Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft
File:                     wm9G_ZlSs686fXFd4b86YeJceYo.mft (raw, json)
Hash identifier:          p9hHTttPYU+ZyjF2lPlMb94esipdRznmL3vWLi29q9c=
Subject key identifier:   D3:81:74:BE:8B:41:80:9D:AB:E9:06:1C:F6:32:C9:E0:DD:BE:C1:5C
Authority key identifier: C2:6F:46:FD:99:52:B3:AF:3A:7D:71:5D:E1:BF:3A:61:E2:5C:79:8A
Certificate issuer:       /CN=A9117CE3/serialNumber=C26F46FD9952B3AF3A7D715DE1BF3A61E25C798A
Certificate serial:       017F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft
Manifest number:          016D
Signing time:             Wed 13 May 2026 04:58:12 +0000
Manifest this update:     Wed 13 May 2026 04:58:12 +0000
Manifest next update:     Wed 20 May 2026 04:58:12 +0000
Files and hashes:         1: wm9G_ZlSs686fXFd4b86YeJceYo.crl (hash: ZiKO5GR74PQMsAJ1hzVt/fLfV3xlNtXWAXa+OSndhDk=)
                          2: 39032028BB8211F0ACBBE862C4F9AE02.roa (hash: kQWyaKQnBQog9T8jUd45EWcqgEXzXFVdsVXBEraC0lU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.crl
                          rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 04:58:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 383 (0x17f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9117CE3, serialNumber=C26F46FD9952B3AF3A7D715DE1BF3A61E25C798A
        Validity
            Not Before: May 13 04:58:12 2026 GMT
            Not After : May 20 04:58:12 2026 GMT
        Subject: CN=6a0404e4-d132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:85:e1:0a:12:57:f8:2d:cd:12:04:6a:73:69:
                    11:0d:83:9e:ed:bf:59:f5:12:36:71:08:14:1b:23:
                    63:a4:43:c5:69:09:74:56:31:0d:a4:e2:31:9b:de:
                    4e:f5:a6:85:e7:24:f6:b3:0b:a8:53:71:84:f5:96:
                    e2:2d:dc:38:f9:f5:54:34:b7:a0:3b:f2:32:0d:cc:
                    7a:6e:ad:a9:f0:04:b5:2d:a5:54:6f:64:9c:37:87:
                    87:68:5a:b7:d1:89:16:6c:ce:35:a5:94:d2:9a:a0:
                    36:3e:92:4e:06:db:ee:46:99:bc:e9:8e:d0:2b:7b:
                    68:eb:8d:c0:9b:a1:66:a5:24:b4:50:49:14:24:6a:
                    b9:15:06:a9:df:0f:23:b3:c5:f1:7f:6b:45:01:2f:
                    95:d8:75:4b:e6:6e:2d:e6:86:ee:96:41:04:23:26:
                    38:c0:b8:19:52:c2:01:ed:fe:8f:d1:26:51:bc:7f:
                    c5:fb:4e:5b:38:95:19:60:06:e4:e6:51:6d:2c:df:
                    2d:c2:f4:71:71:27:42:d3:0e:41:19:30:23:9d:17:
                    3a:e6:bf:d5:45:58:bb:ac:ca:ad:a6:a6:ad:fa:74:
                    09:a8:a6:f2:56:58:94:fa:55:ac:b1:b0:d3:e6:c2:
                    f3:43:e3:8e:1d:f3:78:db:4d:35:b8:06:f1:ba:58:
                    c2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:81:74:BE:8B:41:80:9D:AB:E9:06:1C:F6:32:C9:E0:DD:BE:C1:5C
