Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914CC0F/34F6798C966511EAB68B4467C4F9AE02/wLod-zWZb86afkhZ6K-Hkfrw7JQ.mft
File:                     wLod-zWZb86afkhZ6K-Hkfrw7JQ.mft (raw, json)
Hash identifier:          prRunBYsOhaygbZupgOy310nDFl+8Aujf34BOD+yO9A=
Subject key identifier:   9F:FB:03:41:D3:0A:22:57:02:B9:AF:E2:3A:D1:96:9D:14:58:1B:76
Authority key identifier: C0:BA:1D:FB:35:99:6F:CE:9A:7E:48:59:E8:AF:87:91:FA:F0:EC:94
Certificate issuer:       /CN=A914CC0F/serialNumber=C0BA1DFB35996FCE9A7E4859E8AF8791FAF0EC94
Certificate serial:       0A6A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLod-zWZb86afkhZ6K-Hkfrw7JQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CC0F/34F6798C966511EAB68B4467C4F9AE02/wLod-zWZb86afkhZ6K-Hkfrw7JQ.mft
Manifest number:          0A55
Signing time:             Tue 22 Sep 2026 19:29:39 +0000
Manifest this update:     Tue 22 Sep 2026 19:29:38 +0000
Manifest next update:     Tue 29 Sep 2026 19:29:38 +0000
Files and hashes:         1: wLod-zWZb86afkhZ6K-Hkfrw7JQ.crl (hash: /5GP3itgQfaFSpvg53pGJGbIw7IkTomhti7xvfuJo9A=)
                          2: 170BFAA6995211EA9CF98C52C4F9AE02.roa (hash: A47fzufFZ9Yb5jk/uOyfLRqS3XIf2aZdv2bg6+UQUN4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CC0F/34F6798C966511EAB68B4467C4F9AE02/wLod-zWZb86afkhZ6K-Hkfrw7JQ.crl
                          rsync://rpki.apnic.net/member_repository/A914CC0F/34F6798C966511EAB68B4467C4F9AE02/wLod-zWZb86afkhZ6K-Hkfrw7JQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLod-zWZb86afkhZ6K-Hkfrw7JQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 19:29:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2666 (0xa6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CC0F, serialNumber=C0BA1DFB35996FCE9A7E4859E8AF8791FAF0EC94
        Validity
            Not Before: Sep 22 19:29:38 2026 GMT
            Not After : Sep 29 19:29:38 2026 GMT
        Subject: CN=6ab2d723-44eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:09:18:32:e1:e0:4a:77:c5:1f:dd:be:ae:0e:
                    8f:d7:66:36:05:b9:81:b4:a6:0f:e8:29:36:c0:27:
                    39:43:ca:9f:01:3e:b9:ac:27:ed:3a:10:27:9b:4b:
                    a0:b6:11:db:3e:96:8f:f3:58:81:7c:bd:ee:09:ad:
                    34:cd:ac:08:43:70:1e:58:0f:ed:ed:2f:44:f9:d3:
                    4d:b9:be:bd:b5:35:8b:a5:80:da:7e:1b:ad:04:aa:
                    36:4f:2e:95:88:fa:7c:5a:d9:b7:da:2c:ac:5b:b9:
                    ea:d0:69:fd:3e:bd:2f:c2:58:12:c1:4c:4b:46:1e:
                    33:a3:d4:f1:86:2c:18:1b:d0:f0:2e:82:17:b9:68:
                    a8:dc:cc:00:f1:9f:39:34:3a:32:a6:57:a6:c1:e3:
                    05:6b:d4:3e:b5:d7:99:09:e6:85:bf:19:cd:55:31:
                    19:50:6f:d2:07:84:1f:85:bc:98:1a:42:4a:fc:4a:
                    f6:34:4f:d4:7f:d7:f7:41:ff:54:03:60:bd:3e:66:
                    9e:76:0b:8a:3c:de:c4:95:e1:e9:88:a7:d5:65:cb:
                    60:fb:97:b7:f0:f8:c9:2b:9f:88:d4:43:27:f8:8e:
                    b0:95:c3:ab:ea:9a:cb:c7:2d:69:c5:82:1a:d3:e1:
                    00:b8:fc:fb:db:8e:a8:70:26:10:05:05:74:c8:4c:
                    ef:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:FB:03:41:D3:0A:22:57:02:B9:AF:E2:3A:D1:96:9D:14:58:1B:76
            X509v3 Authority Key Identifier:
                keyid:C0:BA:1D:FB:35:99:6F:CE:9A:7E:48:59:E8:AF:87:91:FA:F0:EC:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CC0F/34F6798C966511EAB68B4467C4F9AE02/wLod-zWZb86afkhZ6K-Hkfrw7JQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLod-zWZb86afkhZ6K-Hkfrw7JQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CC0F/34F6798C966511EAB68B4467C4F9AE02/wLod-zWZb86afkhZ6K-Hkfrw7JQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:7b:da:45:2e:c8:b2:bb:4b:b4:2b:19:30:b1:4c:ca:bd:a3:
         83:bd:c5:c9:f7:da:4b:ba:18:e1:5e:50:ee:4f:d0:6f:27:44:
         50:0b:a8:dd:32:dc:96:3a:aa:2c:e0:15:f4:d7:bf:88:7d:a7:
         4c:fb:d3:3b:7c:6a:fd:fd:e8:65:db:c5:53:59:8c:6b:4b:f9:
         bf:e7:77:92:19:ef:ad:f6:7c:68:10:b6:e7:1a:a6:45:22:a6:
         cc:91:8d:f5:2d:57:1d:da:35:38:15:42:f7:06:13:88:fe:1c:
         1f:28:8b:5e:77:29:9c:bc:8a:a0:89:c2:f9:94:32:a9:c0:fd:
         97:ed:ba:34:f4:1a:a2:d8:d1:17:15:6b:e6:0b:fd:51:23:eb:
         b0:37:61:60:76:7f:57:35:22:99:9c:5c:18:b2:66:25:53:a7:
         9a:a6:55:16:7b:ac:d7:92:02:76:cf:0a:8a:23:8d:b8:60:54:
         49:89:d6:ad:31:a0:dd:38:da:3b:97:7d:9d:71:75:fd:9d:26:
         40:ed:dd:bc:8c:f0:24:ee:ab:57:00:48:cb:b3:81:ec:8c:ef:
         0d:9f:08:92:d5:a7:27:ee:f9:eb:da:62:61:05:fe:aa:6e:05:
         60:d5:06:0b:96:bf:21:96:0c:e7:85:6f:38:11:5e:ae:1f:c3:
         ea:08:2a:8c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCmowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NENDMEYxMTAvBgNVBAUTKEMwQkExREZCMzU5OTZGQ0U5QTdFNDg1OUU4QUY4Nzkx
RkFGMEVDOTQwHhcNMjYwOTIyMTkyOTM4WhcNMjYwOTI5MTkyOTM4WjAYMRYwFAYD
VQQDEw02YWIyZDcyMy00NGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoAkYMuHgSnfFH92+rg6P12Y2BbmBtKYP6Ck2wCc5Q8qfAT65rCftOhAnm0ug
thHbPpaP81iBfL3uCa00zawIQ3AeWA/t7S9E+dNNub69tTWLpYDafhutBKo2Ty6V
iPp8Wtm32iysW7nq0Gn9Pr0vwlgSwUxLRh4zo9TxhiwYG9DwLoIXuWio3MwA8Z85
NDoyplemweMFa9Q+tdeZCeaFvxnNVTEZUG/SB4QfhbyYGkJK/Er2NE/Uf9f3Qf9U
A2C9PmaedguKPN7EleHpiKfVZctg+5e38PjJK5+I1EMn+I6wlcOr6prLxy1pxYIa
0+EAuPz7246ocCYQBQV0yEzvpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ/7A0HT
CiJXArmv4jrRlp0UWBt2MB8GA1UdIwQYMBaAFMC6Hfs1mW/Omn5IWeivh5H68OyU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0MwRi8zNEY2Nzk4Qzk2
NjUxMUVBQjY4QjQ0NjdDNEY5QUUwMi93TG9kLXpXWmI4NmFma2haNkstSGtmcnc3
SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dMb2QteldaYjg2YWZraFo2Sy1Ia2ZydzdKUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
Q0MwRi8zNEY2Nzk4Qzk2NjUxMUVBQjY4QjQ0NjdDNEY5QUUwMi93TG9kLXpXWmI4
NmFma2haNkstSGtmcnc3SlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWXvaRS7IsrtLtCsZMLFMyr2jg73FyffaS7oY4V5Q7k/QbydEUAuo3TLcljqq
LOAV9Ne/iH2nTPvTO3xq/f3oZdvFU1mMa0v5v+d3khnvrfZ8aBC25xqmRSKmzJGN
9S1XHdo1OBVC9wYTiP4cHyiLXncpnLyKoInC+ZQyqcD9l+26NPQaotjRFxVr5gv9
USPrsDdhYHZ/VzUimZxcGLJmJVOnmqZVFnus15ICds8KiiONuGBUSYnWrTGg3Tja
O5d9nXF1/Z0mQO3dvIzwJO6rVwBIy7OB7IzvDZ8IktWnJ+7569piYQX+qm4FYNUG
C5a/IZYM54VvOBFerh/D6ggqjA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 23:52:14 2026 by rpki-client