Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft
File:                     s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft (raw, json)
Hash identifier:          YeCr0WMBDcbNN75z1kj2hfkUB8rLVuUxX0H0J8YyqBY=
Subject key identifier:   C5:E7:CF:03:80:18:8B:13:0F:F9:74:A4:2D:A1:15:3C:15:8C:13:8F
Authority key identifier: B3:EC:1F:F6:AD:55:2A:A1:6E:E1:01:95:64:BA:D9:F7:61:FD:B5:D8
Certificate issuer:       /CN=A91A381A/serialNumber=B3EC1FF6AD552AA16EE1019564BAD9F761FDB5D8
Certificate serial:       021E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-wf9q1VKqFu4QGVZLrZ92H9tdg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft
Manifest number:          0210
Signing time:             Wed 19 Aug 2026 03:36:49 +0000
Manifest this update:     Wed 19 Aug 2026 03:36:49 +0000
Manifest next update:     Wed 26 Aug 2026 03:36:49 +0000
Files and hashes:         1: s-wf9q1VKqFu4QGVZLrZ92H9tdg.crl (hash: QBNP5igLPynAUZUV730s8TQkw06/CWMe7qoR2otrqCo=)
                          2: EBB7A41AB4DA11EEBD650259C4F9AE02.roa (hash: SDwmGnNA62CDBnu6SIeNZtXcNKrSVhcMHLtnwpsVMtg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.crl
                          rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-wf9q1VKqFu4QGVZLrZ92H9tdg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 03:36:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 542 (0x21e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A381A, serialNumber=B3EC1FF6AD552AA16EE1019564BAD9F761FDB5D8
        Validity
            Not Before: Aug 19 03:36:49 2026 GMT
            Not After : Aug 26 03:36:49 2026 GMT
        Subject: CN=6a8524d1-8da8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:75:97:18:5f:26:0a:6e:36:fc:82:d9:7c:75:
                    de:9c:67:cd:a4:48:63:2d:91:2d:48:50:78:7e:1f:
                    5e:b3:ea:d5:2e:1d:3e:09:bc:f3:81:8c:41:88:c6:
                    9f:4f:72:fd:c5:1b:ab:58:f2:9b:92:08:8d:ff:c5:
                    97:7d:5d:f1:16:d1:fb:3c:ea:41:1e:c8:d3:ce:d7:
                    02:72:b6:d7:99:6f:64:ce:6d:86:ac:4b:70:6e:2c:
                    41:3b:36:e9:e4:2d:cf:5a:6c:0e:66:5a:bc:37:2b:
                    2b:88:eb:56:5a:c1:43:99:80:a2:3b:ac:91:b4:68:
                    b6:8c:55:b3:ad:7a:9c:34:a8:fa:6b:e7:c6:a3:7b:
                    16:fe:36:1e:e4:0c:be:e7:ca:d8:a7:e0:9f:07:3b:
                    13:10:f2:1a:15:6e:15:a4:dd:01:74:9f:87:21:07:
                    81:7f:30:e7:d9:f5:d5:17:61:0d:1e:5a:27:5d:73:
                    55:77:0f:25:31:be:c7:26:31:b0:bf:53:36:c3:fe:
                    4d:ed:1d:ad:48:c6:09:91:06:2c:64:f5:e0:4b:f9:
                    54:c0:67:12:17:b7:e7:ad:4f:c9:eb:9f:c3:04:dc:
                    c2:cc:d5:5e:6d:f8:fe:e9:7a:47:7a:58:26:2d:55:
                    c3:b2:42:be:17:df:06:a4:e9:9d:fc:70:63:14:ec:
