Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.mft
File:                     wfLqVt--Dy-St0HdaM9WcRWzspI.mft (raw, json)
Hash identifier:          pQ2+SeyozWDFSNQ+jXXuQQhE1CcYoD1u9KM00WLwXbY=
Subject key identifier:   3C:47:74:0B:85:1C:80:D7:E4:C0:B9:1A:90:10:A0:BB:64:92:04:72
Authority key identifier: C1:F2:EA:56:DF:BE:0F:2F:92:B7:41:DD:68:CF:56:71:15:B3:B2:92
Certificate issuer:       /CN=A9147150/serialNumber=C1F2EA56DFBE0F2F92B741DD68CF567115B3B292
Certificate serial:       EE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wfLqVt--Dy-St0HdaM9WcRWzspI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.mft
Manifest number:          EB
Signing time:             Wed 21 Oct 2026 07:00:16 +0000
Manifest this update:     Wed 21 Oct 2026 07:00:15 +0000
Manifest next update:     Wed 28 Oct 2026 07:00:15 +0000
Files and hashes:         1: wfLqVt--Dy-St0HdaM9WcRWzspI.crl (hash: ebMH7nrpdvRJ+2KtPWuHitkiCWsGZgUE/PjenAuke1Q=)
                          2: EB6E0EE8677811F08B1EA154C4F9AE02.roa (hash: UrgCCNXOLmuDFDcXXpTOK2wp7L0sF7p5H0LsmWYVOV4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.crl
                          rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wfLqVt--Dy-St0HdaM9WcRWzspI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Oct 2026 04:44:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 238 (0xee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147150, serialNumber=C1F2EA56DFBE0F2F92B741DD68CF567115B3B292
        Validity
            Not Before: Oct 21 07:00:15 2026 GMT
            Not After : Oct 28 07:00:15 2026 GMT
        Subject: CN=6ad86300-7c32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:1f:0a:20:62:ab:7e:25:ed:2b:91:31:c6:40:
                    da:56:e0:09:ce:a2:5d:4a:9b:49:0b:94:2a:dd:bc:
                    c8:5c:c0:aa:4a:6d:c0:ba:f2:23:0f:db:c4:d2:46:
                    59:b6:76:ff:6c:cc:8e:04:3f:e2:a7:cd:ca:5a:49:
                    f2:7d:47:32:25:07:5a:e9:2c:9c:0e:3f:1c:b8:e3:
                    18:44:98:16:4f:75:11:1f:d4:a0:23:87:35:94:a7:
                    be:be:1f:6a:f1:9a:1a:de:72:4b:5d:71:70:c6:90:
                    0d:9e:f3:e0:34:84:59:2d:de:88:0d:ce:73:a9:69:
                    7f:c9:8f:70:29:c3:30:ea:91:1a:6a:03:c3:cc:f9:
                    df:93:23:d8:35:c2:08:35:26:75:29:b7:6e:20:32:
                    c5:09:d5:39:f1:16:b8:33:8b:59:28:7e:48:7a:25:
                    64:1c:ad:bf:99:18:62:f3:7d:e1:65:39:94:f2:17:
                    41:b7:1e:20:bc:d7:2d:15:ac:d8:08:2f:92:0e:4f:
                    c8:2f:d3:b3:cf:3e:c4:c9:28:c6:2e:08:71:ed:1a:
                    59:57:8b:a0:aa:8d:8d:2f:08:4b:95:d6:38:c5:5b:
                    1d:c3:2b:e4:6a:c0:c6:cf:fe:5a:5e:21:45:72:ef:
                    45:20:86:83:f7:c8:9a:6f:30:1f:52:ce:6f:7c:73:
                    dc:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:47:74:0B:85:1C:80:D7:E4:C0:B9:1A:90:10:A0:BB:64:92:04:72
            X509v3 Authority Key Identifier:
                keyid:C1:F2:EA:56:DF:BE:0F:2F:92:B7:41:DD:68:CF:56:71:15:B3:B2:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wfLqVt--Dy-St0HdaM9WcRWzspI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:07:ba:7a:88:a0:04:f2:5f:e3:ce:fc:b2:51:a9:c0:92:e2:
         99:01:48:7e:b3:a6:c5:a3:f4:dc:3c:a3:bc:81:4f:af:db:bb:
         c8:1c:e4:f0:78:56:80:bb:f6:c0:3a:ab:e6:7d:02:98:93:be:
         25:6c:8d:85:b5:9e:79:e8:f5:27:cd:a7:ed:08:fa:68:3f:89:
         7c:10:14:b0:cb:0f:13:f8:7e:79:b7:5b:7f:07:7e:7e:e8:bb:
         96:7c:3b:6c:10:13:68:98:de:77:d9:e8:24:3c:c5:71:46:a6:
         1b:23:0d:59:12:68:48:d4:e2:f3:82:bc:08:bf:d9:18:53:83:
         fb:01:6b:17:19:2c:4b:68:39:cf:ce:c5:9f:1e:bf:d9:13:91:
         fd:ca:8a:67:2e:8c:56:f2:b4:5e:bf:09:99:f5:6e:42:14:8c:
         46:7d:47:bf:7d:31:8d:c9:89:90:57:8b:81:dd:85:18:05:10:
         f7:d4:91:83:02:f2:c6:a2:1a:9f:2b:7f:4a:70:63:27:28:c7:
         39:1b:d9:11:fa:99:a4:55:e5:d7:f2:83:ee:7d:d1:82:3b:02:
         c3:2e:6c:e0:da:6e:a7:47:ba:27:98:a2:0b:34:cf:03:17:b5:
         0a:77:4e:17:e9:fe:da:ae:3c:12:97:9c:f0:7a:06:e4:93:8c:
         fa:3d:a3:51
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDcxNTAxMTAvBgNVBAUTKEMxRjJFQTU2REZCRTBGMkY5MkI3NDFERDY4Q0Y1Njcx
MTVCM0IyOTIwHhcNMjYxMDIxMDcwMDE1WhcNMjYxMDI4MDcwMDE1WjAYMRYwFAYD
VQQDEw02YWQ4NjMwMC03YzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7x8KIGKrfiXtK5ExxkDaVuAJzqJdSptJC5Qq3bzIXMCqSm3AuvIjD9vE0kZZ
tnb/bMyOBD/ip83KWknyfUcyJQda6SycDj8cuOMYRJgWT3URH9SgI4c1lKe+vh9q
8Zoa3nJLXXFwxpANnvPgNIRZLd6IDc5zqWl/yY9wKcMw6pEaagPDzPnfkyPYNcII
NSZ1KbduIDLFCdU58Ra4M4tZKH5IeiVkHK2/mRhi833hZTmU8hdBtx4gvNctFazY
CC+SDk/IL9Ozzz7EySjGLghx7RpZV4ugqo2NLwhLldY4xVsdwyvkasDGz/5aXiFF
cu9FIIaD98iabzAfUs5vfHPcwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDxHdAuF
HIDX5MC5GpAQoLtkkgRyMB8GA1UdIwQYMBaAFMHy6lbfvg8vkrdB3WjPVnEVs7KS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzE1MC8wOEVCREM0NDY3
NzgxMUYwQjBEMEY2NEZDNEY5QUUwMi93ZkxxVnQtLUR5LVN0MEhkYU05V2NSV3pz
cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3dmTHFWdC0tRHktU3QwSGRhTTlXY1JXenNwSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NzE1MC8wOEVCREM0NDY3NzgxMUYwQjBEMEY2NEZDNEY5QUUwMi93ZkxxVnQtLUR5
LVN0MEhkYU05V2NSV3pzcEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnwe6eoigBPJf4878slGpwJLimQFIfrOmxaP03DyjvIFPr9u7yBzk8HhWgLv2
wDqr5n0CmJO+JWyNhbWeeej1J82n7Qj6aD+JfBAUsMsPE/h+ebdbfwd+fui7lnw7
bBATaJjed9noJDzFcUamGyMNWRJoSNTi84K8CL/ZGFOD+wFrFxksS2g5z87Fnx6/
2ROR/cqKZy6MVvK0Xr8JmfVuQhSMRn1Hv30xjcmJkFeLgd2FGAUQ99SRgwLyxqIa
nyt/SnBjJyjHORvZEfqZpFXl1/KD7n3RgjsCwy5s4Npup0e6J5iiCzTPAxe1CndO
F+n+2q48Epec8HoG5JOM+j2jUQ==
-----END CERTIFICATE-----
Generated at Wed Oct 21 18:21:12 2026 by rpki-client