Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft
File:                     WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft (raw, json)
Hash identifier:          ECfIYJiKE3GZT60EyfzU0X3JT3aDTfMKVWXv0ZApipk=
Subject key identifier:   B0:C8:AD:0B:24:65:66:20:BB:A6:30:1E:BD:C3:43:EB:6A:D9:07:FB
Authority key identifier: 59:57:59:D1:7F:8A:CF:44:CC:54:D9:06:04:6C:02:F4:B1:D9:DA:A2
Certificate issuer:       /CN=A9147016/serialNumber=595759D17F8ACF44CC54D906046C02F4B1D9DAA2
Certificate serial:       0557
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft
Manifest number:          0552
Signing time:             Sat 24 Oct 2026 23:21:49 +0000
Manifest this update:     Sat 24 Oct 2026 23:21:48 +0000
Manifest next update:     Sat 31 Oct 2026 23:21:48 +0000
Files and hashes:         1: WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl (hash: GGgQhs7xZ+gFuuOfjgTr/LpY5VOYy5412PjXnWoP30E=)
                          2: 94FA2A66174B11EF84A2715AC4F9AE02.roa (hash: 2bvU2l27JfiDPTUt5UdrWGWC12SuTqfGvD8E40bRY/8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl
                          rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 23:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1367 (0x557)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147016, serialNumber=595759D17F8ACF44CC54D906046C02F4B1D9DAA2
        Validity
            Not Before: Oct 24 23:21:48 2026 GMT
            Not After : Oct 31 23:21:48 2026 GMT
        Subject: CN=6add3d8d-2e2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e3:3c:94:e5:3e:d9:2e:3d:04:26:f8:63:4b:
                    c4:a7:4c:46:69:04:c2:b4:f2:21:c0:05:4e:48:16:
                    51:c3:a6:97:4b:a5:15:b3:c6:4c:ca:94:d5:05:60:
                    73:fc:83:86:3a:6a:90:9c:e6:1b:73:65:21:83:01:
                    09:b4:25:b6:2f:f8:bc:1c:dd:f0:45:0b:8c:1f:d4:
                    cd:28:75:fe:8c:bb:7e:c8:38:42:fa:2b:4f:8a:17:
                    17:8a:40:8e:06:55:10:68:93:d6:bb:34:b1:59:57:
                    1a:44:c2:3f:33:5d:98:09:f9:62:69:09:46:9c:83:
                    58:d0:c0:13:2c:4f:e5:56:ae:90:de:8a:be:68:cc:
                    e7:19:cc:12:28:48:89:8f:d1:b5:59:44:d1:2c:35:
                    f3:a5:80:7c:cf:56:e6:13:34:3c:9b:36:fd:c9:fe:
                    7a:1f:87:20:d5:56:71:9b:28:3a:9d:e1:e1:48:cd:
                    96:28:e2:34:df:31:63:40:73:e9:3d:aa:d3:ed:72:
                    ad:37:16:cf:fd:bd:9c:d6:fd:55:b8:a5:ad:37:9c:
                    c5:20:2b:47:01:fa:53:5b:37:50:44:42:42:ed:74:
                    b1:ba:67:b8:64:1f:97:0e:ea:1c:07:49:06:71:72:
                    9d:12:49:60:9d:46:8a:f3:80:62:40:50:b0:0b:ac:
                    08:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C8:AD:0B:24:65:66:20:BB:A6:30:1E:BD:C3:43:EB:6A:D9:07:FB
