Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft
File:                     -wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft (raw, json)
Hash identifier:          y9DOCNdTXe3KotCwxTVh7N6k2srWIcduAC9Mj8T6R2Q=
Subject key identifier:   AD:BB:1D:1A:04:B4:0D:3D:89:39:78:D8:FC:0F:6B:15:21:CE:E0:56
Authority key identifier: FB:02:EC:D6:C7:78:9A:39:6B:53:A4:8F:A9:24:36:60:E2:52:C1:43
Certificate issuer:       /CN=A912F437/serialNumber=FB02ECD6C7789A396B53A48FA9243660E252C143
Certificate serial:       0216
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft
Manifest number:          020C
Signing time:             Mon 21 Sep 2026 03:06:08 +0000
Manifest this update:     Mon 21 Sep 2026 03:06:08 +0000
Manifest next update:     Mon 28 Sep 2026 03:06:08 +0000
Files and hashes:         1: -wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl (hash: X3hWOMe8hKWnKg9Q4ocdsERZlvmmbXyqYR5JVvxfE20=)
                          2: D973D5BE97D711EEA1B09A33C4F9AE02.roa (hash: vK6UgwvhHzxe7wOhZkBOrNQ5FiwefRM4NQVFNi53pvw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl
                          rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 03:06:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 534 (0x216)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F437, serialNumber=FB02ECD6C7789A396B53A48FA9243660E252C143
        Validity
            Not Before: Sep 21 03:06:08 2026 GMT
            Not After : Sep 28 03:06:08 2026 GMT
        Subject: CN=6ab09f20-72b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e5:11:8b:a1:ae:7a:d6:44:8a:c0:a0:fa:24:
                    b4:f7:4b:f1:9d:90:de:79:0a:96:5f:5f:64:7e:a4:
                    c5:85:d9:00:2e:15:d3:4a:f6:23:2a:d6:d5:bc:26:
                    25:7c:01:60:fd:f0:0a:e6:12:44:2d:c5:0e:a0:7a:
                    b9:9c:e2:d2:31:46:4f:ed:af:52:8f:b4:4a:b0:00:
                    38:24:28:08:d4:3d:d9:c1:12:72:01:c4:4f:bc:de:
                    10:63:3d:42:18:99:d4:db:e4:e6:a0:ec:4d:c2:b0:
                    ec:44:ee:03:20:d5:c3:e4:30:db:68:f3:65:da:bd:
                    bb:32:84:5c:a4:23:15:26:39:ee:cd:97:bf:e3:01:
                    f2:d9:af:28:fb:81:5a:a4:89:58:bb:39:36:02:a0:
                    f3:25:e0:b0:41:17:14:70:fe:3a:0c:ee:d5:dd:42:
                    93:c3:87:12:02:8d:85:b0:4b:a0:2b:aa:28:75:c3:
                    f7:6b:43:16:58:32:a2:2c:48:bc:3d:d0:30:ed:97:
                    70:50:76:d3:aa:d7:77:09:e9:93:2f:24:b5:31:8e:
                    10:41:6c:f1:ec:20:b2:71:df:f3:32:4f:46:e0:bd:
                    41:36:e2:03:c9:ab:6d:44:a3:18:33:08:66:d0:55:
                    e1:ed:40:49:50:68:5d:ae:7b:97:d4:02:b4:bc:ff:
                    af:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:BB:1D:1A:04:B4:0D:3D:89:39:78:D8:FC:0F:6B:15:21:CE:E0:56
