Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.mft
File:                     fWozDw0BJJQnx_yd3dz0qCh2CwY.mft (raw, json)
Hash identifier:          Oit/8lOdL7BNpjFStuubiYJNqP6DzxBZRCOWfsBp36U=
Subject key identifier:   66:7E:16:9F:02:4F:43:0E:A6:D7:7E:74:96:9E:52:B8:0C:71:2B:73
Authority key identifier: 7D:6A:33:0F:0D:01:24:94:27:C7:FC:9D:DD:DC:F4:A8:28:76:0B:06
Certificate issuer:       /CN=A9145519/serialNumber=7D6A330F0D01249427C7FC9DDDDCF4A828760B06
Certificate serial:       1D10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWozDw0BJJQnx_yd3dz0qCh2CwY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.mft
Manifest number:          1CFC
Signing time:             Tue 02 Jun 2026 16:09:00 +0000
Manifest this update:     Tue 02 Jun 2026 16:09:00 +0000
Manifest next update:     Tue 09 Jun 2026 16:09:00 +0000
Files and hashes:         1: fWozDw0BJJQnx_yd3dz0qCh2CwY.crl (hash: mp35kDWCJLHiw9uLQ0zNx4oQ5MiGiV6C8B/YLWJBpGk=)
                          2: 78D1DAC8E45E11E681F82341C4F9AE02.roa (hash: 1+3PiyURCQ1dCtokVNGr5D8JpB6WOiYHI8MxHAWll5Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.crl
                          rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWozDw0BJJQnx_yd3dz0qCh2CwY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 15:18:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7440 (0x1d10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145519, serialNumber=7D6A330F0D01249427C7FC9DDDDCF4A828760B06
        Validity
            Not Before: Jun  2 16:09:00 2026 GMT
            Not After : Jun  9 16:09:00 2026 GMT
        Subject: CN=6a1f001c-b743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:bd:0f:ef:47:ec:5a:f7:88:84:e5:ad:62:dd:
                    7c:d4:5e:f7:7c:21:3a:02:48:ed:9c:1a:4c:bd:e7:
                    21:45:33:d7:e3:ee:58:05:76:5a:ad:80:55:7d:b9:
                    87:87:35:8b:b9:1a:b3:00:f3:bd:15:65:e3:53:3a:
                    8b:0d:e5:66:5e:8a:dc:1e:7b:c6:22:1e:af:b6:16:
                    bd:01:4a:a6:8f:86:eb:82:8c:fb:6c:00:47:16:d9:
                    96:26:3e:33:e2:b1:46:d7:22:1c:01:6d:57:db:af:
                    aa:72:3d:c3:16:34:01:c5:36:ae:08:85:82:e4:b3:
                    0f:af:2c:c2:77:6c:2d:7e:53:9c:0c:77:49:db:c5:
                    e9:62:b8:04:8b:33:16:70:c8:0a:01:7e:00:44:96:
                    e7:39:e7:bd:a6:4b:98:a5:da:34:14:94:2b:56:92:
                    f1:4b:3a:62:ef:ae:97:e7:64:df:86:02:8d:40:eb:
                    46:0c:94:4c:ca:f8:8a:58:4e:bb:28:aa:32:2b:ea:
                    56:29:03:89:f8:b3:16:4f:9d:03:f4:4a:34:6a:e1:
                    5d:44:c5:bb:52:bf:76:ae:22:83:0c:56:8b:70:1c:
                    48:13:c7:67:4d:08:0b:e6:1a:d7:47:5e:7d:8b:f6:
                    94:f0:06:56:56:64:f5:00:89:17:81:51:96:7d:6f:
                    14:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:7E:16:9F:02:4F:43:0E:A6:D7:7E:74:96:9E:52:B8:0C:71:2B:73
