Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912C2EB/0522BBD8738811F19116AADD6DA30FBC/0wgKgo1JiJFRAHUPx-oGAu7_ZVc.mft
File:                     0wgKgo1JiJFRAHUPx-oGAu7_ZVc.mft (raw, json)
Hash identifier:          qvzyJKivI3dvTwenXMaZgFFFYkCTJDKwx4wPmhqX6MI=
Subject key identifier:   7A:57:AC:BE:33:58:25:B5:E5:73:03:30:07:1C:1B:C5:C3:58:19:6A
Authority key identifier: D3:08:0A:82:8D:49:88:91:51:00:75:0F:C7:EA:06:02:EE:FF:65:57
Certificate issuer:       /CN=A912C2EB/serialNumber=D3080A828D4988915100750FC7EA0602EEFF6557
Certificate serial:       33
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0wgKgo1JiJFRAHUPx-oGAu7_ZVc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C2EB/0522BBD8738811F19116AADD6DA30FBC/0wgKgo1JiJFRAHUPx-oGAu7_ZVc.mft
Manifest number:          31
Signing time:             Sun 27 Sep 2026 09:17:02 +0000
Manifest this update:     Sun 27 Sep 2026 09:17:01 +0000
Manifest next update:     Sun 04 Oct 2026 09:17:01 +0000
Files and hashes:         1: 0wgKgo1JiJFRAHUPx-oGAu7_ZVc.crl (hash: lFbwnMrkvnjtbgNio1HyTJ7V0CEsJjIKIzhuc0L7crA=)
                          2: A23E3D0C738811F19D7E75576EA30FBC.roa (hash: 28gpiKKu2/NV1BJk3iIiC7QtFrNAkWy/xA/g4Bxzm1M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C2EB/0522BBD8738811F19116AADD6DA30FBC/0wgKgo1JiJFRAHUPx-oGAu7_ZVc.crl
                          rsync://rpki.apnic.net/member_repository/A912C2EB/0522BBD8738811F19116AADD6DA30FBC/0wgKgo1JiJFRAHUPx-oGAu7_ZVc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0wgKgo1JiJFRAHUPx-oGAu7_ZVc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 09:17:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C2EB, serialNumber=D3080A828D4988915100750FC7EA0602EEFF6557
        Validity
            Not Before: Sep 27 09:17:01 2026 GMT
            Not After : Oct  4 09:17:01 2026 GMT
        Subject: CN=6ab8df0e-4aaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ad:26:e0:06:12:0a:12:ff:fb:50:d4:87:51:
                    6d:09:f3:41:1b:c4:58:3e:a9:b3:b1:f0:ac:eb:35:
                    25:19:69:fe:1e:47:bc:ea:49:db:e2:95:56:b7:11:
                    45:fb:d7:1c:eb:c4:ab:c6:a4:b0:4d:0d:49:9b:70:
                    4b:0e:81:43:76:3a:45:76:27:23:b6:b6:e7:95:5c:
                    70:13:00:88:5d:43:78:8d:1c:55:f0:7d:82:7a:95:
                    7e:05:42:bc:8b:e7:f6:80:15:f7:c1:26:7a:99:0c:
                    08:4e:03:7a:91:b1:7c:00:0c:13:be:77:2b:b5:8c:
                    ba:30:7c:2f:b6:29:f1:b4:5c:06:10:3f:b9:fe:53:
                    72:2b:16:b2:0d:54:66:59:08:04:16:62:d1:fe:bc:
                    79:b2:4e:79:00:e1:49:23:6a:89:f4:dc:52:f1:c1:
                    36:21:c8:9b:f8:3c:96:65:bd:22:57:09:5c:2d:da:
                    5a:c5:d6:4f:e6:4e:5a:57:de:99:17:9f:26:51:ee:
                    16:da:39:c6:7f:b9:d7:9f:7f:5c:d1:c0:7c:4f:16:
                    ce:4a:cb:57:54:0a:37:df:0f:08:0c:36:fb:77:72:
                    a7:ee:05:36:5b:ea:46:31:44:67:32:a4:0b:10:85:
                    c1:a3:83:74:63:1f:70:c6:35:b4:50:8a:97:8b:dc:
