EAAD1A6744C4F9AE02.roa (hash: juU4sbQRoi0FHuryZbA2eU5v383vXepIosrtYBH3gtg=)
                          7: 04C5DE76FF2711EAB7D5F235C4F9AE02.roa (hash: eb3+tHV1wRLLEmC3kj0RQw3MnpJ2PGa07z+N4EUcBA8=)
                          8: 9D164714168511EAB282BB44C4F9AE02.roa (hash: DSZNEJ4bi4o5CgyqC1+84x7Rm378M2iKs/nwItolD0A=)
                          9: 884A03F4447111EC83674068C4F9AE02.roa (hash: MesMGQxH0Xw4s7Fn2Idh7Qa7VWkhHaWaah+Jq/emd28=)
                          10: A8DA1B1E9EE511EA890A7220C4F9AE02.roa (hash: wWSjcw2Ok0AjX38Jalp5jeYRBwKOimHHIAdxglDe+3Y=)
                          11: F34FF6B69C3B11EABC59DA11C4F9AE02.roa (hash: OLxb4szEa42sVAsVtahDW9OACGax9w0AvXegNjux5TA=)
                          12: CC320712ACE011EAB535D034C4F9AE02.roa (hash: ATSoIcgvhIoB1w29pbN50AH77sAvyF3PhL5dixTk+JA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl
                          rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Mar 2026 17:12:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4382 (0x111e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123D9C, serialNumber=5B2CF0FB62F160F1838AEE3E6CDE07544DFF8BFF
        Validity
            Not Before: Mar 18 17:12:15 2026 GMT
            Not After : Mar 25 17:12:15 2026 GMT
        Subject: CN=69badcef-64ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4a:9c:40:74:7e:d8:89:ef:20:0d:3b:26:f3:
                    27:27:31:75:7e:5b:13:04:af:2a:b4:6e:0b:b6:01:
                    43:51:41:63:34:5a:6d:a1:57:30:d7:80:6d:45:19:
                    eb:64:e5:4e:62:a8:cf:56:e3:46:97:e5:78:12:95:
                    3e:47:a1:06:32:9f:78:42:e3:c9:b3:8d:d6:17:33:
                    63:97:49:03:6a:6f:1b:48:ef:04:d8:71:b4:68:6e:
                    16:9a:eb:99:fb:05:0d:da:a3:46:f9:b7:62:a8:11:
                    30:e0:e1:51:94:84:44:5b:00:36:85:31:ac:a5:1a:
                    1b:c5:3a:bb:42:7c:a4:86:fb:97:05:7b:51:79:53:
                    b8:73:4e:9c:bf:ca:9b:0f:0c:f7:8b:11:04:0e:18:
                    90:84:66:d1:e0:66:68:df:2d:f6:da:91:fb:16:ea:
                    16:c6:91:6e:94:9b:53:45:58:18:eb:8a:b4:61:0f:
                    ce:06:06:77:a1:60:9d:38:2f:fe:8b:2b:50:4b:09:
                    b5:c1:b4:8f:a9:f8:7a:4a:7b:f6:16:a6:43:b3:de:
                    c7:73:f6:1f:96:15:59:f1:47:11:f5:69:45:7e:d1:
                    96:be:bd:e6:cd:af:e8:91:e3:1d:e5:f6:de:72:fa:
                    66:52:a8:02:07:c8:2e:bb:b2:97:c6:0f:ca:af:36:
                    61:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:2C:AF:C6:AB:47:C8:D5:5F:33:41:73:6A:F2:D0:8A:9B:EB:0B:D9
            X509v3 Authority Key Identifier:
