Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft
File:                     -wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft (raw, json)
Hash identifier:          DNAXwflAQXLynwALy8uMZKX0SOv4XQeIkGkCHoLps0E=
Subject key identifier:   67:17:D8:93:9C:E6:01:96:89:A5:CE:4E:62:49:A5:A5:7E:E9:32:5E
Authority key identifier: FB:02:EC:D6:C7:78:9A:39:6B:53:A4:8F:A9:24:36:60:E2:52:C1:43
Certificate issuer:       /CN=A912F437/serialNumber=FB02ECD6C7789A396B53A48FA9243660E252C143
Certificate serial:       021C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft
Manifest number:          0212
Signing time:             Sat 03 Oct 2026 03:39:37 +0000
Manifest this update:     Sat 03 Oct 2026 03:39:36 +0000
Manifest next update:     Sat 10 Oct 2026 03:39:36 +0000
Files and hashes:         1: -wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl (hash: 1MiR3T2ykxVPJHgKaNn1pgSMJrVXqFzQ/0BFnEuomvo=)
                          2: D973D5BE97D711EEA1B09A33C4F9AE02.roa (hash: vK6UgwvhHzxe7wOhZkBOrNQ5FiwefRM4NQVFNi53pvw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl
                          rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 03:39:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 540 (0x21c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F437, serialNumber=FB02ECD6C7789A396B53A48FA9243660E252C143
        Validity
            Not Before: Oct  3 03:39:36 2026 GMT
            Not After : Oct 10 03:39:36 2026 GMT
        Subject: CN=6ac078f8-9c12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0c:89:10:ea:6b:21:89:b9:6b:ed:6c:8d:c0:
                    bf:e1:14:60:02:35:83:ab:b4:3d:af:75:15:2c:a1:
                    6b:ad:f4:06:ea:09:7d:32:f6:bb:9a:78:0d:84:8b:
                    41:48:ea:72:80:a0:9c:74:6f:39:a8:d7:10:a4:05:
                    7b:18:3b:81:4d:87:80:f2:67:a6:62:72:12:19:a4:
                    3a:63:37:46:4e:3e:9d:47:17:15:2a:d3:d1:4b:63:
                    90:5a:69:25:04:de:5a:c4:9e:27:77:ca:b8:b0:72:
                    db:8b:8c:dd:36:ce:66:3d:ab:e4:cc:0a:a2:ab:36:
                    41:49:f9:78:9d:65:25:2e:9c:fc:ea:48:c3:ca:bb:
                    7e:5a:19:2f:73:77:9f:1e:14:99:d5:77:c2:16:48:
                    50:f9:ad:05:c7:b6:51:06:a2:d1:6f:b5:dc:84:fb:
                    fc:a8:73:ad:75:71:3f:bb:ea:b7:a5:2a:8e:85:32:
                    ee:10:73:ca:bc:a0:0c:1b:9b:81:33:41:ad:27:8e:
                    16:45:6c:d1:f4:32:de:4b:08:45:ab:5d:dd:16:ee:
                    54:e0:fb:34:53:14:55:49:4f:d7:b7:b7:78:13:9d:
                    e0:f9:40:b7:8c:26:49:98:14:22:51:da:9f:d4:93:
                    8c:81:fa:c5:4d:92:cf:18:98:6e:9b:dd:d9:52:33:
                    f1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:17:D8:93:9C:E6:01:96:89:A5:CE:4E:62:49:A5:A5:7E:E9:32:5E
            X509v3 Authority Key Identifier:
                keyid:FB:02:EC:D6:C7:78:9A:39:6B:53:A4:8F:A9:24:36:60:E2:52:C1:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:68:46:8a:64:f8:f7:81:9f:bc:b6:88:87:37:31:58:fc:16:
         9a:26:87:e3:58:01:9a:90:0a:41:3f:93:27:f7:db:8e:e5:cc:
         ec:c3:b8:00:01:1e:32:51:e7:5b:aa:a7:96:7f:53:a9:98:7b:
         ff:c2:43:17:8a:c2:2a:20:f0:84:26:04:79:3d:06:9e:36:cc:
         20:4a:45:39:7e:f1:fc:e3:48:74:37:d5:75:4b:9c:52:4e:47:
         9b:61:5a:89:05:27:9b:ad:33:a3:3a:85:6f:53:05:f0:07:3c:
         97:53:08:11:88:b2:a9:bc:2e:b4:bf:d7:d1:73:26:e2:51:5b:
         77:fd:96:00:3b:1c:0b:95:fa:73:7d:9b:e8:30:67:22:b6:c5:
         61:df:6d:99:50:6b:58:ac:a8:ed:79:4b:8e:96:b7:30:c5:19:
         c9:e5:98:c6:33:c9:9d:1f:5e:a6:43:e0:22:fb:7c:f0:d9:74:
         56:54:6f:bd:a2:cb:54:ec:9a:fc:39:db:bf:a7:b6:72:4d:db:
         67:3e:e4:1c:6f:8d:33:25:b4:d7:30:e2:26:92:d3:ec:4c:d6:
         07:3e:1f:36:3c:07:31:f6:0e:3e:f0:19:64:bc:d4:af:e8:e3:
         c1:55:d8:0d:3d:3f:7a:2c:b2:e0:2f:6c:46:9f:e6:78:d5:b4:
         2b:aa:d3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 14:41:53 2026 by rpki-client