Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
File:                     wvKOnRiEOcT-afY6TKptpCSWKR0.mft (raw, json)
Hash identifier:          5gJ5QxXs3UTYvogEM9PAAsTOFFh6j61wxE8pvSoFYno=
Subject key identifier:   E8:D0:B0:B4:62:A4:EE:9E:46:A3:AB:23:02:7F:F1:02:F9:B7:BE:77
Authority key identifier: C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D
Certificate issuer:       /CN=A9145D25/serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D
Certificate serial:       0693
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
Manifest number:          0644
Signing time:             Tue 08 Sep 2026 22:58:12 +0000
Manifest this update:     Tue 08 Sep 2026 22:58:11 +0000
Manifest next update:     Tue 15 Sep 2026 22:58:11 +0000
Files and hashes:         1: wvKOnRiEOcT-afY6TKptpCSWKR0.crl (hash: M+ag8Cvj/QuvHF9aiX75ZqpShIUYyDY7fuqTTfSs2G4=)
                          2: DE6603CAEBD711F092381BAE6B6F56BC.roa (hash: 7MSjFuhWPk6nWpPHBFrMgveqrJSXQoiVW5E6LTrh718=)
                          3: 35A768B8563B11EC94608B5BC4F9AE02.roa (hash: 39V53YzmDceqUazb8d3OVe2vw3wPvdKD2B/YmH5KoRc=)
                          4: 131FA4B092AD11F0AF4F4C85C4F9AE02.roa (hash: ipyTnc82ut8pZyRx4sDro4mSJHvZJZYQ7p6XZ0S5TUo=)
                          5: BFFF6C4A07D911EDA41A0B25C4F9AE02.roa (hash: ZABorRdOgk7wbU+CvLj5803xv1dV9HRIAI1lvnJcQOE=)
                          6: C08B939607D911EDA41A0B25C4F9AE02.roa (hash: 5mOXYDCuxkdq/XEQwoY69lXUcjkoAmJ8AwIjsdZITME=)
                          7: 0E33CCCADB0911F0A26F2FDC81D3641D.roa (hash: wRUqj1U1lm/c7GaruMVl1h/KaQXgprhVdKwDeDAwvxY=)
                          8: 85B13C3299CE11F087D1450FC4F9AE02.roa (hash: x1M/zagdNVIvwZQzDJ/coWbKF0sT48jPU3tB0Z3LiO8=)
                          9: 2379396E35DA11F08BAAE414C4F9AE02.roa (hash: wqvssZr8KniDppUjZkMFtJ/Vcm4eodrzwIwq5W5awEw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl
                          rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 15 Sep 2026 22:58:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1683 (0x693)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145D25, serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D
        Validity
            Not Before: Sep  8 22:58:11 2026 GMT
            Not After : Sep 15 22:58:11 2026 GMT
        Subject: CN=6aa09304-00d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c9:5a:49:3f:2c:eb:9b:36:99:f4:76:ce:42:
                    aa:cc:d8:30:71:8f:5a:11:59:b2:d6:3b:0f:bb:7a:
                    5c:c5:22:00:6b:59:62:d2:87:42:98:7c:ec:54:d1:
                    c8:73:53:be:9a:67:c0:d9:36:28:4e:6b:2b:5f:7d:
                    ba:b4:49:58:a4:2b:2f:b4:5c:be:b1:89:ba:f3:0a:
                    5e:b1:eb:af:4c:24:3c:7c:0f:57:27:e9:e8:a7:08:
                    a3:e5:67:68:7f:25:ce:68:32:02:12:03:9a:ce:de:
                    b8:da:b4:66:a0:5b:4b:d3:58:7b:98:8b:ac:d8:dd:
                    11:bd:25:4e:6d:42:03:2b:3b:d5:01:e4:b4:5d:74:
                    08:4f:21:48:33:ba:25:78:a1:64:2c:a4:53:0a:7e:
                    db:37:89:6f:b5:f7:66:2d:be:5e:5f:19:c2:83:f0:
                    30:5b:b0:d1:ca:8c:e7:3c:34:97:c5:59:55:d8:f3:
