Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft
File:                     WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft (raw, json)
Hash identifier:          bavP6KR/5J5fjSeT1H5g1Q7G4QPiX3KbCWZp2eZRNTk=
Subject key identifier:   30:E1:42:24:96:94:C1:A4:AA:E5:B1:D5:C7:87:D3:FE:DD:23:DB:33
Authority key identifier: 59:57:59:D1:7F:8A:CF:44:CC:54:D9:06:04:6C:02:F4:B1:D9:DA:A2
Certificate issuer:       /CN=A9147016/serialNumber=595759D17F8ACF44CC54D906046C02F4B1D9DAA2
Certificate serial:       050D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft
Manifest number:          0508
Signing time:             Mon 01 Jun 2026 00:18:04 +0000
Manifest this update:     Mon 01 Jun 2026 00:18:04 +0000
Manifest next update:     Mon 08 Jun 2026 00:18:04 +0000
Files and hashes:         1: WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl (hash: f1cC/oYaHUl2T76dgiRjRQJas1SaKr6J0tdm53si+bs=)
                          2: 94FA2A66174B11EF84A2715AC4F9AE02.roa (hash: 2bvU2l27JfiDPTUt5UdrWGWC12SuTqfGvD8E40bRY/8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl
                          rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 00:18:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1293 (0x50d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147016, serialNumber=595759D17F8ACF44CC54D906046C02F4B1D9DAA2
        Validity
            Not Before: Jun  1 00:18:04 2026 GMT
            Not After : Jun  8 00:18:04 2026 GMT
        Subject: CN=6a1ccfbc-b20d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:75:9c:ad:cf:02:23:fd:54:bd:e4:55:9f:3e:
                    15:ca:e9:86:d6:03:f7:8b:df:c3:2e:fd:c0:1d:5f:
                    23:ec:c0:78:89:70:25:0e:8c:5e:65:4f:85:86:c4:
                    92:0b:66:7e:8c:45:8d:cf:94:54:73:12:48:fd:77:
                    01:c4:16:eb:b2:ec:f8:29:57:6c:67:88:78:1a:6a:
                    80:6d:c6:5a:13:a4:35:a2:7f:72:63:31:62:c5:2b:
                    e3:d8:b1:4b:94:0a:e4:53:1d:9b:4a:e3:ec:cf:92:
                    56:d7:55:94:ec:69:db:51:08:23:87:a1:08:3a:c8:
                    9e:da:38:e4:11:9a:91:e4:60:6b:0c:a3:5f:81:ac:
                    c6:ad:a5:7a:14:1a:37:8d:60:2e:26:e6:28:09:1d:
                    cf:2d:c4:da:2c:da:74:5f:1f:46:5a:99:a1:40:ec:
                    6d:0d:f6:db:a1:a1:eb:d9:cf:69:2a:32:68:cd:87:
                    2a:54:d8:ca:49:05:9d:e8:e5:66:91:e2:1f:64:67:
                    b2:6f:f1:bb:6a:0a:2f:9f:4c:81:15:a8:d2:69:47:
                    0c:da:b9:56:48:d4:f0:e6:d9:03:10:9b:8c:09:b8:
                    85:65:09:16:1f:a0:c1:80:f4:2a:4a:26:e1:63:62:
                    e2:bc:09:b5:a0:48:1e:35:10:1e:d0:bd:4b:0a:b6:
                    2c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:E1:42:24:96:94:C1:A4:AA:E5:B1:D5:C7:87:D3:FE:DD:23:DB:33
