Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.mft
File:                     _wsVRthMDZNVkFtsopPiW0QJSMU.mft (raw, json)
Hash identifier:          x/uN/kvuDSz8IMPGkT3QU2vFNelx/ckOERsYwllzO+o=
Subject key identifier:   76:BC:EB:4B:4F:9B:32:C3:50:ED:B1:3C:F4:03:99:F1:77:FD:93:CE
Authority key identifier: FF:0B:15:46:D8:4C:0D:93:55:90:5B:6C:A2:93:E2:5B:44:09:48:C5
Certificate issuer:       /CN=A9198F53/serialNumber=FF0B1546D84C0D9355905B6CA293E25B440948C5
Certificate serial:       0C18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wsVRthMDZNVkFtsopPiW0QJSMU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.mft
Manifest number:          0C0A
Signing time:             Tue 22 Sep 2026 18:42:49 +0000
Manifest this update:     Tue 22 Sep 2026 18:42:49 +0000
Manifest next update:     Tue 29 Sep 2026 18:42:49 +0000
Files and hashes:         1: _wsVRthMDZNVkFtsopPiW0QJSMU.crl (hash: vE36mzqGz+rlvtVWxTepXfmSzlpC0/psYUzCCUoewns=)
                          2: 0B1FBD4A40F611EAACD44866C4F9AE02.roa (hash: DFdvRHgXchuBm4qDLuYljzDy6YW5jSvcOAQEQdXRUns=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.crl
                          rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wsVRthMDZNVkFtsopPiW0QJSMU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 18:42:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3096 (0xc18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198F53, serialNumber=FF0B1546D84C0D9355905B6CA293E25B440948C5
        Validity
            Not Before: Sep 22 18:42:49 2026 GMT
            Not After : Sep 29 18:42:49 2026 GMT
        Subject: CN=6ab2cc29-143e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e9:c7:5a:c7:b0:61:a1:35:89:20:01:be:8f:
                    19:9e:73:cd:5a:b2:d6:51:01:29:13:a1:f0:23:45:
                    fe:93:ba:69:1f:46:22:01:2b:ec:7f:8b:70:fd:7d:
                    33:8f:e5:54:4d:c0:df:24:dd:c8:bf:a6:c8:f0:aa:
                    25:6c:d2:23:98:63:13:6d:6a:97:6e:aa:98:96:b8:
                    f4:e4:74:23:27:8a:fd:5a:3b:a3:5b:9d:61:88:ce:
                    d6:40:14:de:45:83:35:c0:4b:30:a6:06:0c:77:c5:
                    87:c9:52:93:20:e9:ac:07:17:0f:d9:bf:67:68:91:
                    3c:20:2b:4b:d7:bc:05:d7:ed:c1:0f:d9:8f:4d:f6:
                    e4:8b:1c:2e:24:76:49:88:be:99:16:0a:97:cb:06:
                    17:6a:21:e8:7f:82:bf:41:3f:de:3e:09:48:e3:70:
                    6f:cb:c3:87:f2:20:3e:9a:d6:ff:0a:6d:0b:10:32:
                    0e:2e:c8:b3:46:a4:7e:6e:53:fc:cb:c4:d7:c6:09:
                    a8:ca:59:57:c8:98:a1:02:f0:15:45:e3:89:81:18:
                    05:b8:db:ea:23:1a:04:3f:39:c2:5b:f2:80:0d:fb:
                    78:40:a4:40:aa:8a:08:a8:73:f0:13:46:eb:57:48:
                    83:15:9e:f8:22:59:d0:c0:c6:5a:d1:61:a7:23:51:
                    d0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:BC:EB:4B:4F:9B:32:C3:50:ED:B1:3C:F4:03:99:F1:77:FD:93:CE
            X509v3 Authority Key Identifier:
                keyid:FF:0B:15:46:D8:4C:0D:93:55:90:5B:6C:A2:93:E2:5B:44:09:48:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wsVRthMDZNVkFtsopPiW0QJSMU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:1f:d9:f7:6a:a2:dd:2a:68:1b:b1:91:d4:03:dd:2a:e4:b8:
         e6:a0:9b:52:51:6e:43:be:b9:a2:d8:72:90:cc:97:bb:32:8d:
         4b:02:51:91:13:76:a2:19:90:6f:17:64:68:1b:71:77:b9:0c:
         62:17:31:40:e0:d4:a2:9d:b3:8a:d2:54:75:f7:00:8c:6d:86:
         89:27:66:0f:fc:fa:76:d5:0c:d4:0f:09:4e:7c:8a:9e:f9:58:
         c7:f8:57:03:de:e1:19:65:80:4a:e0:c5:f8:b6:8b:05:d0:dc:
         e4:5a:70:49:16:7d:88:5d:2c:07:b2:3a:68:c6:7a:df:5d:05:
         02:e4:49:19:7b:03:0d:7f:3f:d8:57:19:37:28:b5:1f:8d:fe:
         3c:9f:aa:b4:93:04:d3:75:82:a0:13:b3:e0:bd:b8:f6:8a:f1:
         33:97:dc:84:3f:3a:06:c8:f1:16:d5:4c:28:4e:0c:91:81:02:
         b1:6e:c0:33:3a:89:c1:d8:09:00:ba:f4:3a:c9:40:4b:a2:f8:
         de:38:81:95:37:10:8a:8a:1a:f3:a6:60:4a:2d:a3:25:98:e8:
         b9:49:b6:6c:7c:19:26:0a:a6:f8:96:cb:47:42:ab:58:d6:30:
         7e:b8:a7:56:9b:8c:df:d6:2b:4a:2e:a1:3c:1e:7d:78:b4:c6:
         d5:e8:7c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:17:53 2026 by rpki-client