Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.mft
File:                     WU96C6m9HBOGhHzoljlj_k5xY2w.mft (raw, json)
Hash identifier:          F4DtnxblCWk8F7Vf958ZOFJGHpTfDpfL/kZp8NsC/mM=
Subject key identifier:   5B:A5:F9:74:13:21:A7:C8:04:58:C7:1A:C1:E9:87:30:27:FF:8C:D1
Authority key identifier: 59:4F:7A:0B:A9:BD:1C:13:86:84:7C:E8:96:39:63:FE:4E:71:63:6C
Certificate issuer:       /CN=A91FFEDB/serialNumber=594F7A0BA9BD1C1386847CE8963963FE4E71636C
Certificate serial:       02B1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WU96C6m9HBOGhHzoljlj_k5xY2w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.mft
Manifest number:          02A9
Signing time:             Mon 01 Jun 2026 02:15:14 +0000
Manifest this update:     Mon 01 Jun 2026 02:15:14 +0000
Manifest next update:     Mon 08 Jun 2026 02:15:14 +0000
Files and hashes:         1: WU96C6m9HBOGhHzoljlj_k5xY2w.crl (hash: tGbRpqAjFno/7h6SPdpVVxcQ6wAHASbk24KM1Mo2RHw=)
                          2: 3CE5C23A550611ED96C8F350C4F9AE02.roa (hash: Q0Na7uz+8/SY8dENTuHd10OmIdY+SANtmNHmLdr0v6s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.crl
                          rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WU96C6m9HBOGhHzoljlj_k5xY2w.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 02:15:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 689 (0x2b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FFEDB, serialNumber=594F7A0BA9BD1C1386847CE8963963FE4E71636C
        Validity
            Not Before: Jun  1 02:15:14 2026 GMT
            Not After : Jun  8 02:15:14 2026 GMT
        Subject: CN=6a1ceb32-1ad8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5c:7c:bf:f7:d2:40:91:24:d5:a6:33:eb:9b:
                    ca:38:39:e6:9d:65:40:79:f0:5e:de:c0:65:53:78:
                    ae:86:fe:2c:f8:71:97:f2:48:64:94:c0:49:24:41:
                    45:6c:05:65:76:d0:d0:34:75:d3:52:71:db:3a:ed:
                    a7:b0:f5:37:00:fa:be:d5:e7:98:df:a0:6a:f6:b8:
                    a3:16:a1:dd:18:8f:d7:1e:9d:3c:97:f7:36:f4:a4:
                    96:9f:4e:b6:d7:d2:ad:fd:c1:73:f9:f4:35:44:4d:
                    64:06:b4:a9:e7:cb:5f:db:6b:bc:f1:f2:8f:92:b9:
                    1b:fb:d1:d4:7b:81:fd:e4:08:4e:43:32:3d:13:cd:
                    42:bd:ba:2c:d9:77:5f:f1:32:50:9b:47:f9:0c:2f:
                    ae:fd:ad:a3:73:7f:f2:75:2f:36:fc:54:cf:28:00:
                    d0:7a:13:7c:ab:e8:93:74:a0:ee:58:94:7e:3d:1e:
                    fa:55:6b:b9:d0:72:7a:03:45:ac:55:4d:02:4a:d4:
                    32:58:f0:71:a7:f3:ec:a5:c1:30:34:e0:17:dd:81:
                    96:b6:39:a3:1c:ee:9a:82:95:1f:d4:74:a3:bb:22:
                    fd:8d:0e:4d:c5:4a:cc:46:e8:1c:d6:8d:c9:52:9e:
                    c1:2f:c6:b9:8a:2c:54:b1:da:d3:09:12:38:3b:70:
                    3e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A5:F9:74:13:21:A7:C8:04:58:C7:1A:C1:E9:87:30:27:FF:8C:D1
