Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.mft
File:                     Wu0FpkJ2QQga_OhPaXJeyFagpOs.mft (raw, json)
Hash identifier:          7daDqjVVYsiYiAzlxGUo5hteGBMUesOooJNSsNPh5Mg=
Subject key identifier:   58:8A:A2:61:42:F7:0F:17:31:FD:78:C3:84:39:4A:45:3F:DA:FC:E3
Authority key identifier: 5A:ED:05:A6:42:76:41:08:1A:FC:E8:4F:69:72:5E:C8:56:A0:A4:EB
Certificate issuer:       /CN=A918DAC5/serialNumber=5AED05A6427641081AFCE84F69725EC856A0A4EB
Certificate serial:       0144
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wu0FpkJ2QQga_OhPaXJeyFagpOs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.mft
Manifest number:          0144
Signing time:             Wed 19 Aug 2026 06:00:27 +0000
Manifest this update:     Wed 19 Aug 2026 06:00:27 +0000
Manifest next update:     Wed 26 Aug 2026 06:00:27 +0000
Files and hashes:         1: Wu0FpkJ2QQga_OhPaXJeyFagpOs.crl (hash: XCAjenNc6uvVcA1kBtjg94hR8MxPFP75mivKLFsUgMI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.crl
                          rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wu0FpkJ2QQga_OhPaXJeyFagpOs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 324 (0x144)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918DAC5, serialNumber=5AED05A6427641081AFCE84F69725EC856A0A4EB
        Validity
            Not Before: Aug 19 06:00:27 2026 GMT
            Not After : Aug 26 06:00:27 2026 GMT
        Subject: CN=6a85467b-f324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:08:63:c5:2e:1f:51:15:12:ac:50:5d:34:08:
                    71:f6:10:d1:01:2e:83:c8:e6:96:d5:fb:1e:1b:1e:
                    25:dc:a7:35:b9:11:b5:60:14:e6:60:2f:2f:cc:c1:
                    ce:3e:4e:1e:21:99:45:ab:8a:f0:af:a4:2e:85:ef:
                    4f:29:0b:24:bf:f3:46:03:01:be:5a:75:06:82:0d:
                    0d:d9:9f:36:93:af:aa:15:6b:d3:ff:32:7f:a7:70:
                    d5:da:ed:97:72:20:21:ac:5d:13:7d:16:27:57:f5:
                    4a:d0:d4:9e:1a:f0:76:b9:83:a5:db:66:a3:4b:70:
                    42:3b:74:8b:54:04:9a:ce:10:63:53:0d:66:00:5e:
                    a1:87:15:dc:90:74:8f:1c:ef:8a:11:6b:58:53:4b:
                    4b:fb:14:81:81:98:75:cd:d4:f8:b1:66:bf:09:a7:
                    e3:77:20:f2:da:89:84:30:ba:b6:63:e1:e4:9a:be:
                    c7:2e:c2:48:78:9b:51:ef:59:cf:9e:27:b9:03:dc:
                    dd:2c:9c:31:38:d2:d2:b5:d4:20:3f:d0:40:96:ea:
                    e8:86:9e:e5:b7:67:2e:f7:5d:4e:a3:6b:5c:03:09:
                    c4:a0:c0:91:23:39:bf:2f:42:51:c6:8b:0b:d2:ab:
                    33:9e:aa:63:0c:02:6f:1c:ab:61:86:9d:9b:4e:73:
                    2f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:8A:A2:61:42:F7:0F:17:31:FD:78:C3:84:39:4A:45:3F:DA:FC:E3
            X509v3 Authority Key Identifier:
                keyid:5A:ED:05:A6:42:76:41:08:1A:FC:E8:4F:69:72:5E:C8:56:A0:A4:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wu0FpkJ2QQga_OhPaXJeyFagpOs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:74:14:ff:48:45:91:e2:4e:af:f8:fa:c4:23:9c:45:54:dd:
         dd:bf:8b:88:02:2b:a7:9c:e0:62:c7:51:4b:9a:7a:1e:81:75:
         91:52:8f:9a:d8:94:77:71:54:0f:50:f6:ec:44:1d:af:2c:27:
         2e:72:4d:fe:1c:12:ea:c4:0e:22:4f:0f:ef:26:cc:81:97:fd:
         91:7b:48:82:13:f4:a9:47:50:82:a7:6b:b0:fe:f2:c9:06:28:
         a9:70:0f:f6:9c:60:8f:aa:7f:3e:ac:a6:d1:fc:e5:a1:c0:d5:
         96:0b:92:8e:ce:a2:d2:38:cd:f5:ea:15:a3:e6:6f:61:81:9c:
         44:7a:ae:b7:e7:cf:d2:4a:da:10:f2:6d:ed:57:5a:af:a7:05:
         c4:16:46:af:7a:54:d3:ef:b1:f7:68:6b:47:b3:78:fa:e2:4f:
         86:72:2d:e3:4d:73:6a:46:b2:ca:a3:f6:b1:66:74:5d:da:43:
         37:7c:61:d5:bd:61:06:a9:53:f3:1c:e7:4a:26:55:8b:d6:ea:
         88:9d:06:5f:ee:f4:fd:2c:62:b3:cc:7e:82:af:b5:df:3e:e3:
         1a:79:3d:18:f1:09:e8:16:31:92:2d:7a:0c:c1:50:1f:8e:79:
         cc:2f:01:cb:7f:0c:12:12:c8:14:44:6c:25:09:4d:77:d8:02:
         da:34:7b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:50 2026 by rpki-client