            X509v3 Authority Key Identifier:
                keyid:C2:6F:46:FD:99:52:B3:AF:3A:7D:71:5D:E1:BF:3A:61:E2:5C:79:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:c1:3f:d4:16:f1:47:84:e8:cf:fd:54:de:2c:d2:07:48:dd:
         09:82:b5:94:b4:4c:4c:9a:4a:d8:7d:28:b0:ec:a2:8a:f7:ce:
         2d:31:aa:75:fe:d1:62:7f:83:70:4b:da:5c:a2:eb:92:51:b5:
         b2:3c:6d:83:d9:36:c8:c9:a8:f3:aa:1b:62:0b:e2:f7:f2:85:
         49:af:88:13:58:23:93:1d:74:bf:c2:47:5e:ae:df:9d:c8:99:
         19:18:c3:dc:b3:83:32:69:3d:ed:75:25:c8:79:54:fa:62:8a:
         d2:7d:65:a6:cf:2e:1a:a2:89:7a:59:c8:3c:25:19:4a:b4:d1:
         39:8b:09:57:8b:55:53:7d:10:6b:ac:63:61:0e:94:fc:56:95:
         9d:d2:10:95:83:05:f9:06:34:70:6e:90:b1:ad:30:26:a0:03:
         bf:ea:db:8c:ee:73:e1:b1:55:fc:f2:45:1f:b1:aa:11:d3:ba:
         24:79:22:fd:d9:10:7d:df:d6:9a:6c:ab:3b:76:63:a1:18:f6:
         77:84:54:36:49:e3:16:85:df:ab:57:9d:60:14:8c:2d:59:6a:
         8b:b9:c5:a2:12:d1:17:76:c9:6a:7f:43:05:76:56:45:32:87:
         c8:09:d1:1d:9e:64:56:cd:5d:23:56:ac:c6:7d:d1:47:6e:f1:
         0f:14:af:70
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTdDRTMxMTAvBgNVBAUTKEMyNkY0NkZEOTk1MkIzQUYzQTdENzE1REUxQkYzQTYx
RTI1Qzc5OEEwHhcNMjYwNTEzMDQ1ODEyWhcNMjYwNTIwMDQ1ODEyWjAYMRYwFAYD
VQQDEw02YTA0MDRlNC1kMTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnoXhChJX+C3NEgRqc2kRDYOe7b9Z9RI2cQgUGyNjpEPFaQl0VjENpOIxm95O
9aaF5yT2swuoU3GE9ZbiLdw4+fVUNLegO/IyDcx6bq2p8AS1LaVUb2ScN4eHaFq3
0YkWbM41pZTSmqA2PpJOBtvuRpm86Y7QK3to643Am6FmpSS0UEkUJGq5FQap3w8j
s8Xxf2tFAS+V2HVL5m4t5obulkEEIyY4wLgZUsIB7f6P0SZRvH/F+05bOJUZYAbk
5lFtLN8twvRxcSdC0w5BGTAjnRc65r/VRVi7rMqtpqat+nQJqKbyVliU+lWssbDT
5sLzQ+OOHfN42001uAbxuljCLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNOBdL6L
QYCdq+kGHPYyyeDdvsFcMB8GA1UdIwQYMBaAFMJvRv2ZUrOvOn1xXeG/OmHiXHmK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0NFMy9BOTBDQUZDNDM0
NjUxMUVGQjlDMDc2NEZDNEY5QUUwMi93bTlHX1psU3M2ODZmWEZkNGI4NlllSmNl
WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3dtOUdfWmxTczY4NmZYRmQ0Yjg2WWVKY2VZby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
N0NFMy9BOTBDQUZDNDM0NjUxMUVGQjlDMDc2NEZDNEY5QUUwMi93bTlHX1psU3M2
ODZmWEZkNGI4NlllSmNlWW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgsE/1BbxR4Toz/1U3izSB0jdCYK1lLRMTJpK2H0osOyiivfOLTGqdf7RYn+D
cEvaXKLrklG1sjxtg9k2yMmo86obYgvi9/KFSa+IE1gjkx10v8JHXq7fnciZGRjD
3LODMmk97XUlyHlU+mKK0n1lps8uGqKJelnIPCUZSrTROYsJV4tVU30Qa6xjYQ6U
/FaVndIQlYMF+QY0cG6Qsa0wJqADv+rbjO5z4bFV/PJFH7GqEdO6JHki/dkQfd/W
mmyrO3ZjoRj2d4RUNknjFoXfq1edYBSMLVlqi7nFohLRF3bJan9DBXZWRTKHyAnR
HZ5kVs1dI1asxn3RR27xDxSvcA==
-----END CERTIFICATE-----
Generated at Wed May 13 08:59:21 2026 by rpki-client