Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft
File:                     WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft (raw, json)
Hash identifier:          Ny5RvmElsi/7Cj2JIYEXgcdenwVQcN8oQMBF4JF9Jes=
Subject key identifier:   59:9C:F4:BA:AE:DB:F5:C0:57:98:6A:9C:B6:F4:52:B6:3E:28:A7:6A
Authority key identifier: 59:57:59:D1:7F:8A:CF:44:CC:54:D9:06:04:6C:02:F4:B1:D9:DA:A2
Certificate issuer:       /CN=A9147016/serialNumber=595759D17F8ACF44CC54D906046C02F4B1D9DAA2
Certificate serial:       0547
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft
Manifest number:          0542
Signing time:             Tue 22 Sep 2026 23:07:00 +0000
Manifest this update:     Tue 22 Sep 2026 23:06:59 +0000
Manifest next update:     Tue 29 Sep 2026 23:06:59 +0000
Files and hashes:         1: WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl (hash: ybPDs1A+DqoVFxKDgCsAqrmBLF6IwSZvCPKvWGC0PWQ=)
                          2: 94FA2A66174B11EF84A2715AC4F9AE02.roa (hash: 2bvU2l27JfiDPTUt5UdrWGWC12SuTqfGvD8E40bRY/8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl
                          rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 23:06:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1351 (0x547)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147016, serialNumber=595759D17F8ACF44CC54D906046C02F4B1D9DAA2
        Validity
            Not Before: Sep 22 23:06:59 2026 GMT
            Not After : Sep 29 23:06:59 2026 GMT
        Subject: CN=6ab30a14-1ae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6a:93:5e:64:94:c4:04:06:76:3e:84:b3:6f:
                    c8:46:57:5d:5f:97:5b:7a:69:d4:80:fb:9e:59:1c:
                    e8:e3:51:a8:c6:32:9c:a4:aa:26:18:c9:89:db:44:
                    02:a7:22:9b:b6:e9:04:6a:b5:55:29:3f:d1:c6:14:
                    1f:0b:ec:86:73:3f:be:31:a3:71:0a:64:ee:f2:b6:
                    f6:b0:a9:d4:cd:e7:02:91:3c:7b:10:8c:85:8a:5a:
                    4f:f5:a2:bf:86:e0:d1:d4:ee:98:e5:94:99:06:0b:
                    49:4e:52:5b:4a:20:29:c5:94:ee:7a:73:1f:c2:b2:
                    29:c7:69:43:53:28:9f:92:3e:b8:38:b8:36:38:ad:
                    a3:2f:2f:e7:48:62:87:6c:3a:ee:e3:b3:45:e4:55:
                    bd:e1:c1:be:29:55:16:f2:f7:3f:7d:d1:bc:d6:ee:
                    95:c1:89:a5:7c:5c:df:7c:66:22:e0:f5:fe:18:10:
                    fb:61:dd:b2:ba:6d:21:3b:6b:35:fb:9a:55:cd:16:
                    1f:23:8f:6d:92:d2:28:94:89:0d:52:b8:48:9e:0e:
                    26:15:63:97:ad:01:32:20:5c:6d:09:4f:fc:db:1d:
                    7c:50:be:ec:74:68:1c:6c:11:49:0a:95:f7:5f:f4:
                    5d:e5:47:0f:fe:72:d6:e6:63:8a:f1:cb:86:af:ad:
                    bb:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:9C:F4:BA:AE:DB:F5:C0:57:98:6A:9C:B6:F4:52:B6:3E:28:A7:6A