                    39:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:57:AC:BE:33:58:25:B5:E5:73:03:30:07:1C:1B:C5:C3:58:19:6A
            X509v3 Authority Key Identifier:
                keyid:D3:08:0A:82:8D:49:88:91:51:00:75:0F:C7:EA:06:02:EE:FF:65:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C2EB/0522BBD8738811F19116AADD6DA30FBC/0wgKgo1JiJFRAHUPx-oGAu7_ZVc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0wgKgo1JiJFRAHUPx-oGAu7_ZVc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C2EB/0522BBD8738811F19116AADD6DA30FBC/0wgKgo1JiJFRAHUPx-oGAu7_ZVc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:18:53:12:67:a3:0f:43:c4:f6:b4:45:5f:bd:64:8a:8d:e2:
         73:a6:d0:dd:14:98:59:17:68:59:ff:eb:13:c9:c9:e4:b9:f8:
         f5:45:f5:de:cd:5d:6c:6c:41:92:10:f0:73:f6:5d:45:14:a5:
         a4:7f:72:0d:62:6b:3e:d5:fc:b2:a2:27:03:d5:fe:e6:18:0c:
         1d:be:f4:95:b7:27:28:38:47:e7:f7:b9:89:5d:a5:cd:aa:25:
         06:ef:6c:3e:58:c7:df:3c:72:3c:3d:31:d5:ab:ce:e2:26:6b:
         bd:0d:79:ce:a1:38:76:a8:53:d6:5c:82:85:89:cb:15:6b:00:
         e0:21:0d:41:5a:9d:93:7d:ad:56:cb:4d:de:76:ea:c0:a5:af:
         d1:c6:5c:20:3a:19:ee:fa:c7:04:c3:ab:81:be:92:4e:2e:53:
         b5:db:12:7c:40:9c:54:1f:f8:03:9d:53:e5:16:2d:1f:12:53:
         52:4d:eb:95:48:51:4a:40:d8:da:8f:b1:8e:55:02:be:00:c3:
         20:d4:29:2b:57:c9:4d:7a:68:f3:3a:d9:43:c3:89:81:5d:b8:
         f8:f4:44:9f:55:71:26:20:47:82:c0:bd:ef:b3:a8:a8:02:bc:
         cc:af:7a:eb:10:25:02:d6:dc:7b:19:7f:cb:ea:c9:8f:8a:e3:
         ea:9c:ae:e8
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
QzJFQjExMC8GA1UEBRMoRDMwODBBODI4RDQ5ODg5MTUxMDA3NTBGQzdFQTA2MDJF
RUZGNjU1NzAeFw0yNjA5MjcwOTE3MDFaFw0yNjEwMDQwOTE3MDFaMBgxFjAUBgNV
BAMTDTZhYjhkZjBlLTRhYWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCrrSbgBhIKEv/7UNSHUW0J80EbxFg+qbOx8KzrNSUZaf4eR7zqSdvilVa3EUX7
1xzrxKvGpLBNDUmbcEsOgUN2OkV2JyO2tueVXHATAIhdQ3iNHFXwfYJ6lX4FQryL
5/aAFffBJnqZDAhOA3qRsXwADBO+dyu1jLowfC+2KfG0XAYQP7n+U3IrFrINVGZZ
CAQWYtH+vHmyTnkA4Ukjaon03FLxwTYhyJv4PJZlvSJXCVwt2lrF1k/mTlpX3pkX
nyZR7hbaOcZ/udeff1zRwHxPFs5Ky1dUCjffDwgMNvt3cqfuBTZb6kYxRGcypAsQ
hcGjg3RjH3DGNbRQipeL3DnBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUelesvjNY
JbXlcwMwBxwbxcNYGWowHwYDVR0jBBgwFoAU0wgKgo1JiJFRAHUPx+oGAu7/ZVcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJDMkVCLzA1MjJCQkQ4NzM4
ODExRjE5MTE2QUFERDZEQTMwRkJDLzB3Z0tnbzFKaUpGUkFIVVB4LW9HQXU3X1pW
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvMHdnS2dvMUppSkZSQUhVUHgtb0dBdTdfWlZjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJD
MkVCLzA1MjJCQkQ4NzM4ODExRjE5MTE2QUFERDZEQTMwRkJDLzB3Z0tnbzFKaUpG
UkFIVVB4LW9HQXU3X1pWYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBKGFMSZ6MPQ8T2tEVfvWSKjeJzptDdFJhZF2hZ/+sTycnkufj1RfXezV1sbEGS
EPBz9l1FFKWkf3INYms+1fyyoicD1f7mGAwdvvSVtycoOEfn97mJXaXNqiUG72w+
WMffPHI8PTHVq87iJmu9DXnOoTh2qFPWXIKFicsVawDgIQ1BWp2Tfa1Wy03edurA
pa/RxlwgOhnu+scEw6uBvpJOLlO12xJ8QJxUH/gDnVPlFi0fElNSTeuVSFFKQNja
j7GOVQK+AMMg1CkrV8lNemjzOtlDw4mBXbj49ESfVXEmIEeCwL3vs6ioArzMr3rr
ECUC1tx7GX/L6smPiuPqnK7o
-----END CERTIFICATE-----
Generated at Mon Sep 28 18:03:39 2026 by rpki-client