Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.mft
File:                     _wsVRthMDZNVkFtsopPiW0QJSMU.mft (raw, json)
Hash identifier:          c7rmPDA54CTkG9AcEkw/ctYr24u+ydcBreITVkhZANw=
Subject key identifier:   15:45:A0:E8:50:61:6E:D4:07:84:93:DF:64:3E:86:06:BA:BA:C7:90
Authority key identifier: FF:0B:15:46:D8:4C:0D:93:55:90:5B:6C:A2:93:E2:5B:44:09:48:C5
Certificate issuer:       /CN=A9198F53/serialNumber=FF0B1546D84C0D9355905B6CA293E25B440948C5
Certificate serial:       0BD8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wsVRthMDZNVkFtsopPiW0QJSMU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.mft
Manifest number:          0BCA
Signing time:             Wed 20 May 2026 18:57:57 +0000
Manifest this update:     Wed 20 May 2026 18:57:57 +0000
Manifest next update:     Wed 27 May 2026 18:57:57 +0000
Files and hashes:         1: _wsVRthMDZNVkFtsopPiW0QJSMU.crl (hash: fL6SUJPDuXTGSTyI8BE48WuRAwx9MuNmV7092EZJBTc=)
                          2: 0B1FBD4A40F611EAACD44866C4F9AE02.roa (hash: DFdvRHgXchuBm4qDLuYljzDy6YW5jSvcOAQEQdXRUns=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.crl
                          rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wsVRthMDZNVkFtsopPiW0QJSMU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 18:57:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3032 (0xbd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198F53, serialNumber=FF0B1546D84C0D9355905B6CA293E25B440948C5
        Validity
            Not Before: May 20 18:57:57 2026 GMT
            Not After : May 27 18:57:57 2026 GMT
        Subject: CN=6a0e0435-ff93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5b:a7:67:b3:bb:9c:e9:5f:2d:73:1e:76:61:
                    82:e3:2a:2a:eb:74:3d:3e:08:e3:ea:e7:ef:43:2f:
                    72:94:db:6c:84:e3:0c:dc:a4:b7:29:1f:ee:99:2e:
                    4e:b4:fa:31:cf:dc:26:10:c6:16:4d:45:1d:54:dc:
                    29:3e:94:ba:aa:b7:ec:ef:58:50:68:3d:ba:20:46:
                    45:31:e6:5d:e2:b0:a1:06:68:2f:2c:45:0e:50:4d:
                    d2:47:3f:ee:35:fa:42:ee:0c:ce:58:9e:93:6b:0e:
                    f5:eb:51:5c:48:9f:d1:92:ff:8d:6f:ec:34:a0:e7:
                    28:e8:72:d6:a7:cc:d6:54:89:00:1d:89:d1:7e:e2:
                    ff:f8:12:4e:b6:54:1a:b6:de:1a:b8:a7:2d:ae:2f:
                    97:0a:02:1f:55:c9:2a:94:d6:87:b6:05:5d:f3:e7:
                    90:77:cb:e2:1e:e9:50:cc:ef:fc:72:07:bf:15:bf:
                    fa:3e:cc:30:4b:bc:45:53:c7:7d:7c:73:0a:17:23:
                    76:eb:36:ca:7c:d4:ab:f0:c8:25:cb:ce:c9:fd:51:
                    5e:23:e0:98:72:be:b8:0b:ea:40:8f:53:a4:44:41:
                    5c:68:30:2c:61:68:7a:08:aa:8e:4d:25:7c:ad:78:
                    2c:ac:71:98:40:d9:7d:c6:9d:0d:fb:79:19:80:5d:
                    a4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:45:A0:E8:50:61:6E:D4:07:84:93:DF:64:3E:86:06:BA:BA:C7:90
            X509v3 Authority Key Identifier:
                keyid:FF:0B:15:46:D8:4C:0D:93:55:90:5B:6C:A2:93:E2:5B:44:09:48:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wsVRthMDZNVkFtsopPiW0QJSMU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:a6:92:d5:65:3d:0c:0b:be:8e:b4:67:01:5a:66:60:aa:3a:
         a8:df:ec:6e:c9:d4:5a:92:4d:cd:15:fa:75:ca:3f:41:8b:13:
         d6:33:aa:96:78:f5:b6:ad:d5:36:4a:08:dd:3f:a8:e6:27:90:
         6a:c2:30:a1:22:17:90:39:0f:06:ea:4c:94:32:dd:1f:52:be:
         64:bb:4a:2b:91:14:24:d7:46:26:24:d7:93:a2:c2:0e:56:9b:
         04:4e:99:b1:33:02:e0:0f:1b:ce:6f:aa:24:1f:e8:f6:a1:6d:
         5f:ce:01:0c:de:b0:63:cd:1f:51:65:68:15:3c:8f:61:28:ff:
         24:8b:cd:46:e5:c7:c0:63:db:f7:a0:c2:8d:f5:32:a9:40:25:
         4a:c5:ee:11:58:fe:fe:85:6a:e8:2b:2f:b0:e8:61:9b:74:af:
         6e:85:bf:ed:a1:38:b7:75:7a:a7:58:c6:b6:39:15:aa:e6:a9:
         58:9d:88:be:64:b6:38:42:27:06:0d:f3:12:a4:41:2c:e9:26:
         d0:5c:49:ec:3d:3d:ba:18:47:3e:cd:8e:2d:59:53:a8:a9:e9:
         2d:7f:27:3d:fc:ae:e6:6f:31:33:b0:e3:b7:3a:37:23:6e:5b:
         bd:df:f4:94:fc:7b:72:7e:8a:dc:6d:6e:b5:7f:bd:91:9a:cb:
         1f:c6:d4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:35:38 2026 by rpki-client