Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft
File:                     0wlAzG8MECS4QLu309gBJjYGylk.mft (raw, json)
Hash identifier:          ccOPw+YrzcYy9Uc4Pca3LiVKdfEDjrky+ICgqFB4zD8=
Subject key identifier:   6C:E5:EB:58:B4:A3:29:70:1A:97:02:A7:03:0A:0B:64:0F:BD:58:17
Authority key identifier: D3:09:40:CC:6F:0C:10:24:B8:40:BB:B7:D3:D8:01:26:36:06:CA:59
Certificate issuer:       /CN=A91412BC/serialNumber=D30940CC6F0C1024B840BBB7D3D801263606CA59
Certificate serial:       011A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wlAzG8MECS4QLu309gBJjYGylk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft
Manifest number:          0114
Signing time:             Wed 21 Oct 2026 06:28:50 +0000
Manifest this update:     Wed 21 Oct 2026 06:28:49 +0000
Manifest next update:     Wed 28 Oct 2026 06:28:49 +0000
Files and hashes:         1: 0wlAzG8MECS4QLu309gBJjYGylk.crl (hash: /BGFDMMufQBPJOghGoqI6AJOIS0nIHYSFgOzLtPoRqw=)
                          2: 936B147E248A11F0AD4B1179C4F9AE02.roa (hash: LyQfyLurnqqH+WScrTsxG9TtblSEPenqHyPotX69udU=)
                          3: 92F3063C248A11F0AD4B1179C4F9AE02.roa (hash: snLyJB1mtilsonSg8bolW4tfoO6cxLckhLrYHgEKQiQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.crl
                          rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wlAzG8MECS4QLu309gBJjYGylk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Oct 2026 06:28:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 282 (0x11a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91412BC, serialNumber=D30940CC6F0C1024B840BBB7D3D801263606CA59
        Validity
            Not Before: Oct 21 06:28:49 2026 GMT
            Not After : Oct 28 06:28:49 2026 GMT
        Subject: CN=6ad85ba2-4c0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:12:33:be:08:2b:24:d3:9b:ef:9e:e4:e5:66:
                    51:38:47:f6:c2:9b:d5:28:2f:e4:a9:27:f1:4c:39:
                    05:6e:4a:3c:a4:e8:70:ef:a0:09:7b:f8:69:dd:06:
                    20:39:d7:fb:04:eb:5a:6e:e5:e8:59:6f:bc:67:62:
                    c8:77:18:8d:23:c4:64:6c:4d:c9:85:60:b8:98:36:
                    2e:d4:bb:ce:b6:d2:af:51:de:a9:6c:16:78:8b:b4:
                    32:74:db:6d:11:71:d8:51:cd:6f:23:da:05:c0:97:
                    56:fb:8c:89:dc:3c:ad:8f:7e:e7:b7:66:4a:cb:33:
                    a2:37:2d:b2:ae:a3:cc:4b:b8:ba:fd:2c:d2:50:39:
                    22:80:c2:0a:87:d9:6a:6b:94:c2:40:fe:7c:3a:53:
                    3b:cf:a4:7a:7f:74:9b:56:b7:c8:9d:f4:40:43:55:
                    da:80:de:c3:cb:c7:26:f3:87:db:b8:f4:56:5d:08:
                    20:ed:8b:1e:94:e0:54:85:b4:e6:d9:28:ab:76:5a:
                    0d:7c:d5:86:d9:06:a1:4e:51:dd:cc:14:14:ef:3b:
                    d0:47:30:ea:a4:a9:46:af:f6:50:68:91:7c:c6:0e:
                    87:77:18:a0:01:64:5f:7a:df:24:92:97:f9:14:d9:
                    95:cf:ba:55:03:4b:ae:bc:3f:4d:38:ec:46:a1:63:
                    0b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E5:EB:58:B4:A3:29:70:1A:97:02:A7:03:0A:0B:64:0F:BD:58:17
            X509v3 Authority Key Identifier:
                keyid:D3:09:40:CC:6F:0C:10:24:B8:40:BB:B7:D3:D8:01:26:36:06:CA:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wlAzG8MECS4QLu309gBJjYGylk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:44:09:8b:9b:34:88:3d:ea:17:21:02:25:7d:55:65:41:5d:
         27:87:9e:74:1d:a8:ce:4b:9c:6e:00:ad:0e:68:02:16:3b:aa:
         27:ef:14:d9:4e:c7:c0:8d:8e:43:ed:e3:a6:9f:33:a7:c9:04:
         60:74:cd:f4:16:79:b3:dd:be:ef:94:9e:ea:74:d8:13:49:fd:
         b4:47:9b:dd:4b:dd:83:c0:71:37:d9:e6:90:27:12:4b:da:79:
         44:ee:db:6c:dc:1a:13:17:0c:90:0d:da:8e:e4:d3:b7:02:78:
         29:c7:71:92:85:f7:ad:65:ce:32:f5:ff:10:48:3a:26:6d:62:
         dd:95:95:9a:6a:a5:26:4e:7e:91:e5:b0:9f:4c:f2:29:8c:96:
         96:6a:b2:c4:7b:61:5d:4f:0d:86:62:77:35:68:b1:b5:07:90:
         52:90:a2:09:21:4f:c8:8e:e6:d4:eb:65:a9:a1:4f:3d:1a:67:
         1c:59:63:57:48:d6:98:5f:df:3d:57:65:5a:34:5e:f0:83:82:
         29:95:5e:aa:df:d0:95:e8:df:01:ac:95:9b:83:31:9b:dd:98:
         43:c6:70:b3:6d:63:08:53:f9:e1:89:b9:99:e5:9f:79:ac:a5:
         1d:8f:a8:3a:ec:7e:17:b0:6b:d1:46:dd:a8:02:ac:22:be:7d:
         22:1b:c8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 06:07:45 2026 by rpki-client