            X509v3 Authority Key Identifier:
                keyid:59:57:59:D1:7F:8A:CF:44:CC:54:D9:06:04:6C:02:F4:B1:D9:DA:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:07:12:79:b7:00:88:fa:bb:60:74:88:9c:73:21:70:de:6b:
         2c:61:37:60:01:fc:3f:82:74:97:71:ff:e2:43:30:71:05:f7:
         10:cc:34:52:f4:30:76:da:d6:fc:eb:e4:5e:6e:c2:c1:0f:85:
         d8:7e:9d:36:6d:6b:89:58:b4:f0:bf:b8:83:8a:7a:6b:6c:6c:
         ce:2c:4d:cf:9d:b6:f9:31:c1:9e:4e:cd:55:f1:b2:8b:15:29:
         92:29:3c:b9:82:e8:c9:83:07:2b:46:37:71:22:97:50:4c:94:
         05:4f:17:a4:aa:71:1a:fc:d3:a5:df:a1:6f:2d:40:69:ed:c4:
         34:6f:23:3e:7a:e9:7c:25:34:26:51:a6:65:49:6f:5e:f9:98:
         c3:40:0d:7f:57:6c:b9:c7:c8:8f:06:2d:65:5f:bf:6b:75:57:
         54:6e:ad:d5:93:45:62:1f:9b:3c:af:3d:41:0f:cf:05:1e:4d:
         59:01:a8:e0:56:bc:ac:26:c9:a8:1b:50:1d:c4:24:63:65:cd:
         9d:d0:f8:df:76:a4:59:e7:7a:63:82:86:66:2f:df:04:e2:1a:
         62:9a:82:75:0b:f3:a3:17:a1:30:5a:00:c2:1e:fd:12:f6:81:
         94:8d:98:90:b4:0a:e1:a5:ae:cb:b9:87:23:59:cb:a1:51:12:
         c7:61:01:5e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDcwMTYxMTAvBgNVBAUTKDU5NTc1OUQxN0Y4QUNGNDRDQzU0RDkwNjA0NkMwMkY0
QjFEOURBQTIwHhcNMjYwNjAxMDAxODA0WhcNMjYwNjA4MDAxODA0WjAYMRYwFAYD
VQQDEw02YTFjY2ZiYy1iMjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA93Wcrc8CI/1UveRVnz4VyumG1gP3i9/DLv3AHV8j7MB4iXAlDoxeZU+FhsSS
C2Z+jEWNz5RUcxJI/XcBxBbrsuz4KVdsZ4h4GmqAbcZaE6Q1on9yYzFixSvj2LFL
lArkUx2bSuPsz5JW11WU7GnbUQgjh6EIOsie2jjkEZqR5GBrDKNfgazGraV6FBo3
jWAuJuYoCR3PLcTaLNp0Xx9GWpmhQOxtDfbboaHr2c9pKjJozYcqVNjKSQWd6OVm
keIfZGeyb/G7agovn0yBFajSaUcM2rlWSNTw5tkDEJuMCbiFZQkWH6DBgPQqSibh
Y2LivAm1oEgeNRAe0L1LCrYsVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDDhQiSW
lMGkquWx1ceH0/7dI9szMB8GA1UdIwQYMBaAFFlXWdF/is9EzFTZBgRsAvSx2dqi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzAxNi8yRDc5MUQ0QzU2
M0QxMUVDOTVGM0RDMTZDNEY5QUUwMi9XVmRaMFgtS3owVE1WTmtHQkd3QzlMSFoy
cUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1dWZFowWC1LejBUTVZOa0dCR3dDOUxIWjJxSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NzAxNi8yRDc5MUQ0QzU2M0QxMUVDOTVGM0RDMTZDNEY5QUUwMi9XVmRaMFgtS3ow
VE1WTmtHQkd3QzlMSFoycUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAuQcSebcAiPq7YHSInHMhcN5rLGE3YAH8P4J0l3H/4kMwcQX3EMw0UvQwdtrW
/OvkXm7CwQ+F2H6dNm1riVi08L+4g4p6a2xszixNz522+THBnk7NVfGyixUpkik8
uYLoyYMHK0Y3cSKXUEyUBU8XpKpxGvzTpd+hby1Aae3ENG8jPnrpfCU0JlGmZUlv
XvmYw0ANf1dsucfIjwYtZV+/a3VXVG6t1ZNFYh+bPK89QQ/PBR5NWQGo4Fa8rCbJ
qBtQHcQkY2XNndD433akWed6Y4KGZi/fBOIaYpqCdQvzoxehMFoAwh79EvaBlI2Y
kLQK4aWuy7mHI1nLoVESx2EBXg==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:33:59 2026 by rpki-client