            X509v3 Authority Key Identifier:
                keyid:59:4F:7A:0B:A9:BD:1C:13:86:84:7C:E8:96:39:63:FE:4E:71:63:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WU96C6m9HBOGhHzoljlj_k5xY2w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:a6:4a:17:96:0a:af:ce:e6:72:43:21:c3:80:ca:72:56:20:
         70:c0:f3:58:b1:6a:64:88:35:8b:13:f1:54:00:6b:cb:96:07:
         70:08:fb:50:7d:48:4a:82:c1:da:ce:1c:f8:9a:e5:9d:dd:72:
         64:47:59:8b:2b:e1:f6:9e:67:97:7f:cf:ae:db:12:86:ad:f3:
         d6:8d:93:ef:62:6a:ed:cc:aa:18:ef:43:67:ba:2c:4c:db:51:
         7c:03:a5:63:08:35:bd:28:54:80:62:95:cd:65:69:7e:76:12:
         98:15:1a:74:a8:59:41:74:fc:8d:5b:40:0f:1d:43:29:3e:34:
         e8:4e:18:c5:58:b8:df:79:e9:d5:54:e7:e7:8a:e4:70:d6:39:
         d6:29:85:6b:56:09:49:58:95:6a:f0:1c:c7:b4:02:ee:14:be:
         ca:25:eb:53:fa:f5:ff:78:7c:a3:1f:3d:69:09:f7:f8:12:bc:
         1e:86:9f:cc:d4:b4:19:ee:b4:56:07:2a:55:45:e8:b8:91:da:
         08:ed:c0:6a:db:0e:9c:6d:65:ae:f8:6f:db:40:74:62:69:f6:
         d5:fc:45:a7:f2:11:9a:8e:c7:a1:71:fd:59:76:2e:52:d6:e0:
         b6:cd:a3:91:3f:61:e0:cc:25:ac:2b:18:0b:86:ef:87:e0:f9:
         2c:76:73:0e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICArEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkZFREIxMTAvBgNVBAUTKDU5NEY3QTBCQTlCRDFDMTM4Njg0N0NFODk2Mzk2M0ZF
NEU3MTYzNkMwHhcNMjYwNjAxMDIxNTE0WhcNMjYwNjA4MDIxNTE0WjAYMRYwFAYD
VQQDEw02YTFjZWIzMi0xYWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArlx8v/fSQJEk1aYz65vKODnmnWVAefBe3sBlU3iuhv4s+HGX8khklMBJJEFF
bAVldtDQNHXTUnHbOu2nsPU3APq+1eeY36Bq9rijFqHdGI/XHp08l/c29KSWn062
19Kt/cFz+fQ1RE1kBrSp58tf22u88fKPkrkb+9HUe4H95AhOQzI9E81Cvbos2Xdf
8TJQm0f5DC+u/a2jc3/ydS82/FTPKADQehN8q+iTdKDuWJR+PR76VWu50HJ6A0Ws
VU0CStQyWPBxp/PspcEwNOAX3YGWtjmjHO6agpUf1HSjuyL9jQ5NxUrMRugc1o3J
Up7BL8a5iixUsdrTCRI4O3A+NQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFul+XQT
IafIBFjHGsHphzAn/4zRMB8GA1UdIwQYMBaAFFlPegupvRwThoR86JY5Y/5OcWNs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkVEQi8zNEQ1RDdFNjU1
MDIxMUVEOTY0QjdBNEFDNEY5QUUwMi9XVTk2QzZtOUhCT0doSHpvbGpsal9rNXhZ
MncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1dVOTZDNm05SEJPR2hIem9samxqX2s1eFkydy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RkVEQi8zNEQ1RDdFNjU1MDIxMUVEOTY0QjdBNEFDNEY5QUUwMi9XVTk2QzZtOUhC
T0doSHpvbGpsal9rNXhZMncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAY6ZKF5YKr87mckMhw4DKclYgcMDzWLFqZIg1ixPxVABry5YHcAj7UH1ISoLB
2s4c+Jrlnd1yZEdZiyvh9p5nl3/PrtsShq3z1o2T72Jq7cyqGO9DZ7osTNtRfAOl
Ywg1vShUgGKVzWVpfnYSmBUadKhZQXT8jVtADx1DKT406E4YxVi433np1VTn54rk
cNY51imFa1YJSViVavAcx7QC7hS+yiXrU/r1/3h8ox89aQn3+BK8HoafzNS0Ge60
VgcqVUXouJHaCO3AatsOnG1lrvhv20B0Ymn21fxFp/IRmo7HoXH9WXYuUtbgts2j
kT9h4MwlrCsYC4bvh+D5LHZzDg==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:42 2026 by rpki-client