            X509v3 Authority Key Identifier:
                keyid:7D:6A:33:0F:0D:01:24:94:27:C7:FC:9D:DD:DC:F4:A8:28:76:0B:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWozDw0BJJQnx_yd3dz0qCh2CwY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:ca:90:33:d4:16:c7:95:ed:a4:ed:93:44:78:6e:68:32:9b:
         c4:8c:18:25:01:cb:a7:0a:92:15:c2:11:f9:85:3b:17:34:4f:
         b7:11:5c:ac:2b:bf:56:ab:ec:bc:3d:c1:d8:6f:07:19:35:31:
         3a:0e:b2:34:7f:df:c6:5a:fb:01:c8:24:ee:ab:24:c1:f8:ec:
         f5:03:a9:78:03:af:4d:08:2a:8b:f0:03:a0:c8:3f:59:75:79:
         de:40:b4:3c:8a:21:b7:67:c0:8d:6c:e9:7f:93:bc:f0:48:40:
         12:12:ec:fd:e1:8e:b0:ca:bf:ba:10:a0:8b:7d:04:0d:d5:7f:
         0a:60:b4:e9:c3:96:d6:35:82:00:a2:19:c6:60:08:05:a8:ba:
         08:3d:bd:8e:ea:76:f5:b5:ac:8a:58:4a:39:76:5f:5d:64:39:
         32:68:ee:d5:eb:1d:d2:ce:b3:01:a7:51:b7:7d:76:9e:6c:d3:
         17:f6:c5:d8:4a:95:b4:8b:79:50:b3:f8:e7:1d:da:b8:80:f1:
         ef:a6:c1:12:20:2c:cc:93:11:65:30:16:ac:97:cc:bd:76:70:
         a8:0d:a3:55:07:76:6d:fc:1a:e6:8a:a6:54:f4:98:c8:02:3a:
         e6:28:5a:67:f0:de:98:b3:25:26:ea:d4:a5:ff:ec:fb:97:a6:
         bd:da:24:e2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHRAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDU1MTkxMTAvBgNVBAUTKDdENkEzMzBGMEQwMTI0OTQyN0M3RkM5RERERENGNEE4
Mjg3NjBCMDYwHhcNMjYwNjAyMTYwOTAwWhcNMjYwNjA5MTYwOTAwWjAYMRYwFAYD
VQQDEw02YTFmMDAxYy1iNzQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6b0P70fsWveIhOWtYt181F73fCE6AkjtnBpMvechRTPX4+5YBXZarYBVfbmH
hzWLuRqzAPO9FWXjUzqLDeVmXorcHnvGIh6vtha9AUqmj4brgoz7bABHFtmWJj4z
4rFG1yIcAW1X26+qcj3DFjQBxTauCIWC5LMPryzCd2wtflOcDHdJ28XpYrgEizMW
cMgKAX4ARJbnOee9pkuYpdo0FJQrVpLxSzpi766X52TfhgKNQOtGDJRMyviKWE67
KKoyK+pWKQOJ+LMWT50D9Eo0auFdRMW7Ur92riKDDFaLcBxIE8dnTQgL5hrXR159
i/aU8AZWVmT1AIkXgVGWfW8U6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGZ+Fp8C
T0MOptd+dJaeUrgMcStzMB8GA1UdIwQYMBaAFH1qMw8NASSUJ8f8nd3c9KgodgsG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTUxOS9BRDA4QUYyNkU0
NUMxMUU2OENFREZBM0VDNEY5QUUwMi9mV296RHcwQkpKUW54X3lkM2R6MHFDaDJD
d1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZXb3pEdzBCSkpRbnhfeWQzZHowcUNoMkN3WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NTUxOS9BRDA4QUYyNkU0NUMxMUU2OENFREZBM0VDNEY5QUUwMi9mV296RHcwQkpK
UW54X3lkM2R6MHFDaDJDd1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAM8qQM9QWx5XtpO2TRHhuaDKbxIwYJQHLpwqSFcIR+YU7FzRPtxFcrCu/Vqvs
vD3B2G8HGTUxOg6yNH/fxlr7Acgk7qskwfjs9QOpeAOvTQgqi/ADoMg/WXV53kC0
PIoht2fAjWzpf5O88EhAEhLs/eGOsMq/uhCgi30EDdV/CmC06cOW1jWCAKIZxmAI
Bai6CD29jup29bWsilhKOXZfXWQ5Mmju1esd0s6zAadRt312nmzTF/bF2EqVtIt5
ULP45x3auIDx76bBEiAszJMRZTAWrJfMvXZwqA2jVQd2bfwa5oqmVPSYyAI65iha
Z/DemLMlJurUpf/s+5emvdok4g==
-----END CERTIFICATE-----
Generated at Tue Jun 2 22:23:57 2026 by rpki-client