                    03:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:E7:CF:03:80:18:8B:13:0F:F9:74:A4:2D:A1:15:3C:15:8C:13:8F
            X509v3 Authority Key Identifier:
                keyid:B3:EC:1F:F6:AD:55:2A:A1:6E:E1:01:95:64:BA:D9:F7:61:FD:B5:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-wf9q1VKqFu4QGVZLrZ92H9tdg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:f1:bc:fa:fa:5a:6f:d3:97:4a:a1:53:1a:0b:91:b9:ac:db:
         e7:b9:5d:6a:37:4f:00:36:d1:7b:f7:b1:5c:01:ff:1e:4e:ae:
         04:8a:d9:37:0b:f7:ca:49:0b:3c:5a:cc:8b:67:ef:17:48:9d:
         07:fe:94:68:dc:7c:cc:83:db:11:9a:6e:bf:6a:cc:d8:9a:a3:
         fa:85:75:d9:3e:08:a2:4e:c0:0d:45:e9:03:31:b8:b2:14:3b:
         93:d2:86:62:bf:97:80:d1:9e:e9:2e:c0:b3:77:32:24:92:72:
         79:81:7b:ee:80:29:36:9e:93:b3:ea:01:66:f8:b3:d3:35:b9:
         85:1b:99:d5:b2:6a:b7:93:4e:b0:46:c0:60:c9:e8:84:3a:86:
         4a:da:9a:83:58:36:bf:65:41:b8:70:d7:75:a1:80:d5:41:23:
         13:90:76:6c:86:b3:64:dd:ad:10:a2:dd:71:32:bf:7b:c1:28:
         b3:85:1f:da:13:cd:b8:8d:67:cd:72:ea:5f:db:30:6b:a6:a6:
         4e:2a:b5:6b:9f:d8:82:6e:6a:ca:d0:51:4d:fa:36:3e:53:07:
         6c:94:86:f6:ac:0b:a7:1d:27:bb:2e:ec:f2:0c:20:c0:b2:e5:
         75:c1:d2:db:e2:56:a5:65:76:cd:00:f1:68:c1:73:b8:0e:a8:
         14:05:76:e4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTM4MUExMTAvBgNVBAUTKEIzRUMxRkY2QUQ1NTJBQTE2RUUxMDE5NTY0QkFEOUY3
NjFGREI1RDgwHhcNMjYwODE5MDMzNjQ5WhcNMjYwODI2MDMzNjQ5WjAYMRYwFAYD
VQQDEw02YTg1MjRkMS04ZGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArXWXGF8mCm42/ILZfHXenGfNpEhjLZEtSFB4fh9es+rVLh0+CbzzgYxBiMaf
T3L9xRurWPKbkgiN/8WXfV3xFtH7POpBHsjTztcCcrbXmW9kzm2GrEtwbixBOzbp
5C3PWmwOZlq8NysriOtWWsFDmYCiO6yRtGi2jFWzrXqcNKj6a+fGo3sW/jYe5Ay+
58rYp+CfBzsTEPIaFW4VpN0BdJ+HIQeBfzDn2fXVF2ENHlonXXNVdw8lMb7HJjGw
v1M2w/5N7R2tSMYJkQYsZPXgS/lUwGcSF7fnrU/J65/DBNzCzNVebfj+6XpHelgm
LVXDskK+F98GpOmd/HBjFOwDhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMXnzwOA
GIsTD/l0pC2hFTwVjBOPMB8GA1UdIwQYMBaAFLPsH/atVSqhbuEBlWS62fdh/bXY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzgxQS8yOEU4NkU0NDc5
RkYxMUVFQjMyQzIzNzlDNEY5QUUwMi9zLXdmOXExVktxRnU0UUdWWkxyWjkySDl0
ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Mtd2Y5cTFWS3FGdTRRR1ZaTHJaOTJIOXRkZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MzgxQS8yOEU4NkU0NDc5RkYxMUVFQjMyQzIzNzlDNEY5QUUwMi9zLXdmOXExVktx
RnU0UUdWWkxyWjkySDl0ZGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdvG8+vpab9OXSqFTGguRuazb57ldajdPADbRe/exXAH/Hk6uBIrZNwv3ykkL
PFrMi2fvF0idB/6UaNx8zIPbEZpuv2rM2Jqj+oV12T4Iok7ADUXpAzG4shQ7k9KG
Yr+XgNGe6S7As3cyJJJyeYF77oApNp6Ts+oBZviz0zW5hRuZ1bJqt5NOsEbAYMno
hDqGStqag1g2v2VBuHDXdaGA1UEjE5B2bIazZN2tEKLdcTK/e8Eos4Uf2hPNuI1n
zXLqX9swa6amTiq1a5/Ygm5qytBRTfo2PlMHbJSG9qwLpx0nuy7s8gwgwLLldcHS
2+JWpWV2zQDxaMFzuA6oFAV25A==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:55:08 2026 by rpki-client