                    58:ce:64:88:0e:84:ab:30:de:23:58:36:90:68:6d:
                    0d:55:be:47:f4:da:90:6d:c5:cc:df:4d:8b:33:97:
                    ba:f0:2a:34:cc:1d:8a:cf:da:07:99:96:75:50:ae:
                    78:d0:2a:9a:18:81:be:46:47:d3:c9:39:7d:fd:b6:
                    3b:ba:63:c8:57:ad:31:7b:71:74:8c:9b:8f:a2:df:
                    3d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:D0:B0:B4:62:A4:EE:9E:46:A3:AB:23:02:7F:F1:02:F9:B7:BE:77
            X509v3 Authority Key Identifier:
                keyid:C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:75:87:a8:28:7e:d8:74:7f:ff:ec:6b:1a:ce:6d:f3:8e:65:
         ca:5d:bb:e1:5a:1b:f2:70:16:17:27:fa:69:3a:68:51:91:85:
         11:0b:66:63:82:b1:87:09:74:e6:a9:89:28:85:15:fc:27:74:
         fe:65:5e:1e:63:a1:b0:7c:a2:b9:1e:57:4d:a9:d1:44:43:bf:
         65:4d:74:fc:1d:b9:ab:93:9f:2a:c1:57:8f:df:06:4f:ed:a3:
         a2:8d:6c:c0:0e:a1:dc:51:d0:1a:7f:2a:03:17:bf:18:e8:7e:
         24:a4:3f:4b:c5:23:d8:32:57:fc:2e:72:d4:09:54:da:0d:9c:
         ff:f8:b1:11:11:db:e9:7c:94:c9:fe:83:4e:07:9a:01:b3:6e:
         74:5a:e2:b1:bc:eb:63:f8:20:e2:dc:49:cd:5c:23:44:22:bb:
         b6:33:bd:8a:0d:97:d6:83:b1:33:cd:1a:ae:a2:b9:96:73:ae:
         f5:a8:68:a9:fb:6a:dd:81:97:0b:7b:ea:35:98:3e:56:31:56:
         c5:6b:88:7d:7c:6d:73:14:9b:46:cb:e8:fd:77:64:6a:8d:65:
         3b:d2:12:6f:3c:72:12:1a:00:06:50:37:cd:21:67:e4:8c:d0:
         99:34:c4:d2:75:b5:8b:a3:ca:84:b5:34:be:a4:4c:8c:66:5d:
         47:c1:d6:e2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBpMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDVEMjUxMTAvBgNVBAUTKEMyRjI4RTlEMTg4NDM5QzRGRTY5RjYzQTRDQUE2REE0
MjQ5NjI5MUQwHhcNMjYwOTA4MjI1ODExWhcNMjYwOTE1MjI1ODExWjAYMRYwFAYD
VQQDEw02YWEwOTMwNC0wMGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1slaST8s65s2mfR2zkKqzNgwcY9aEVmy1jsPu3pcxSIAa1li0odCmHzsVNHI
c1O+mmfA2TYoTmsrX326tElYpCsvtFy+sYm68wpeseuvTCQ8fA9XJ+nopwij5Wdo
fyXOaDICEgOazt642rRmoFtL01h7mIus2N0RvSVObUIDKzvVAeS0XXQITyFIM7ol
eKFkLKRTCn7bN4lvtfdmLb5eXxnCg/AwW7DRyoznPDSXxVlV2PNYzmSIDoSrMN4j
WDaQaG0NVb5H9NqQbcXM302LM5e68Co0zB2Kz9oHmZZ1UK540CqaGIG+RkfTyTl9
/bY7umPIV60xe3F0jJuPot89QwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOjQsLRi
pO6eRqOrIwJ/8QL5t753MB8GA1UdIwQYMBaAFMLyjp0YhDnE/mn2OkyqbaQklikd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUQyNS82N0YyQjBEODBC
RDIxMUVDQkFBNDgwNkFDNEY5QUUwMi93dktPblJpRU9jVC1hZlk2VEtwdHBDU1dL
UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3d2S09uUmlFT2NULWFmWTZUS3B0cENTV0tSMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NUQyNS82N0YyQjBEODBCRDIxMUVDQkFBNDgwNkFDNEY5QUUwMi93dktPblJpRU9j
VC1hZlk2VEtwdHBDU1dLUjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAnWHqCh+2HR//+xrGs5t845lyl274Vob8nAWFyf6aTpoUZGFEQtmY4Kxhwl0
5qmJKIUV/Cd0/mVeHmOhsHyiuR5XTanRREO/ZU10/B25q5OfKsFXj98GT+2joo1s
wA6h3FHQGn8qAxe/GOh+JKQ/S8Uj2DJX/C5y1AlU2g2c//ixERHb6XyUyf6DTgea
AbNudFrisbzrY/gg4txJzVwjRCK7tjO9ig2X1oOxM80arqK5lnOu9ahoqftq3YGX
C3vqNZg+VjFWxWuIfXxtcxSbRsvo/Xdkao1lO9ISbzxyEhoABlA3zSFn5IzQmTTE
0nW1i6PKhLU0vqRMjGZdR8HW4g==
-----END CERTIFICATE-----
Generated at Thu Sep 10 08:14:27 2026 by rpki-client