            X509v3 Authority Key Identifier:
                keyid:59:57:59:D1:7F:8A:CF:44:CC:54:D9:06:04:6C:02:F4:B1:D9:DA:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:bb:b1:24:ac:e6:8b:5c:e5:69:da:10:40:8f:f3:82:c4:0f:
         ae:52:b6:df:bf:a0:ca:97:22:07:e2:f8:9f:29:fc:c3:25:55:
         81:d8:d1:38:49:2b:a7:3d:fc:d1:4e:dd:e6:05:a2:59:ab:50:
         29:72:c2:54:8e:97:1c:ee:b4:1f:22:c5:2a:49:92:3c:97:99:
         38:3e:75:11:85:c1:35:6d:06:fc:6f:f3:57:97:9b:2f:63:5a:
         06:60:8e:0a:76:db:c0:6a:ce:27:93:e9:eb:94:c9:36:2b:b4:
         59:3d:36:06:29:6c:dc:b7:56:9f:bb:1e:ff:5d:62:03:d0:5a:
         1e:b3:b4:c2:9e:6a:de:e6:e7:5d:b5:95:e0:a9:c0:9f:0d:67:
         34:e0:39:4e:19:d0:4b:be:c6:6f:8a:d3:7c:3e:d9:00:b0:80:
         d8:69:89:57:07:8c:75:f2:53:65:f2:39:31:50:fc:e5:10:7a:
         07:0e:59:1a:56:d4:62:37:7a:f1:53:16:8b:cd:ac:2e:36:d7:
         03:0b:20:d1:da:6f:d8:d7:5a:39:8a:46:9e:6f:44:be:f1:de:
         25:a6:df:56:88:76:93:84:5a:03:6c:84:28:a5:02:53:14:12:
         ca:c9:c5:1a:dd:3f:fc:38:15:1c:79:09:41:60:c1:a1:99:3e:
         d3:d5:75:07
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDcwMTYxMTAvBgNVBAUTKDU5NTc1OUQxN0Y4QUNGNDRDQzU0RDkwNjA0NkMwMkY0
QjFEOURBQTIwHhcNMjYxMDI0MjMyMTQ4WhcNMjYxMDMxMjMyMTQ4WjAYMRYwFAYD
VQQDEw02YWRkM2Q4ZC0yZTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt+M8lOU+2S49BCb4Y0vEp0xGaQTCtPIhwAVOSBZRw6aXS6UVs8ZMypTVBWBz
/IOGOmqQnOYbc2UhgwEJtCW2L/i8HN3wRQuMH9TNKHX+jLt+yDhC+itPihcXikCO
BlUQaJPWuzSxWVcaRMI/M12YCfliaQlGnINY0MATLE/lVq6Q3oq+aMznGcwSKEiJ
j9G1WUTRLDXzpYB8z1bmEzQ8mzb9yf56H4cg1VZxmyg6neHhSM2WKOI03zFjQHPp
ParT7XKtNxbP/b2c1v1VuKWtN5zFICtHAfpTWzdQREJC7XSxume4ZB+XDuocB0kG
cXKdEklgnUaK84BiQFCwC6wIkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLDIrQsk
ZWYgu6YwHr3DQ+tq2Qf7MB8GA1UdIwQYMBaAFFlXWdF/is9EzFTZBgRsAvSx2dqi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzAxNi8yRDc5MUQ0QzU2
M0QxMUVDOTVGM0RDMTZDNEY5QUUwMi9XVmRaMFgtS3owVE1WTmtHQkd3QzlMSFoy
cUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1dWZFowWC1LejBUTVZOa0dCR3dDOUxIWjJxSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NzAxNi8yRDc5MUQ0QzU2M0QxMUVDOTVGM0RDMTZDNEY5QUUwMi9XVmRaMFgtS3ow
VE1WTmtHQkd3QzlMSFoycUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbruxJKzmi1zladoQQI/zgsQPrlK237+gypciB+L4nyn8wyVVgdjROEkrpz38
0U7d5gWiWatQKXLCVI6XHO60HyLFKkmSPJeZOD51EYXBNW0G/G/zV5ebL2NaBmCO
CnbbwGrOJ5Pp65TJNiu0WT02Bils3LdWn7se/11iA9BaHrO0wp5q3ubnXbWV4KnA
nw1nNOA5ThnQS77Gb4rTfD7ZALCA2GmJVweMdfJTZfI5MVD85RB6Bw5ZGlbUYjd6
8VMWi82sLjbXAwsg0dpv2NdaOYpGnm9EvvHeJabfVoh2k4RaA2yEKKUCUxQSysnF
Gt0//DgVHHkJQWDBoZk+09V1Bw==
-----END CERTIFICATE-----
Generated at Sun Oct 25 06:48:40 2026 by rpki-client