Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.mft
File:                     WothvFOjJNeitPQVPQd0bsKjNdI.mft (raw, json)
Hash identifier:          m4vcndKxabD6lGXVG45GxL1DTDb82/UaUBST7akGc0o=
Subject key identifier:   01:05:05:DC:B7:D3:4F:52:60:DC:B4:9C:C0:DE:BB:86:92:5F:DE:30
Authority key identifier: 5A:8B:61:BC:53:A3:24:D7:A2:B4:F4:15:3D:07:74:6E:C2:A3:35:D2
Certificate issuer:       /CN=A9173D12/serialNumber=5A8B61BC53A324D7A2B4F4153D07746EC2A335D2
Certificate serial:       01C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.mft
Manifest number:          01A0
Signing time:             Mon 05 Oct 2026 04:38:53 +0000
Manifest this update:     Mon 05 Oct 2026 04:38:52 +0000
Manifest next update:     Mon 12 Oct 2026 04:38:52 +0000
Files and hashes:         1: WothvFOjJNeitPQVPQd0bsKjNdI.crl (hash: uibthQ7lwdNvNnExEGT1vr78vXTb8KvYLdEZAiplZTE=)
                          2: AE51756A556B11EFA5FB1569C4F9AE02.roa (hash: E4V8i1GbSrj3ckCIhJ/JtVFnax8DC57jYmR1XIQG+vk=)
                          3: AEDDE1EE556B11EFA5FB1569C4F9AE02.roa (hash: xMJXOqvAMG5TD2hbvlqzUJJYRLCDemupNItYZ2pd+WI=)
                          4: 014A2E90BC5C11EF9108934FC4F9AE02.roa (hash: zxfTHKrHEVsREM+8xz5AnHMO6VTB3ebrJdSrmp7BSxA=)
                          5: 02A3523ABC5C11EF9108934FC4F9AE02.roa (hash: q8UDUK+lCCiuMwwyo6M2XjilkBBpUcYJdEaZaA3MWC4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.crl
                          rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 04:38:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 455 (0x1c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173D12, serialNumber=5A8B61BC53A324D7A2B4F4153D07746EC2A335D2
        Validity
            Not Before: Oct  5 04:38:52 2026 GMT
            Not After : Oct 12 04:38:52 2026 GMT
        Subject: CN=6ac329dd-4d12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ef:1b:b5:a1:7a:4d:1a:96:d5:12:4e:74:b1:
                    08:fd:8c:96:d2:8e:7f:d8:dc:87:cb:4d:35:b0:67:
                    8b:16:96:c4:be:82:e3:97:a6:66:26:9a:58:a8:73:
                    e1:94:5a:a8:24:69:92:d3:ce:50:b4:66:7c:e9:c5:
                    04:ed:c5:81:35:3e:57:fa:2a:a5:69:b5:e8:e4:8e:
                    c9:bb:c7:c4:a8:1b:33:5c:71:20:c3:fa:a6:92:d6:
                    65:fa:08:47:cb:91:11:f1:5e:ee:72:00:a0:d0:cf:
                    84:39:d6:59:68:e7:97:f1:c9:91:fa:7e:b6:b9:98:
                    34:79:0c:6c:fa:55:9f:31:e6:d0:90:bd:8c:d1:52:
                    76:11:23:55:14:92:cc:ff:4f:45:e0:2a:a1:6b:b1:
                    be:ab:e9:73:ba:14:65:ac:c8:16:8e:6d:a6:00:ea:
                    be:1e:84:85:f5:96:77:26:b2:6e:f6:76:ef:5e:3a:
                    d7:5e:30:fa:6c:28:01:58:b5:ca:66:d3:71:e7:7c:
                    76:95:ca:27:1a:3c:32:ed:41:95:17:c0:20:3c:29:
                    cf:23:d2:e4:61:40:c8:f8:ad:b3:d5:3b:49:81:b2:
                    64:e8:e3:70:50:48:10:c2:9b:72:5c:72:a8:fc:23:
                    b2:c0:35:cf:c4:aa:4f:ec:9a:83:1c:b8:64:78:e8:
                    39:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:05:05:DC:B7:D3:4F:52:60:DC:B4:9C:C0:DE:BB:86:92:5F:DE:30
            X509v3 Authority Key Identifier:
                keyid:5A:8B:61:BC:53:A3:24:D7:A2:B4:F4:15:3D:07:74:6E:C2:A3:35:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:a4:45:4b:9c:5e:5d:d8:72:ea:57:9e:8e:af:ef:db:d9:b1:
         8f:ca:9c:57:a0:fd:ec:f3:a2:43:5e:26:cd:85:d2:a6:94:6b:
         97:f1:e2:63:13:09:33:e8:cb:61:0b:05:0f:f6:26:0d:c0:54:
         a8:ab:7e:e8:74:6c:02:8b:69:d5:c6:de:c1:12:12:31:a1:5e:
         e1:28:b4:0f:f3:cd:f6:40:0d:1d:87:54:2c:91:4a:00:43:03:
         c9:9b:b2:57:6a:b9:8e:a0:c7:7e:42:d9:6c:93:22:e2:a5:65:
         67:5d:05:f3:e9:42:5f:63:04:fe:9a:b5:66:07:61:a4:03:88:
         a8:0b:78:8a:df:1e:3e:54:28:8c:59:29:1b:90:b2:f5:8f:12:
         ee:7a:8e:e3:38:f2:6d:bd:cb:a1:ea:ec:9b:9f:cd:5e:f6:79:
         91:24:eb:e4:c7:da:6d:fa:22:4e:c6:49:59:6b:81:2f:81:50:
         42:99:09:f2:7a:8c:e1:b5:76:9d:fa:83:ed:06:35:d4:b8:2b:
         f0:35:27:cb:b6:a6:df:56:3b:00:48:df:d1:4c:48:87:03:31:
         6e:91:99:a8:bc:c9:4e:e9:6c:23:ed:29:12:a8:7a:a7:df:ee:
         b2:23:2d:71:97:9e:73:e7:7f:51:6e:fd:31:02:da:6a:0e:36:
         cd:c8:73:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 19:18:15 2026 by rpki-client