Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.mft
File:                     wS8PVy2jONITRB7wfKUR0anIm20.mft (raw, json)
Hash identifier:          QSxNekjvqshY2yUpVBVJhRsGwGZq6n4AOX/oWT035nE=
Subject key identifier:   A2:78:56:34:71:77:0D:10:17:1D:6A:FE:45:05:17:2C:3E:D9:1B:14
Authority key identifier: C1:2F:0F:57:2D:A3:38:D2:13:44:1E:F0:7C:A5:11:D1:A9:C8:9B:6D
Certificate issuer:       /CN=A916CA70/serialNumber=C12F0F572DA338D213441EF07CA511D1A9C89B6D
Certificate serial:       08A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wS8PVy2jONITRB7wfKUR0anIm20.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.mft
Manifest number:          08A0
Signing time:             Sat 26 Sep 2026 20:44:12 +0000
Manifest this update:     Sat 26 Sep 2026 20:44:11 +0000
Manifest next update:     Sat 03 Oct 2026 20:44:11 +0000
Files and hashes:         1: wS8PVy2jONITRB7wfKUR0anIm20.crl (hash: tDtrK0JzrmffBLuyUr1k0q5gcDtF7Sfnf0SjOqCe8LM=)
                          2: 1E4394CC03AC11EBBA025F2BC4F9AE02.roa (hash: BMSY5fq6KZKrb45yJ074fWZzYymnjf99nujloWmOdaU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.crl
                          rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wS8PVy2jONITRB7wfKUR0anIm20.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 18:22:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2217 (0x8a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CA70, serialNumber=C12F0F572DA338D213441EF07CA511D1A9C89B6D
        Validity
            Not Before: Sep 26 20:44:11 2026 GMT
            Not After : Oct  3 20:44:11 2026 GMT
        Subject: CN=6ab82e9c-f2f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:0a:ef:5c:69:2d:cd:52:57:f7:6f:d0:e5:b7:
                    c8:8b:7e:7b:ae:75:f2:4e:49:86:25:be:ce:62:c3:
                    5c:87:ce:df:7f:5f:53:c2:7d:e3:fe:c2:6b:9f:ed:
                    e8:af:e1:83:bd:85:40:1d:a5:6b:2f:d8:72:88:b5:
                    ad:c7:86:e7:e2:4e:0d:e6:76:e6:99:82:52:a4:a3:
                    d4:47:5b:3d:ee:2f:6e:03:45:01:35:74:d8:f9:17:
                    37:6b:d4:87:a5:5c:fd:51:e6:e5:14:4f:c1:50:f1:
                    c1:dc:35:67:9d:04:68:de:1d:31:ac:2b:4f:90:b9:
                    9f:8f:c1:ef:f4:8a:7c:5a:31:c2:25:4a:57:f3:fb:
                    c1:02:73:c1:fe:de:12:a2:8c:00:9c:fe:75:c6:b3:
                    5a:d1:f8:fc:81:a9:0d:17:a5:f8:1e:2a:74:55:f7:
                    c5:68:74:74:21:e6:bb:4f:79:ce:94:25:73:eb:1d:
                    a1:85:71:6d:8f:69:5e:9d:f0:fa:71:a3:fc:e1:1a:
                    a4:f7:2c:fb:b3:cb:54:68:e2:57:14:e1:1f:e5:2d:
                    23:e0:ed:1c:fe:55:92:1f:e5:ea:a3:37:6a:57:47:
                    7d:8b:89:2e:27:b5:0c:26:bb:ce:f8:6f:e2:47:54:
                    bc:31:6e:65:f7:c1:68:14:84:90:82:30:cc:f1:33:
                    64:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:78:56:34:71:77:0D:10:17:1D:6A:FE:45:05:17:2C:3E:D9:1B:14
            X509v3 Authority Key Identifier:
                keyid:C1:2F:0F:57:2D:A3:38:D2:13:44:1E:F0:7C:A5:11:D1:A9:C8:9B:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wS8PVy2jONITRB7wfKUR0anIm20.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:40:11:33:67:8a:78:72:4c:25:ea:9f:d8:b8:e4:b4:b1:e3:
         ee:45:01:23:23:57:6e:33:03:d9:3e:fa:ab:7c:44:46:b5:3f:
         8b:09:75:51:47:2d:c7:7f:a6:d8:87:f1:5c:25:ca:d9:7d:6d:
         50:fd:c7:4a:6e:d5:33:d4:d0:5d:f6:99:c3:0d:75:cd:81:11:
         9b:3c:f6:8f:6d:a1:bb:0c:60:f7:b3:29:bd:d6:40:77:d3:2d:
         1c:ee:06:d6:ff:13:e8:20:39:9b:54:27:dd:da:09:f5:54:bf:
         0e:ef:29:b7:d9:ec:d9:fd:c2:e6:54:72:fd:dc:65:06:ec:5d:
         cb:d8:c2:b7:dc:9d:64:54:a4:cd:52:ec:d0:30:15:21:0c:38:
         49:eb:95:ba:c6:f4:11:22:d5:0f:1e:97:f7:c9:98:73:af:a7:
         af:15:b8:9a:21:9d:b9:c6:7f:fc:67:e2:bf:e3:35:b1:6f:84:
         33:85:d6:08:ff:b1:36:4d:9e:e3:f7:64:fa:8e:f0:2c:55:23:
         84:e8:b8:02:0e:da:8c:17:ad:d3:50:92:d7:dc:bc:70:06:74:
         92:fa:df:5b:e5:27:8d:4e:09:1f:e6:32:b2:ab:6d:88:91:5c:
         10:d4:7a:42:a9:22:34:62:cb:4e:b5:19:a6:e9:40:48:46:54:
         c9:79:f8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:25:03 2026 by rpki-client