Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.mft
File:                     wfSjmGHK0883hCGN7aegXoUvIn8.mft (raw, json)
Hash identifier:          B/lPcRlytEAHyC79MEom9mgAp2JP/6uYxWbPuT8qHFU=
Subject key identifier:   31:54:E3:CE:DF:E7:87:3B:B6:6E:FC:4A:6B:F8:59:6A:78:1A:4B:DA
Authority key identifier: C1:F4:A3:98:61:CA:D3:CF:37:84:21:8D:ED:A7:A0:5E:85:2F:22:7F
Certificate issuer:       /CN=A912DB97/serialNumber=C1F4A39861CAD3CF3784218DEDA7A05E852F227F
Certificate serial:       0123
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wfSjmGHK0883hCGN7aegXoUvIn8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.mft
Manifest number:          0120
Signing time:             Wed 07 Oct 2026 06:20:41 +0000
Manifest this update:     Wed 07 Oct 2026 06:20:40 +0000
Manifest next update:     Wed 14 Oct 2026 06:20:40 +0000
Files and hashes:         1: wfSjmGHK0883hCGN7aegXoUvIn8.crl (hash: 7qIeJ/HNWA0+AGZovlVB0otMRbJpnFdhM3GDqIjnjFI=)
                          2: 28F87D180A1611F0BC8FD10DC4F9AE02.roa (hash: Jgehc0dNGWJlml8ypNr1T5HmtWN0p5K48gpU2FwQ+nU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.crl
                          rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wfSjmGHK0883hCGN7aegXoUvIn8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 06:20:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 291 (0x123)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912DB97, serialNumber=C1F4A39861CAD3CF3784218DEDA7A05E852F227F
        Validity
            Not Before: Oct  7 06:20:40 2026 GMT
            Not After : Oct 14 06:20:40 2026 GMT
        Subject: CN=6ac5e4b9-e8ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:27:65:37:18:27:20:93:95:d8:68:e7:1a:e4:
                    41:9a:dd:05:24:88:13:b8:bc:ba:8c:ef:39:5e:e0:
                    05:9d:c4:33:68:bf:ee:34:73:19:29:37:b3:8c:7f:
                    6b:54:f6:7b:fa:74:15:29:07:76:6d:36:f8:14:4e:
                    50:0a:27:64:a6:07:b1:da:0d:e7:be:ec:64:32:a4:
                    9d:fb:56:8f:a9:40:3e:8b:39:9e:4c:67:5f:b7:63:
                    ff:a4:7f:93:e1:6a:28:bc:f0:2a:f2:3f:4a:31:54:
                    cb:b9:89:24:c1:f5:9a:80:94:72:40:77:9b:33:21:
                    dd:ad:d5:6e:05:77:11:77:08:35:7a:4c:a3:78:3d:
                    e2:cf:28:e6:c2:76:46:db:51:3f:97:24:86:c7:86:
                    23:cf:bd:45:d9:b1:13:22:a8:c8:4b:cb:e8:aa:86:
                    88:5a:a5:b8:30:d7:d5:61:3f:3f:18:80:91:d4:ea:
                    e8:33:4e:9e:3e:00:e8:6a:90:a7:95:a8:5d:f4:d2:
                    36:f5:db:0b:2e:51:ad:8a:37:91:16:11:87:16:b7:
                    80:d3:0d:df:3c:63:7f:ee:c4:14:14:bd:2f:4f:35:
                    4d:c2:71:09:1a:1b:b6:32:6f:c5:94:70:bc:18:0e:
                    b9:05:56:c0:16:f7:35:f8:95:21:40:b0:34:eb:5a:
                    75:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:54:E3:CE:DF:E7:87:3B:B6:6E:FC:4A:6B:F8:59:6A:78:1A:4B:DA
            X509v3 Authority Key Identifier:
                keyid:C1:F4:A3:98:61:CA:D3:CF:37:84:21:8D:ED:A7:A0:5E:85:2F:22:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wfSjmGHK0883hCGN7aegXoUvIn8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:01:3d:08:e9:cd:c9:e6:34:64:67:53:81:5f:3b:3d:cd:d8:
         ad:d3:64:cf:5f:82:d1:51:22:f9:5a:35:52:74:e4:1a:b2:4a:
         00:35:88:34:f8:94:92:44:df:dd:9e:21:9f:84:58:9a:58:81:
         8f:5a:a4:02:b8:2b:f5:ce:cb:a1:a3:6c:49:89:06:b7:2d:22:
         21:54:31:d4:c9:03:1c:7b:8f:55:c4:41:e3:d0:b9:61:67:81:
         76:b9:c1:8f:4a:3c:ca:54:83:59:71:f5:67:d3:f0:87:a2:99:
         53:f4:3d:2f:cd:1c:d3:41:89:be:21:e2:b4:12:b2:f5:5b:d6:
         de:71:2a:a5:c8:2f:3f:20:2d:8b:c3:c1:bd:f2:a6:22:6e:ec:
         d8:09:9b:bb:89:84:96:30:12:90:22:64:9f:e9:b9:7c:c7:7f:
         51:40:0f:f2:25:66:45:dc:eb:25:c9:5c:64:4b:8a:ca:02:3c:
         42:fa:1f:07:ff:59:4f:0b:7a:40:ca:55:6f:bd:8d:96:20:08:
         84:27:a9:3d:3d:ec:25:8b:39:5d:21:6e:5e:9c:0b:79:86:e8:
         ef:b0:45:c7:01:ca:b8:5b:04:0d:84:3c:76:55:34:cd:ae:ce:
         06:88:b0:d4:10:f7:c3:1d:a0:1d:0e:0f:85:1d:91:af:ce:33:
         ac:7e:a5:c4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkRCOTcxMTAvBgNVBAUTKEMxRjRBMzk4NjFDQUQzQ0YzNzg0MjE4REVEQTdBMDVF
ODUyRjIyN0YwHhcNMjYxMDA3MDYyMDQwWhcNMjYxMDE0MDYyMDQwWjAYMRYwFAYD
VQQDEw02YWM1ZTRiOS1lOGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlSdlNxgnIJOV2GjnGuRBmt0FJIgTuLy6jO85XuAFncQzaL/uNHMZKTezjH9r
VPZ7+nQVKQd2bTb4FE5QCidkpgex2g3nvuxkMqSd+1aPqUA+izmeTGdft2P/pH+T
4WoovPAq8j9KMVTLuYkkwfWagJRyQHebMyHdrdVuBXcRdwg1ekyjeD3izyjmwnZG
21E/lySGx4Yjz71F2bETIqjIS8voqoaIWqW4MNfVYT8/GICR1OroM06ePgDoapCn
lahd9NI29dsLLlGtijeRFhGHFreA0w3fPGN/7sQUFL0vTzVNwnEJGhu2Mm/FlHC8
GA65BVbAFvc1+JUhQLA061p12QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDFU487f
54c7tm78Smv4WWp4GkvaMB8GA1UdIwQYMBaAFMH0o5hhytPPN4Qhje2noF6FLyJ/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREI5Ny81RDhCNTI2NDBB
MTQxMUYwQjQzREM1ODZDNEY5QUUwMi93ZlNqbUdISzA4ODNoQ0dON2FlZ1hvVXZJ
bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dmU2ptR0hLMDg4M2hDR043YWVnWG9VdkluOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
REI5Ny81RDhCNTI2NDBBMTQxMUYwQjQzREM1ODZDNEY5QUUwMi93ZlNqbUdISzA4
ODNoQ0dON2FlZ1hvVXZJbjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXgE9COnNyeY0ZGdTgV87Pc3YrdNkz1+C0VEi+Vo1UnTkGrJKADWINPiUkkTf
3Z4hn4RYmliBj1qkArgr9c7LoaNsSYkGty0iIVQx1MkDHHuPVcRB49C5YWeBdrnB
j0o8ylSDWXH1Z9Pwh6KZU/Q9L80c00GJviHitBKy9VvW3nEqpcgvPyAti8PBvfKm
Im7s2Ambu4mEljASkCJkn+m5fMd/UUAP8iVmRdzrJclcZEuKygI8QvofB/9ZTwt6
QMpVb72NliAIhCepPT3sJYs5XSFuXpwLeYbo77BFxwHKuFsEDYQ8dlU0za7OBoiw
1BD3wx2gHQ4PhR2Rr84zrH6lxA==
-----END CERTIFICATE-----
Generated at Wed Oct 7 12:09:17 2026 by rpki-client