Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.mft
File:                     wj3utHnnD2DvynyIRiuVudwiydA.mft (raw, json)
Hash identifier:          W/QiLNhxFSa6JptGE2H1xHg/H+OKrZEJpMWAAN5TIzI=
Subject key identifier:   72:91:53:9C:B2:96:6C:70:7C:98:E4:D1:F9:DC:5F:3B:98:ED:E5:7A
Authority key identifier: C2:3D:EE:B4:79:E7:0F:60:EF:CA:7C:88:46:2B:95:B9:DC:22:C9:D0
Certificate issuer:       /CN=A9142A22/serialNumber=C23DEEB479E70F60EFCA7C88462B95B9DC22C9D0
Certificate serial:       AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wj3utHnnD2DvynyIRiuVudwiydA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.mft
Manifest number:          9C
Signing time:             Mon 11 May 2026 07:34:24 +0000
Manifest this update:     Mon 11 May 2026 07:34:23 +0000
Manifest next update:     Mon 18 May 2026 07:34:23 +0000
Files and hashes:         1: wj3utHnnD2DvynyIRiuVudwiydA.crl (hash: S3+9C0HFsRT7VOvuhTVC7QdhNdPUb+Q7/VMvai2Q1oA=)
                          2: 9F685E60678511F0999A252DC4F9AE02.roa (hash: F0BVTAtasd/U+5Pd7iq4lB4rkiv9dNM8GMlahH5MNTA=)
                          3: 9EE7FBDA678511F0999A252DC4F9AE02.roa (hash: Iu+MvNjXylPZy283mB/J6+7AiPxESlN4SHOf0/N0qug=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.crl
                          rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wj3utHnnD2DvynyIRiuVudwiydA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 07:34:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 172 (0xac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142A22, serialNumber=C23DEEB479E70F60EFCA7C88462B95B9DC22C9D0
        Validity
            Not Before: May 11 07:34:23 2026 GMT
            Not After : May 18 07:34:23 2026 GMT
        Subject: CN=6a018680-e28e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:40:c8:5f:4f:73:60:6d:46:0c:3a:5b:76:b5:
                    99:ed:f8:fb:75:62:5b:f1:a7:42:1f:de:47:65:d8:
                    b9:34:de:a7:1b:00:d7:30:9b:f5:e9:39:2c:43:3f:
                    3f:5d:42:32:0b:de:95:48:a2:d0:7b:3f:c5:a3:17:
                    22:ea:3e:e6:f4:d4:a8:51:10:96:d9:6b:ac:60:20:
                    43:82:e7:09:f6:73:f5:f2:98:d5:34:d3:ac:4d:5c:
                    25:83:cc:65:4a:ae:a5:24:3b:5e:cb:fa:96:33:b0:
                    d8:8f:18:03:d8:e6:f5:af:43:ee:99:81:1c:b3:80:
                    1f:87:58:ac:db:e0:9e:32:68:33:94:48:c9:a0:b5:
                    d6:b7:5a:c1:3d:4c:2f:5f:2b:62:4b:24:c9:e0:96:
                    0c:b5:65:b5:da:de:02:cf:94:97:a9:9a:49:fe:21:
                    58:b7:50:fa:97:0d:6a:98:fc:ee:21:6f:ab:a9:b6:
                    53:ec:cf:22:8c:ed:72:e5:a9:61:8c:ad:47:28:4e:
                    de:8f:e1:49:e2:da:f5:0c:57:cf:35:4e:ab:53:e3:
                    b7:91:75:da:e7:26:0b:a6:10:f4:27:cf:34:1c:6d:
                    68:1b:a3:5a:35:5c:6e:a2:f1:9a:84:51:c9:a3:67:
                    9a:94:6d:06:d2:4a:94:b1:02:1a:6b:b6:1d:17:04:
                    c4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:91:53:9C:B2:96:6C:70:7C:98:E4:D1:F9:DC:5F:3B:98:ED:E5:7A
            X509v3 Authority Key Identifier:
                keyid:C2:3D:EE:B4:79:E7:0F:60:EF:CA:7C:88:46:2B:95:B9:DC:22:C9:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wj3utHnnD2DvynyIRiuVudwiydA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:cb:a1:e6:c8:f6:cb:74:a4:be:e2:d0:6f:17:d4:c8:87:2b:
         fb:12:a6:68:73:9a:75:1d:b1:48:6a:09:53:d8:13:49:d2:50:
         fa:cb:bb:10:58:ea:b2:f4:53:85:34:6f:ce:2d:f4:b3:e9:c9:
         f3:eb:88:88:c5:9a:46:df:86:d8:21:d9:42:d9:38:f6:fd:e7:
         cd:7c:8b:6c:fe:d7:35:d6:22:2d:71:2e:5f:e7:4c:79:68:19:
         f6:b6:c0:94:f5:ac:6a:d0:21:fa:a8:cb:d1:88:91:37:56:94:
         75:48:2d:61:03:fb:e1:bc:56:99:1e:84:f8:03:b9:38:63:0b:
         ba:97:f2:a3:85:31:00:ac:ca:6f:d5:b6:78:22:8c:1c:41:79:
         b0:a8:c7:09:bb:0c:bf:18:f2:d6:03:26:71:93:2d:4f:01:1d:
         38:1d:8d:da:70:46:61:42:c8:07:f7:b3:d2:2b:e6:82:e6:a9:
         a4:7a:34:54:55:62:05:6c:fa:63:7b:61:ee:27:be:b8:69:b1:
         19:cd:37:fa:07:5a:48:fd:78:14:f6:c6:53:82:e4:24:bd:9e:
         7a:fc:bd:7e:44:3b:69:1a:3d:5e:b9:c4:19:e9:11:5d:b8:57:
         dd:a7:96:23:13:21:3a:46:97:7b:c6:2e:c6:40:d5:ba:54:ae:
         08:6b:dc:1c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDJBMjIxMTAvBgNVBAUTKEMyM0RFRUI0NzlFNzBGNjBFRkNBN0M4ODQ2MkI5NUI5
REMyMkM5RDAwHhcNMjYwNTExMDczNDIzWhcNMjYwNTE4MDczNDIzWjAYMRYwFAYD
VQQDEw02YTAxODY4MC1lMjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtUDIX09zYG1GDDpbdrWZ7fj7dWJb8adCH95HZdi5NN6nGwDXMJv16TksQz8/
XUIyC96VSKLQez/Foxci6j7m9NSoURCW2WusYCBDgucJ9nP18pjVNNOsTVwlg8xl
Sq6lJDtey/qWM7DYjxgD2Ob1r0PumYEcs4Afh1is2+CeMmgzlEjJoLXWt1rBPUwv
XytiSyTJ4JYMtWW12t4Cz5SXqZpJ/iFYt1D6lw1qmPzuIW+rqbZT7M8ijO1y5alh
jK1HKE7ej+FJ4tr1DFfPNU6rU+O3kXXa5yYLphD0J880HG1oG6NaNVxuovGahFHJ
o2ealG0G0kqUsQIaa7YdFwTEWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHKRU5yy
lmxwfJjk0fncXzuY7eV6MB8GA1UdIwQYMBaAFMI97rR55w9g78p8iEYrlbncIsnQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkEyMi9GRDVERTlCMjY2
MDAxMUYwOTk4NkM5MTdDNEY5QUUwMi93ajN1dEhubkQyRHZ5bnlJUml1VnVkd2l5
ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dqM3V0SG5uRDJEdnlueUlSaXVWdWR3aXlkQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MkEyMi9GRDVERTlCMjY2MDAxMUYwOTk4NkM5MTdDNEY5QUUwMi93ajN1dEhubkQy
RHZ5bnlJUml1VnVkd2l5ZEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAC8uh5sj2y3SkvuLQbxfUyIcr+xKmaHOadR2xSGoJU9gTSdJQ+su7EFjqsvRT
hTRvzi30s+nJ8+uIiMWaRt+G2CHZQtk49v3nzXyLbP7XNdYiLXEuX+dMeWgZ9rbA
lPWsatAh+qjL0YiRN1aUdUgtYQP74bxWmR6E+AO5OGMLupfyo4UxAKzKb9W2eCKM
HEF5sKjHCbsMvxjy1gMmcZMtTwEdOB2N2nBGYULIB/ez0ivmguappHo0VFViBWz6
Y3th7ie+uGmxGc03+gdaSP14FPbGU4LkJL2eevy9fkQ7aRo9XrnEGekRXbhX3aeW
IxMhOkaXe8YuxkDVulSuCGvcHA==
-----END CERTIFICATE-----
Generated at Wed May 13 08:07:58 2026 by rpki-client