Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft
File:                     wm9G_ZlSs686fXFd4b86YeJceYo.mft (raw, json)
Hash identifier:          9rC2XqIKfwJLSdg6OZylfO6+vfmeOosSUVKYa/NfY+Y=
Subject key identifier:   0A:49:11:4F:D5:36:7A:BF:5F:00:E5:4E:CD:D0:FE:F7:69:84:21:BD
Authority key identifier: C2:6F:46:FD:99:52:B3:AF:3A:7D:71:5D:E1:BF:3A:61:E2:5C:79:8A
Certificate issuer:       /CN=A9117CE3/serialNumber=C26F46FD9952B3AF3A7D715DE1BF3A61E25C798A
Certificate serial:       017E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft
Manifest number:          016C
Signing time:             Mon 11 May 2026 04:59:08 +0000
Manifest this update:     Mon 11 May 2026 04:59:07 +0000
Manifest next update:     Mon 18 May 2026 04:59:07 +0000
Files and hashes:         1: wm9G_ZlSs686fXFd4b86YeJceYo.crl (hash: e5wi6cPk/7OIBntbwGohglaUiT7JJDala5kvUi/2HfA=)
                          2: 39032028BB8211F0ACBBE862C4F9AE02.roa (hash: kQWyaKQnBQog9T8jUd45EWcqgEXzXFVdsVXBEraC0lU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.crl
                          rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 04:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 382 (0x17e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9117CE3, serialNumber=C26F46FD9952B3AF3A7D715DE1BF3A61E25C798A
        Validity
            Not Before: May 11 04:59:07 2026 GMT
            Not After : May 18 04:59:07 2026 GMT
        Subject: CN=6a01621c-f11b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c2:a3:bb:da:c2:8a:fa:64:c9:54:d2:ff:a6:
                    86:0c:ac:f8:03:24:d7:fc:f6:73:83:af:d2:df:87:
                    aa:ce:bb:db:dc:c2:9b:eb:c9:1e:df:25:42:b9:60:
                    af:24:12:1f:d2:4f:62:4d:16:8e:ef:2d:ed:96:ad:
                    5f:7c:33:15:f8:26:50:b3:35:e4:4a:23:c8:08:db:
                    28:b4:fe:43:54:1d:28:1d:be:50:b5:23:82:8d:19:
                    e5:14:70:d1:d5:53:27:e4:ad:c6:d9:f2:e2:ef:2f:
                    b3:8b:af:f8:5b:93:52:e6:51:4b:9a:c3:5d:ce:7b:
                    f4:ca:6a:a4:37:b1:b8:11:ff:28:a9:35:9a:a4:05:
                    cb:b8:d1:7b:c7:20:2d:f9:fe:ee:c6:da:99:61:50:
                    9b:6e:85:4e:dc:da:9e:be:2d:52:a4:09:88:4a:3f:
                    f8:e9:3e:82:c0:25:b1:07:e7:2b:52:de:87:bb:c0:
                    56:c2:4a:45:40:d0:a7:17:bc:dc:a6:ab:a0:e4:34:
                    82:49:48:7c:16:c6:b8:0e:90:7d:3b:15:43:c8:45:
                    38:1d:01:22:80:3e:e3:79:a6:b5:08:c8:f6:d3:48:
                    a7:23:be:75:2d:a5:2a:01:f2:cc:26:97:d2:7a:c2:
                    0a:59:3f:b8:bb:cb:b9:a7:da:e6:05:53:44:74:0f:
                    f0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:49:11:4F:D5:36:7A:BF:5F:00:E5:4E:CD:D0:FE:F7:69:84:21:BD
            X509v3 Authority Key Identifier:
                keyid:C2:6F:46:FD:99:52:B3:AF:3A:7D:71:5D:E1:BF:3A:61:E2:5C:79:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:d2:2e:1a:4a:88:20:d9:94:d4:db:d2:86:17:73:a7:dc:75:
         52:dd:d7:a2:63:23:8d:70:dc:9a:2a:03:f0:e4:41:78:4c:14:
         3d:4f:f8:51:23:89:ff:96:7c:59:11:40:f9:fa:db:55:be:f9:
         cd:94:89:36:0f:c6:ce:24:bd:d4:79:bf:c6:ea:ac:cc:64:71:
         fa:54:54:a6:96:08:37:c7:ed:2a:58:4b:0b:b2:01:74:e8:56:
         bb:66:26:ac:dd:a8:d8:8a:ae:e7:5d:97:36:38:e4:fb:a7:e8:
         39:c3:3b:cd:0b:e1:c2:46:ea:b8:13:a4:88:5e:c4:4c:e9:88:
         84:e3:60:cd:92:94:46:26:b1:89:07:6f:9f:b4:3a:e4:39:da:
         d2:d3:f7:e4:68:ec:2a:f4:53:16:5a:09:98:00:62:c3:a1:69:
         37:b0:ba:49:41:4e:76:36:7b:20:de:00:a9:ea:a2:46:85:dd:
         05:82:3c:7b:9d:14:5a:ea:01:cf:2c:39:d1:df:07:2e:fd:31:
         8c:8a:9a:35:cd:63:77:c0:88:ee:6b:cd:55:59:f6:4d:d4:03:
         a3:21:7e:b3:4e:e5:4d:98:b3:60:97:79:ef:3f:66:36:39:14:
         3d:6d:ce:5c:82:17:19:ca:e7:97:3a:64:57:81:16:e4:4d:a4:
         cd:a7:c8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:33:30 2026 by rpki-client