Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.mft
File:                     wS8PVy2jONITRB7wfKUR0anIm20.mft (raw, json)
Hash identifier:          Igcn5tML5O1867xwhiNFwkXDwlvARL5sBJpoVFwyOkM=
Subject key identifier:   93:94:B1:7D:61:93:FA:F9:17:A0:F2:1F:AB:56:EE:72:83:70:A6:1C
Authority key identifier: C1:2F:0F:57:2D:A3:38:D2:13:44:1E:F0:7C:A5:11:D1:A9:C8:9B:6D
Certificate issuer:       /CN=A916CA70/serialNumber=C12F0F572DA338D213441EF07CA511D1A9C89B6D
Certificate serial:       0867
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wS8PVy2jONITRB7wfKUR0anIm20.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.mft
Manifest number:          085E
Signing time:             Wed 20 May 2026 20:49:20 +0000
Manifest this update:     Wed 20 May 2026 20:49:19 +0000
Manifest next update:     Wed 27 May 2026 20:49:19 +0000
Files and hashes:         1: wS8PVy2jONITRB7wfKUR0anIm20.crl (hash: Em9IDuTBcY56UI6xEuvwIRo6eWLHZUkUTqNtgl6/y5k=)
                          2: 1E4394CC03AC11EBBA025F2BC4F9AE02.roa (hash: BMSY5fq6KZKrb45yJ074fWZzYymnjf99nujloWmOdaU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.crl
                          rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wS8PVy2jONITRB7wfKUR0anIm20.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 20:49:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2151 (0x867)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CA70, serialNumber=C12F0F572DA338D213441EF07CA511D1A9C89B6D
        Validity
            Not Before: May 20 20:49:19 2026 GMT
            Not After : May 27 20:49:19 2026 GMT
        Subject: CN=6a0e1e50-390d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bd:31:da:7b:27:00:9c:83:42:fa:94:ba:59:
                    8b:8c:82:3a:b1:00:07:77:3e:a7:f5:82:25:bc:72:
                    40:0b:cc:3a:ce:f6:70:f2:74:ce:62:30:2b:a9:d0:
                    bd:c7:a9:dc:78:41:f3:03:0a:16:ca:5d:de:03:a3:
                    83:7d:04:03:47:7c:57:97:6c:c7:b8:ba:9a:16:ef:
                    b1:59:45:5d:44:ae:0e:c2:b8:ce:21:4b:27:ad:62:
                    26:6e:b2:74:e4:db:6a:e5:f1:d4:59:7f:fd:e2:eb:
                    7a:d2:19:ee:4e:77:a9:af:77:c7:da:00:d5:ed:9b:
                    45:8f:02:9f:53:b2:0f:2b:7d:fb:25:8b:bd:84:88:
                    28:b0:d4:e8:1c:f6:54:1b:50:c2:e2:d1:63:30:b5:
                    f9:7f:b5:4b:7a:24:88:a1:a3:b7:31:df:b5:b4:4e:
                    a1:b2:5b:a6:96:f7:93:0f:12:8d:fb:09:65:8d:8d:
                    f1:15:42:3a:5b:3e:8a:bc:04:70:34:99:71:6a:c4:
                    99:e8:c9:5b:b3:2e:9f:1e:b1:16:b6:84:e6:f5:1b:
                    f2:05:75:72:b8:2a:f5:71:71:b2:8f:a4:bd:61:d4:
                    00:20:5c:69:0d:97:88:db:36:67:ae:be:f3:aa:e7:
                    bd:ce:d4:fc:49:a5:76:a6:86:30:0e:b3:57:37:cb:
                    59:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:94:B1:7D:61:93:FA:F9:17:A0:F2:1F:AB:56:EE:72:83:70:A6:1C
            X509v3 Authority Key Identifier:
                keyid:C1:2F:0F:57:2D:A3:38:D2:13:44:1E:F0:7C:A5:11:D1:A9:C8:9B:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wS8PVy2jONITRB7wfKUR0anIm20.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:de:c7:91:bd:55:81:73:4e:19:75:95:5d:0c:d9:29:f6:6f:
         6d:b0:9c:19:76:59:31:f9:12:12:94:e4:49:2d:cf:dc:a5:9b:
         a1:f4:6f:57:3c:20:99:b2:80:9a:68:cb:a5:73:c2:f3:1b:2e:
         9b:8b:9f:f5:47:19:35:0f:8c:e1:e9:4b:fd:31:83:37:d1:94:
         cc:9b:19:b2:f9:5e:f7:85:85:52:a8:06:d1:46:6f:8e:70:74:
         05:87:43:b7:4a:c0:0f:34:6d:66:66:98:15:b5:f6:9a:80:ab:
         f8:83:38:f2:2b:4a:e9:74:38:da:c6:b1:11:d8:cc:16:4a:c3:
         09:75:69:97:20:92:c3:4d:b5:83:ee:4d:87:ba:c6:c4:87:e1:
         f0:c7:0d:29:a1:91:89:77:c6:e5:86:3c:94:fe:22:06:56:f0:
         1a:36:bd:75:a3:9f:0f:d8:29:eb:ab:97:d9:10:8e:ff:3d:3c:
         1c:f6:d2:bc:46:50:1b:34:14:6a:4f:18:d6:96:71:4c:60:42:
         bc:ee:e3:d8:fc:98:f3:71:23:88:ec:bd:49:84:45:b8:81:3b:
         b1:e2:55:d0:7e:b7:7a:75:9d:46:25:14:ea:03:ad:56:ce:30:
         6d:e9:eb:c8:4a:fb:48:7b:f1:27:a5:52:48:43:31:99:cc:0e:
         dd:45:ed:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:16:22 2026 by rpki-client