            X509v3 Authority Key Identifier:
                keyid:FB:02:EC:D6:C7:78:9A:39:6B:53:A4:8F:A9:24:36:60:E2:52:C1:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:c2:2e:d8:16:3b:ed:77:37:3f:39:b9:a2:f2:ba:cd:cf:2d:
         e2:ac:30:44:1e:0e:b3:3a:1e:d8:3c:84:9e:fb:12:91:6f:ce:
         91:11:ae:09:97:fb:f2:99:31:eb:14:8f:85:e7:86:79:d5:e4:
         8d:0d:33:ae:5c:05:f0:59:16:65:a4:7f:d2:bf:90:d4:21:f6:
         8d:ed:90:1b:29:8f:04:26:c9:84:78:13:28:1f:4d:6c:23:60:
         f6:da:79:11:d3:61:36:e1:2a:7a:6c:b3:3b:01:ec:7b:3d:65:
         77:88:7b:e2:af:8c:96:f7:83:2a:be:e0:ad:32:43:36:4f:db:
         63:ee:ef:98:58:b6:bb:a2:b8:2f:da:f3:a7:63:30:7a:62:80:
         2f:80:0f:00:ad:f0:aa:ce:bd:28:e8:0c:23:1f:ea:5d:3e:46:
         d1:5a:1a:9e:6f:ca:18:1e:51:8c:81:6a:90:cf:ac:80:92:79:
         80:7d:b3:89:d0:ae:41:57:ed:90:f0:9c:c9:ba:c6:60:f6:6f:
         f9:ee:30:be:bc:1a:2c:d4:30:d5:c7:dc:df:d8:cd:73:37:9e:
         c9:7a:20:55:fa:d8:89:e1:aa:ec:d7:67:fd:b6:10:85:12:06:
         48:b1:5b:8a:01:a3:67:f7:cd:9f:2b:57:74:67:7b:2f:4f:6e:
         72:7e:fa:10
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAhYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkY0MzcxMTAvBgNVBAUTKEZCMDJFQ0Q2Qzc3ODlBMzk2QjUzQTQ4RkE5MjQzNjYw
RTI1MkMxNDMwHhcNMjYwOTIxMDMwNjA4WhcNMjYwOTI4MDMwNjA4WjAYMRYwFAYD
VQQDEw02YWIwOWYyMC03MmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAseURi6GuetZEisCg+iS090vxnZDeeQqWX19kfqTFhdkALhXTSvYjKtbVvCYl
fAFg/fAK5hJELcUOoHq5nOLSMUZP7a9Sj7RKsAA4JCgI1D3ZwRJyAcRPvN4QYz1C
GJnU2+TmoOxNwrDsRO4DINXD5DDbaPNl2r27MoRcpCMVJjnuzZe/4wHy2a8o+4Fa
pIlYuzk2AqDzJeCwQRcUcP46DO7V3UKTw4cSAo2FsEugK6oodcP3a0MWWDKiLEi8
PdAw7ZdwUHbTqtd3CemTLyS1MY4QQWzx7CCycd/zMk9G4L1BNuIDyattRKMYMwhm
0FXh7UBJUGhdrnuX1AK0vP+vmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK27HRoE
tA09iTl42PwPaxUhzuBWMB8GA1UdIwQYMBaAFPsC7NbHeJo5a1Okj6kkNmDiUsFD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjQzNy84MUY2NjlEQzk3
RDcxMUVFQUFCQ0E0MzJDNEY5QUUwMi8td0xzMXNkNG1qbHJVNlNQcVNRMllPSlN3
VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy13THMxc2Q0bWpsclU2U1BxU1EyWU9KU3dVTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RjQzNy84MUY2NjlEQzk3RDcxMUVFQUFCQ0E0MzJDNEY5QUUwMi8td0xzMXNkNG1q
bHJVNlNQcVNRMllPSlN3VU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUsIu2BY77Xc3Pzm5ovK6zc8t4qwwRB4Oszoe2DyEnvsSkW/OkRGuCZf78pkx
6xSPheeGedXkjQ0zrlwF8FkWZaR/0r+Q1CH2je2QGymPBCbJhHgTKB9NbCNg9tp5
EdNhNuEqemyzOwHsez1ld4h74q+MlveDKr7grTJDNk/bY+7vmFi2u6K4L9rzp2Mw
emKAL4APAK3wqs69KOgMIx/qXT5G0Voanm/KGB5RjIFqkM+sgJJ5gH2zidCuQVft
kPCcybrGYPZv+e4wvrwaLNQw1cfc39jNczeeyXogVfrYieGq7Ndn/bYQhRIGSLFb
igGjZ/fNnytXdGd7L09ucn76EA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 22:24:10 2026 by rpki-client