Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft
File:                     WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft (raw, json)
Hash identifier:          XNdYoIXqNZBPl08X0l9Cexb+f7i0Gs8aKNmPf0IQIp4=
Subject key identifier:   96:12:37:9E:61:58:F9:3D:BD:5A:6C:98:91:C7:D1:A5:B4:76:CC:9C
Authority key identifier: 58:EE:E5:2D:2A:E0:92:EC:55:86:E0:70:E6:46:2C:36:35:0F:A6:E1
Certificate issuer:       /CN=A914A75A/serialNumber=58EEE52D2AE092EC5586E070E6462C36350FA6E1
Certificate serial:       0117
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WO7lLSrgkuxVhuBw5kYsNjUPpuE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft
Manifest number:          0114
Signing time:             Wed 19 Aug 2026 06:35:27 +0000
Manifest this update:     Wed 19 Aug 2026 06:35:27 +0000
Manifest next update:     Wed 26 Aug 2026 06:35:27 +0000
Files and hashes:         1: WO7lLSrgkuxVhuBw5kYsNjUPpuE.crl (hash: SMDNTNinhVN4Xkd+nK7G7EOcJGcjIzj+H7GpZZZiGw4=)
                          2: D56D67B0F48711EFBB2D9D73C4F9AE02.roa (hash: csaBSpZzq59GMLhCxwkq41kKwaXSwMxp+Vf9tiYrdrg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.crl
                          rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WO7lLSrgkuxVhuBw5kYsNjUPpuE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 06:35:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 279 (0x117)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A75A, serialNumber=58EEE52D2AE092EC5586E070E6462C36350FA6E1
        Validity
            Not Before: Aug 19 06:35:27 2026 GMT
            Not After : Aug 26 06:35:27 2026 GMT
        Subject: CN=6a854eaf-e92f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ec:46:fc:d8:78:f8:03:49:65:93:37:b6:f0:
                    e6:b6:3b:e7:c3:38:0f:42:ce:e6:15:74:54:94:bd:
                    62:df:9a:bb:46:d6:ce:20:62:ed:6b:1e:bb:2b:6e:
                    db:ba:b2:ae:57:2b:c6:9b:af:51:9a:bd:43:14:22:
                    2b:ae:81:c3:06:e5:2f:c8:f4:6f:99:7c:7c:4d:fa:
                    65:6c:18:be:e3:fa:1d:ba:ae:96:f4:25:a0:f1:9a:
                    0b:c3:4e:5f:48:8d:c2:cb:80:9c:d9:9f:99:2b:bd:
                    f1:6f:4a:7d:4c:1d:13:92:ad:05:e5:de:63:fa:15:
                    6d:c7:fd:4a:86:04:69:4b:a4:ae:59:2d:94:05:2a:
                    3f:a9:68:12:08:e0:d5:e9:c8:3e:c6:b6:c8:b2:37:
                    58:fa:af:01:d8:cf:e2:df:57:98:59:0d:36:1a:2a:
                    42:cf:3a:0d:d1:0f:7c:6d:0b:8e:ea:25:0d:58:03:
                    47:59:93:bd:65:9c:20:3c:68:23:b7:86:88:c7:14:
                    51:55:92:54:3c:e3:5d:c3:e4:a9:53:c3:50:07:08:
                    48:14:fd:a8:ab:44:9b:a9:60:4f:54:fb:a0:86:05:
                    17:d0:d1:34:be:a8:a3:c7:21:de:0f:73:2d:45:fa:
                    88:55:c4:5b:dd:44:73:b4:09:c5:78:c8:69:e5:a7:
                    1d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:12:37:9E:61:58:F9:3D:BD:5A:6C:98:91:C7:D1:A5:B4:76:CC:9C
            X509v3 Authority Key Identifier:
                keyid:58:EE:E5:2D:2A:E0:92:EC:55:86:E0:70:E6:46:2C:36:35:0F:A6:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WO7lLSrgkuxVhuBw5kYsNjUPpuE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:79:0d:fb:73:d9:58:54:e6:64:38:82:b3:60:b3:fe:d3:f0:
         a3:53:6f:ad:c3:6b:42:6b:94:fc:b2:8f:f9:80:b9:59:c9:05:
         78:55:ab:e8:72:a0:9c:e2:75:b6:1a:05:66:db:fc:04:e3:cc:
         e0:fb:c5:4f:8e:59:96:77:5b:7d:a1:50:6d:52:79:fe:43:ce:
         5d:9f:99:fc:bd:c1:49:0c:c6:6a:4f:7a:a6:70:93:5b:b7:42:
         c0:6f:9b:61:72:05:36:1f:8f:bc:05:ee:e2:96:de:60:7c:8a:
         1f:81:0d:9b:84:30:2e:47:e8:24:2d:50:35:54:3f:71:61:1e:
         b4:84:1b:c6:ea:ee:f0:79:c8:cc:8a:01:a2:ac:0e:e2:4c:87:
         b2:49:8d:e4:8c:a9:86:bd:80:f7:a1:93:6c:b6:12:75:c5:d1:
         78:b5:f8:b2:6f:82:5c:9f:fe:38:5f:d9:c8:83:e6:35:ed:91:
         40:4e:92:c1:ee:cb:33:74:64:29:a0:d8:66:c1:b3:b5:99:ab:
         d0:9a:7c:14:97:8b:0b:4e:11:55:04:8f:66:55:a9:34:4c:5d:
         0c:25:a6:b2:ec:b2:bd:ed:e1:29:a9:82:8e:6e:ac:5d:7b:a3:
         d8:07:a3:11:27:60:ce:5b:4a:9d:13:1c:61:d9:28:df:4d:06:
         14:db:bd:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:46:10 2026 by rpki-client