Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft
File:                     0wlAzG8MECS4QLu309gBJjYGylk.mft (raw, json)
Hash identifier:          okpOA6BBou5LI8sCY9MHsJMVmSFILcwOJRCYVcCFQX0=
Subject key identifier:   B0:D0:AC:98:9A:2C:CE:78:9C:1D:AF:F0:71:AB:90:CA:2A:1A:DA:57
Authority key identifier: D3:09:40:CC:6F:0C:10:24:B8:40:BB:B7:D3:D8:01:26:36:06:CA:59
Certificate issuer:       /CN=A91412BC/serialNumber=D30940CC6F0C1024B840BBB7D3D801263606CA59
Certificate serial:       A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wlAzG8MECS4QLu309gBJjYGylk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft
Manifest number:          A2
Signing time:             Fri 13 Mar 2026 06:11:51 +0000
Manifest this update:     Fri 13 Mar 2026 06:11:50 +0000
Manifest next update:     Fri 20 Mar 2026 06:11:50 +0000
Files and hashes:         1: 0wlAzG8MECS4QLu309gBJjYGylk.crl (hash: crUr50DoLdOqlg05o6bc5jJ80lCDbsealEa2EQT/z+s=)
                          2: 936B147E248A11F0AD4B1179C4F9AE02.roa (hash: KKNZk8TKKutrrsf25zmuk68cl+IkZVqZN/02Jy9kkJk=)
                          3: 92F3063C248A11F0AD4B1179C4F9AE02.roa (hash: gg3dy1VemygngsJpaRmfWK/QMAHg/KD+YdVdOG6ayvU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.crl
                          rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wlAzG8MECS4QLu309gBJjYGylk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Mar 2026 06:11:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166 (0xa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91412BC, serialNumber=D30940CC6F0C1024B840BBB7D3D801263606CA59
        Validity
            Not Before: Mar 13 06:11:50 2026 GMT
            Not After : Mar 20 06:11:50 2026 GMT
        Subject: CN=69b3aaa6-de03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:68:1a:70:f4:f1:b8:0c:8a:88:1b:14:19:ea:
                    b4:6b:f0:de:16:bb:d5:75:77:56:77:cb:7b:84:25:
                    f4:fb:ea:43:ba:0b:7b:71:09:24:6e:20:1d:e6:45:
                    25:f6:13:ac:13:ef:8a:93:ce:f9:fe:90:79:ed:a1:
                    09:4b:d5:31:c5:49:2a:b4:03:d9:b2:71:9d:0d:72:
                    41:02:2f:ea:d9:06:ad:01:6b:23:3b:0f:1b:ad:ed:
                    78:88:94:db:a9:27:31:a5:09:3f:17:01:8e:2f:67:
                    d7:37:91:4b:75:b3:63:58:e6:27:16:37:a0:cb:ce:
                    22:65:a4:05:73:96:90:6d:fa:3d:ca:c2:96:f1:4e:
                    c4:0f:57:5e:55:7d:06:02:fa:cd:c7:c7:d4:37:f3:
                    5e:c0:f1:43:af:dd:73:8a:5c:46:ba:d4:18:6f:03:
                    a5:a4:8a:56:a6:02:60:d1:ad:47:9d:17:71:94:9f:
                    da:6d:82:02:45:62:bb:50:50:5e:d6:33:52:91:6b:
                    54:7f:6f:c5:da:63:fc:5e:70:d7:c7:3a:11:6f:59:
                    34:d3:06:d7:6d:95:ed:94:b0:5a:d9:f9:bc:ab:4b:
                    ef:81:c8:95:70:28:a9:3f:db:6a:5c:b3:02:1d:04:
                    3e:89:18:0e:86:6a:95:6c:c7:40:6d:5d:05:47:62:
                    da:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:D0:AC:98:9A:2C:CE:78:9C:1D:AF:F0:71:AB:90:CA:2A:1A:DA:57
            X509v3 Authority Key Identifier:
                keyid:D3:09:40:CC:6F:0C:10:24:B8:40:BB:B7:D3:D8:01:26:36:06:CA:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wlAzG8MECS4QLu309gBJjYGylk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:71:38:bd:06:f5:4f:01:59:27:bb:65:c1:7c:34:91:3b:8b:
         72:99:ee:4c:bd:bb:e9:83:89:7d:d0:52:41:8e:e5:05:6d:ce:
         bc:ee:a9:35:51:39:93:ae:8a:57:0b:c8:06:d4:95:d6:4a:be:
         5e:15:4f:04:9a:52:7d:43:ee:6e:cd:cb:34:d7:dd:d9:91:e4:
         46:ff:ec:a7:93:ff:5c:5d:2f:73:af:6f:28:c8:66:a4:cc:9d:
         f4:d6:97:5a:d2:38:ae:25:0f:33:9b:7b:0a:e1:aa:62:be:58:
         1e:b9:51:91:87:83:d0:d1:d3:50:ae:ab:0c:c9:66:cb:b7:dc:
         8b:cd:95:fb:d2:96:af:06:b5:74:17:c2:c3:8d:70:b0:99:c6:
         c2:58:be:6b:08:a9:aa:78:26:31:00:e3:20:ec:bf:62:ad:2c:
         76:5d:85:32:2d:83:6c:2c:56:86:57:9a:99:94:b9:76:cb:ba:
         86:57:7f:6b:00:3e:6d:00:2d:27:63:be:a8:72:ee:67:63:1a:
         70:5e:8e:84:aa:8c:ec:22:ab:61:b4:d1:de:d4:84:af:2c:9d:
         95:de:a4:f3:ee:a1:2e:67:dc:06:45:83:cf:f8:26:a3:6c:27:
         e5:9d:5c:e1:bf:d4:50:31:c2:50:73:e2:56:05:89:ef:23:3b:
         fb:62:b2:4d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDEyQkMxMTAvBgNVBAUTKEQzMDk0MENDNkYwQzEwMjRCODQwQkJCN0QzRDgwMTI2
MzYwNkNBNTkwHhcNMjYwMzEzMDYxMTUwWhcNMjYwMzIwMDYxMTUwWjAYMRYwFAYD
VQQDEw02OWIzYWFhNi1kZTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqWgacPTxuAyKiBsUGeq0a/DeFrvVdXdWd8t7hCX0++pDugt7cQkkbiAd5kUl
9hOsE++Kk875/pB57aEJS9UxxUkqtAPZsnGdDXJBAi/q2QatAWsjOw8bre14iJTb
qScxpQk/FwGOL2fXN5FLdbNjWOYnFjegy84iZaQFc5aQbfo9ysKW8U7ED1deVX0G
AvrNx8fUN/NewPFDr91zilxGutQYbwOlpIpWpgJg0a1HnRdxlJ/abYICRWK7UFBe
1jNSkWtUf2/F2mP8XnDXxzoRb1k00wbXbZXtlLBa2fm8q0vvgciVcCipP9tqXLMC
HQQ+iRgOhmqVbMdAbV0FR2LawQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLDQrJia
LM54nB2v8HGrkMoqGtpXMB8GA1UdIwQYMBaAFNMJQMxvDBAkuEC7t9PYASY2BspZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTJCQy8yMUE5NTMxNDI0
OEExMUYwOTk4NkQwNzdDNEY5QUUwMi8wd2xBekc4TUVDUzRRTHUzMDlnQkpqWUd5
bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzB3bEF6RzhNRUNTNFFMdTMwOWdCSmpZR3lsay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MTJCQy8yMUE5NTMxNDI0OEExMUYwOTk4NkQwNzdDNEY5QUUwMi8wd2xBekc4TUVD
UzRRTHUzMDlnQkpqWUd5bGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArnE4vQb1TwFZJ7tlwXw0kTuLcpnuTL276YOJfdBSQY7lBW3OvO6pNVE5k66K
VwvIBtSV1kq+XhVPBJpSfUPubs3LNNfd2ZHkRv/sp5P/XF0vc69vKMhmpMyd9NaX
WtI4riUPM5t7CuGqYr5YHrlRkYeD0NHTUK6rDMlmy7fci82V+9KWrwa1dBfCw41w
sJnGwli+awipqngmMQDjIOy/Yq0sdl2FMi2DbCxWhleamZS5dsu6hld/awA+bQAt
J2O+qHLuZ2MacF6OhKqM7CKrYbTR3tSEryydld6k8+6hLmfcBkWDz/gmo2wn5Z1c
4b/UUDHCUHPiVgWJ7yM7+2KyTQ==
-----END CERTIFICATE-----
Generated at Sat Mar 14 18:05:28 2026 by rpki-client