Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft
File:                     W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft (raw, json)
Hash identifier:          E9U5yghuAgy6lNQyi6hM14ynaW6pos9pf5J26FQOTWQ=
Subject key identifier:   0D:A9:C2:C1:47:70:1A:43:7D:5E:20:0E:82:81:FD:0C:56:ED:91:55
Authority key identifier: 5B:C4:94:E8:9D:0A:41:55:B5:52:53:63:D1:23:5C:5E:DC:0F:DE:2F
Certificate issuer:       /CN=A9171882/serialNumber=5BC494E89D0A4155B5525363D1235C5EDC0FDE2F
Certificate serial:       0192
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W8SU6J0KQVW1UlNj0SNcXtwP3i8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft
Manifest number:          018E
Signing time:             Wed 13 May 2026 04:29:28 +0000
Manifest this update:     Wed 13 May 2026 04:29:28 +0000
Manifest next update:     Wed 20 May 2026 04:29:28 +0000
Files and hashes:         1: W8SU6J0KQVW1UlNj0SNcXtwP3i8.crl (hash: dcyZxTQAZm6CgH9iUNhFeX7ip1pcU52r65xjsEBZHRM=)
                          2: FD990E7AF0B311EE9923BC84C4F9AE02.roa (hash: n8KxMW0Aaa9rptIg6bayOha3cuq2edyW8e+5wMGI3io=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.crl
                          rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W8SU6J0KQVW1UlNj0SNcXtwP3i8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 04:29:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 402 (0x192)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171882, serialNumber=5BC494E89D0A4155B5525363D1235C5EDC0FDE2F
        Validity
            Not Before: May 13 04:29:28 2026 GMT
            Not After : May 20 04:29:28 2026 GMT
        Subject: CN=6a03fe28-9372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:7a:71:3e:53:11:2d:42:21:40:90:e3:58:33:
                    c8:b1:60:32:b1:b2:ac:1e:5c:d0:6d:6c:74:a1:31:
                    c9:e9:b3:ee:ff:1d:42:5f:16:d9:10:2a:20:15:70:
                    9d:57:a7:2d:e6:a8:17:90:09:7b:71:32:6d:4d:c3:
                    d6:f6:af:27:ef:19:d4:72:91:37:7b:b4:4f:05:9b:
                    b8:ad:68:7d:c4:38:64:dd:b0:ca:f2:87:bf:10:ad:
                    45:0c:5d:82:9a:e5:50:ff:e1:19:75:92:05:f1:b1:
                    ba:62:db:14:97:a4:96:af:fd:77:d5:a6:a2:a7:1a:
                    eb:d7:90:5d:09:58:cb:41:9a:f7:e6:13:a5:82:d5:
                    b7:7b:fc:2e:57:d8:ee:c0:6e:55:d3:c2:57:bb:32:
                    fb:21:4e:2d:cc:d5:a8:88:71:98:4c:40:ff:49:a1:
                    7a:a0:57:06:fc:b0:17:4b:c7:f9:46:bd:39:93:00:
                    eb:56:50:6e:e3:b3:6a:f7:2b:08:9c:0d:fd:8b:81:
                    df:fc:3e:12:77:a2:17:36:71:57:60:cc:a2:3b:8b:
                    08:b3:be:44:3f:d9:db:9b:92:03:30:86:e5:9a:a0:
                    57:3f:27:7f:70:94:17:d6:6c:04:63:2c:4c:88:61:
                    13:7e:26:9e:76:97:47:a7:0e:84:80:6d:47:68:20:
