Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.mft
File:                     _wsVRthMDZNVkFtsopPiW0QJSMU.mft (raw, json)
Hash identifier:          8onDLrPJwr5EcRlMts1TZhk+CYGxzbvJ1OB2rl3h3Gs=
Subject key identifier:   F6:91:67:95:60:D2:02:DD:F1:C5:06:09:49:74:66:1B:37:C8:20:4D
Authority key identifier: FF:0B:15:46:D8:4C:0D:93:55:90:5B:6C:A2:93:E2:5B:44:09:48:C5
Certificate issuer:       /CN=A9198F53/serialNumber=FF0B1546D84C0D9355905B6CA293E25B440948C5
Certificate serial:       0C06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wsVRthMDZNVkFtsopPiW0QJSMU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.mft
Manifest number:          0BF8
Signing time:             Tue 18 Aug 2026 19:09:16 +0000
Manifest this update:     Tue 18 Aug 2026 19:09:16 +0000
Manifest next update:     Tue 25 Aug 2026 19:09:16 +0000
Files and hashes:         1: _wsVRthMDZNVkFtsopPiW0QJSMU.crl (hash: 0RFw+sAxOBssRKBQh9zO2Z7It0YZMlY15GqhtVnsKMk=)
                          2: 0B1FBD4A40F611EAACD44866C4F9AE02.roa (hash: DFdvRHgXchuBm4qDLuYljzDy6YW5jSvcOAQEQdXRUns=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.crl
                          rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wsVRthMDZNVkFtsopPiW0QJSMU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 19:09:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3078 (0xc06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198F53, serialNumber=FF0B1546D84C0D9355905B6CA293E25B440948C5
        Validity
            Not Before: Aug 18 19:09:16 2026 GMT
            Not After : Aug 25 19:09:16 2026 GMT
        Subject: CN=6a84addc-acd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:98:94:6e:66:ed:21:91:d7:f3:93:de:0d:76:
                    33:51:9d:1f:4f:6c:49:23:c6:68:df:e1:69:c9:a7:
                    97:63:89:27:d8:a1:17:87:4a:d8:60:32:04:5d:d7:
                    61:30:5a:7c:89:0a:a4:66:3c:75:a6:07:32:af:34:
                    cd:a4:bd:26:fb:40:74:58:39:db:66:19:43:53:33:
                    65:39:45:6b:c3:74:6e:3b:5f:56:0e:c3:f2:2d:c0:
                    84:60:e3:10:78:ef:70:5e:fe:70:86:44:6a:af:98:
                    52:d5:9b:8d:c3:8e:e0:24:c1:30:84:3b:c2:37:3f:
                    d4:d9:be:06:1f:88:7a:17:89:cd:5e:c4:5d:ab:37:
                    5a:cb:21:c0:48:a8:8e:f4:0c:47:24:ae:f3:03:16:
                    4c:2f:e3:d1:5a:e0:d5:62:6a:3f:d2:7f:0e:b7:64:
                    66:1d:7f:26:c2:02:41:57:64:cf:29:de:d0:42:da:
                    5e:73:97:89:74:0b:d4:c8:17:b0:d3:b1:6b:32:93:
                    76:0a:5b:f3:b7:87:e9:18:94:dc:a4:fc:74:c7:ef:
                    ca:26:66:d0:66:3c:7b:13:30:18:74:fa:36:4a:e1:
                    09:0c:1a:81:b4:d0:f6:64:21:e4:5a:30:d1:52:6c:
                    29:f2:51:b7:95:7b:af:29:4c:89:22:88:80:7c:48:
                    a6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:91:67:95:60:D2:02:DD:F1:C5:06:09:49:74:66:1B:37:C8:20:4D
            X509v3 Authority Key Identifier:
                keyid:FF:0B:15:46:D8:4C:0D:93:55:90:5B:6C:A2:93:E2:5B:44:09:48:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wsVRthMDZNVkFtsopPiW0QJSMU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:34:9d:3b:2d:67:86:82:9e:97:67:cd:69:0d:7c:5b:58:ad:
         18:a3:18:8f:be:41:ec:99:a0:bb:f2:5c:09:96:83:fc:b8:83:
         cb:e3:46:df:4b:e6:bb:1c:62:d2:b5:66:1e:4b:18:77:78:34:
         d2:0c:6c:45:60:64:66:b2:1f:c8:01:fa:8d:a5:9c:cf:b7:98:
         55:59:d9:ec:7f:6f:56:1e:71:60:9e:ec:2a:84:51:7b:5b:b4:
         13:f9:25:62:e4:cc:b4:8a:27:db:08:08:f3:53:e7:26:1e:e7:
         1d:70:c0:3c:f9:8d:23:f0:e5:96:ba:ee:21:84:02:a5:98:b8:
         64:1a:36:30:a0:71:25:a9:84:2c:e4:68:a8:d4:49:ce:8a:56:
         1a:29:a9:46:60:e3:93:01:88:3f:5d:4d:ff:85:78:e9:1d:b2:
         51:9f:42:a3:2c:f1:76:ba:d5:4a:7c:bd:6f:76:7e:91:d4:ca:
         c7:2c:06:c3:d4:16:b5:2c:9b:0a:3d:a7:e7:4c:c5:99:eb:09:
         7b:ae:5b:f8:7e:e0:87:42:4e:d1:fa:5f:8c:66:aa:0f:c5:c9:
         ec:b2:ae:db:af:ee:d0:3c:64:05:4a:36:3b:35:17:b3:ce:53:
         e2:05:ed:8b:19:12:cd:42:a6:9e:a7:23:72:02:d2:b8:d8:f8:
         96:36:2f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:47:20 2026 by rpki-client