                keyid:5B:2C:F0:FB:62:F1:60:F1:83:8A:EE:3E:6C:DE:07:54:4D:FF:8B:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:57:17:26:9b:cd:cb:1e:96:41:c3:f0:09:32:05:58:e6:e0:
         b3:98:4a:8e:5d:45:8a:53:75:53:f5:4a:3b:a8:49:fe:f0:33:
         b5:55:3e:2f:02:86:df:81:45:73:19:d1:df:6c:b9:91:c0:91:
         1f:4f:58:a1:84:74:a9:4f:74:c6:6c:a7:cf:1b:f7:cb:bf:f7:
         f6:a9:6e:0a:05:9f:9b:dc:0b:2c:27:27:4f:e9:bc:1c:be:0e:
         bd:ff:13:13:cf:45:7d:e7:00:ca:c2:22:82:a0:06:72:f9:87:
         68:06:cb:a6:6b:a5:c7:f8:c7:c8:fd:b5:83:39:51:a8:06:16:
         9c:c9:36:38:04:df:59:58:ae:cd:70:f5:17:00:e3:16:11:7d:
         67:96:d8:49:b7:3e:ab:8c:70:23:e2:2e:78:ee:34:82:50:56:
         bf:8e:14:c2:10:0c:84:1b:be:f2:6d:b2:10:dc:ce:d9:4f:e9:
         29:29:0a:df:81:a1:0f:2d:1b:1a:13:c2:5a:4d:9f:40:c2:3a:
         f8:c6:2a:3b:e8:66:92:50:e3:14:07:9c:17:6f:cd:f1:22:c3:
         4b:78:09:36:3d:a8:a5:60:cf:40:a2:6f:93:d2:2c:07:a1:03:
         f6:6d:34:06:3d:cd:65:7b:b4:85:d3:ee:db:f9:4b:5f:c1:95:
         6a:5a:84:a2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICER4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjNEOUMxMTAvBgNVBAUTKDVCMkNGMEZCNjJGMTYwRjE4MzhBRUUzRTZDREUwNzU0
NERGRjhCRkYwHhcNMjYwMzE4MTcxMjE1WhcNMjYwMzI1MTcxMjE1WjAYMRYwFAYD
VQQDEw02OWJhZGNlZi02NGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAskqcQHR+2InvIA07JvMnJzF1flsTBK8qtG4LtgFDUUFjNFptoVcw14BtRRnr
ZOVOYqjPVuNGl+V4EpU+R6EGMp94QuPJs43WFzNjl0kDam8bSO8E2HG0aG4WmuuZ
+wUN2qNG+bdiqBEw4OFRlIREWwA2hTGspRobxTq7QnykhvuXBXtReVO4c06cv8qb
Dwz3ixEEDhiQhGbR4GZo3y322pH7FuoWxpFulJtTRVgY64q0YQ/OBgZ3oWCdOC/+
iytQSwm1wbSPqfh6Snv2FqZDs97Hc/YflhVZ8UcR9WlFftGWvr3mza/okeMd5fbe
cvpmUqgCB8guu7KXxg/KrzZhWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJEsr8ar
R8jVXzNBc2ry0Iqb6wvZMB8GA1UdIwQYMBaAFFss8Pti8WDxg4ruPmzeB1RN/4v/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0Q5Qy80NTU5NDJENjUw
QjIxMUU5QjVEQjZBNkJDNEY5QUUwMi9XeXp3LTJMeFlQR0RpdTQtYk40SFZFM19p
XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1d5enctMkx4WVBHRGl1NC1iTjRIVkUzX2lfOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
M0Q5Qy80NTU5NDJENjUwQjIxMUU5QjVEQjZBNkJDNEY5QUUwMi9XeXp3LTJMeFlQ
R0RpdTQtYk40SFZFM19pXzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJ1cXJpvNyx6WQcPwCTIFWObgs5hKjl1FilN1U/VKO6hJ/vAztVU+LwKG34FF
cxnR32y5kcCRH09YoYR0qU90xmynzxv3y7/39qluCgWfm9wLLCcnT+m8HL4Ovf8T
E89FfecAysIigqAGcvmHaAbLpmulx/jHyP21gzlRqAYWnMk2OATfWViuzXD1FwDj
FhF9Z5bYSbc+q4xwI+IueO40glBWv44UwhAMhBu+8m2yENzO2U/pKSkK34GhDy0b
GhPCWk2fQMI6+MYqO+hmklDjFAecF2/N8SLDS3gJNj2opWDPQKJvk9IsB6ED9m00
Bj3NZXu0hdPu2/lLX8GValqEog==
-----END CERTIFICATE-----
Generated at Fri Mar 20 03:55:16 2026 by rpki-client