                    5e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:A9:C2:C1:47:70:1A:43:7D:5E:20:0E:82:81:FD:0C:56:ED:91:55
            X509v3 Authority Key Identifier:
                keyid:5B:C4:94:E8:9D:0A:41:55:B5:52:53:63:D1:23:5C:5E:DC:0F:DE:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W8SU6J0KQVW1UlNj0SNcXtwP3i8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:c3:e0:5a:9d:65:a9:52:26:c3:2b:9c:2a:ae:1b:97:d6:73:
         b6:46:81:b2:f9:90:d7:58:15:8f:0c:84:82:d4:31:19:e6:5c:
         68:de:cd:74:cf:0d:9f:69:05:65:13:74:b4:4f:c9:65:a9:8f:
         80:c9:46:6e:d7:61:57:59:0d:f0:e2:91:77:fd:46:30:b3:bc:
         62:07:d3:42:e0:b0:7a:df:5e:c1:14:0e:96:9f:64:fb:0d:b4:
         0c:c2:91:b7:5b:c1:c1:18:b4:7b:de:6b:09:95:d8:68:26:96:
         c6:76:e9:59:8c:03:68:4c:ce:f7:f1:da:1e:61:b3:5a:b7:b2:
         06:16:9a:20:05:31:1f:b8:b9:bb:53:98:ea:e7:7a:55:f6:d9:
         77:9a:92:40:75:bf:28:9e:de:86:3b:f3:79:62:f9:1f:5e:5f:
         e6:27:f9:da:20:0f:a8:55:cc:82:cf:b7:d4:60:67:8d:0b:04:
         61:89:5f:c7:72:d1:2b:46:f3:3d:6e:30:44:55:82:79:d6:bc:
         7c:5f:3c:86:3d:bc:c2:5b:6b:d8:cb:b8:cd:7e:fe:f4:df:18:
         f2:4c:65:91:63:85:39:10:9a:21:e8:15:f6:da:51:b7:3e:27:
         ab:88:a9:e2:0b:a0:93:1f:35:e4:06:1c:5d:5e:c7:df:e9:e1:
         b7:91:22:14
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzE4ODIxMTAvBgNVBAUTKDVCQzQ5NEU4OUQwQTQxNTVCNTUyNTM2M0QxMjM1QzVF
REMwRkRFMkYwHhcNMjYwNTEzMDQyOTI4WhcNMjYwNTIwMDQyOTI4WjAYMRYwFAYD
VQQDEw02YTAzZmUyOC05MzcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+npxPlMRLUIhQJDjWDPIsWAysbKsHlzQbWx0oTHJ6bPu/x1CXxbZECogFXCd
V6ct5qgXkAl7cTJtTcPW9q8n7xnUcpE3e7RPBZu4rWh9xDhk3bDK8oe/EK1FDF2C
muVQ/+EZdZIF8bG6YtsUl6SWr/131aaipxrr15BdCVjLQZr35hOlgtW3e/wuV9ju
wG5V08JXuzL7IU4tzNWoiHGYTED/SaF6oFcG/LAXS8f5Rr05kwDrVlBu47Nq9ysI
nA39i4Hf/D4Sd6IXNnFXYMyiO4sIs75EP9nbm5IDMIblmqBXPyd/cJQX1mwEYyxM
iGETfiaedpdHpw6EgG1HaCBepwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA2pwsFH
cBpDfV4gDoKB/QxW7ZFVMB8GA1UdIwQYMBaAFFvElOidCkFVtVJTY9EjXF7cD94v
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTg4Mi9BOEMyNTFFQUYw
QjMxMUVFQTRDNzJGODRDNEY5QUUwMi9XOFNVNkowS1FWVzFVbE5qMFNOY1h0d1Az
aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1c4U1U2SjBLUVZXMVVsTmowU05jWHR3UDNpOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MTg4Mi9BOEMyNTFFQUYwQjMxMUVFQTRDNzJGODRDNEY5QUUwMi9XOFNVNkowS1FW
VzFVbE5qMFNOY1h0d1AzaTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAj8PgWp1lqVImwyucKq4bl9ZztkaBsvmQ11gVjwyEgtQxGeZcaN7NdM8Nn2kF
ZRN0tE/JZamPgMlGbtdhV1kN8OKRd/1GMLO8YgfTQuCwet9ewRQOlp9k+w20DMKR
t1vBwRi0e95rCZXYaCaWxnbpWYwDaEzO9/HaHmGzWreyBhaaIAUxH7i5u1OY6ud6
VfbZd5qSQHW/KJ7ehjvzeWL5H15f5if52iAPqFXMgs+31GBnjQsEYYlfx3LRK0bz
PW4wRFWCeda8fF88hj28wltr2Mu4zX7+9N8Y8kxlkWOFORCaIegV9tpRtz4nq4ip
4gugkx815AYcXV7H3+nht5EiFA==
-----END CERTIFICATE-----
Generated at Wed May 13 11:37:44 2026 by rpki-client