            X509v3 Authority Key Identifier:
                keyid:59:57:59:D1:7F:8A:CF:44:CC:54:D9:06:04:6C:02:F4:B1:D9:DA:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:ce:66:4f:02:98:3d:f3:5b:ea:38:bc:d9:51:63:4a:17:a3:
         ed:61:87:4a:11:ef:2a:60:1a:ae:32:7f:13:0d:e1:d7:27:01:
         5e:86:ee:0a:ba:06:91:3f:9a:72:b3:15:90:ed:5d:f7:85:03:
         3b:68:d0:c7:3a:56:0a:af:f2:a9:71:86:59:6d:c9:7b:f3:ba:
         02:d5:4e:87:aa:53:21:15:d6:39:05:7a:24:23:d9:0b:18:af:
         38:8d:3e:93:1e:2c:af:47:67:b6:4e:05:d9:fc:09:f1:46:9c:
         1b:b2:67:68:57:5b:ec:b3:a2:fc:d0:62:d7:f8:f4:52:b6:d0:
         5f:0e:93:15:d9:bc:9d:b5:3e:f6:c5:9f:c0:27:23:81:e7:8c:
         9b:d2:84:24:2c:c2:76:60:27:f3:23:dc:41:72:d8:21:05:65:
         f9:9c:7e:3d:fd:40:d8:8a:48:9e:10:d9:8f:98:40:4f:e1:36:
         a6:f7:76:bf:89:b2:bf:83:4b:80:9e:77:f0:97:d1:94:42:07:
         9f:8a:4f:a0:c6:f2:b4:92:d9:d2:d1:8d:20:f5:d9:fa:26:5b:
         fd:3d:b1:91:43:bf:da:bb:e8:d5:1a:4e:5a:b9:5d:81:d1:4e:
         e7:fe:dd:b5:db:04:ba:56:0f:23:5d:c7:67:34:5b:ec:3a:80:
         40:c7:82:fc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDcwMTYxMTAvBgNVBAUTKDU5NTc1OUQxN0Y4QUNGNDRDQzU0RDkwNjA0NkMwMkY0
QjFEOURBQTIwHhcNMjYwOTIyMjMwNjU5WhcNMjYwOTI5MjMwNjU5WjAYMRYwFAYD
VQQDEw02YWIzMGExNC0xYWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAumqTXmSUxAQGdj6Es2/IRlddX5dbemnUgPueWRzo41GoxjKcpKomGMmJ20QC
pyKbtukEarVVKT/RxhQfC+yGcz++MaNxCmTu8rb2sKnUzecCkTx7EIyFilpP9aK/
huDR1O6Y5ZSZBgtJTlJbSiApxZTuenMfwrIpx2lDUyifkj64OLg2OK2jLy/nSGKH
bDru47NF5FW94cG+KVUW8vc/fdG81u6VwYmlfFzffGYi4PX+GBD7Yd2yum0hO2s1
+5pVzRYfI49tktIolIkNUrhIng4mFWOXrQEyIFxtCU/82x18UL7sdGgcbBFJCpX3
X/Rd5UcP/nLW5mOK8cuGr627mwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFmc9Lqu
2/XAV5hqnLb0UrY+KKdqMB8GA1UdIwQYMBaAFFlXWdF/is9EzFTZBgRsAvSx2dqi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzAxNi8yRDc5MUQ0QzU2
M0QxMUVDOTVGM0RDMTZDNEY5QUUwMi9XVmRaMFgtS3owVE1WTmtHQkd3QzlMSFoy
cUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1dWZFowWC1LejBUTVZOa0dCR3dDOUxIWjJxSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NzAxNi8yRDc5MUQ0QzU2M0QxMUVDOTVGM0RDMTZDNEY5QUUwMi9XVmRaMFgtS3ow
VE1WTmtHQkd3QzlMSFoycUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMM5mTwKYPfNb6ji82VFjShej7WGHShHvKmAarjJ/Ew3h1ycBXobuCroGkT+a
crMVkO1d94UDO2jQxzpWCq/yqXGGWW3Je/O6AtVOh6pTIRXWOQV6JCPZCxivOI0+
kx4sr0dntk4F2fwJ8UacG7JnaFdb7LOi/NBi1/j0UrbQXw6TFdm8nbU+9sWfwCcj
geeMm9KEJCzCdmAn8yPcQXLYIQVl+Zx+Pf1A2IpInhDZj5hAT+E2pvd2v4myv4NL
gJ538JfRlEIHn4pPoMbytJLZ0tGNIPXZ+iZb/T2xkUO/2rvo1RpOWrldgdFO5/7d
tdsEulYPI13HZzRb7DqAQMeC/A==
-----END CERTIFICATE-----
Generated at Wed Sep 23 12:58:27 2026 by rpki-client