Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft
File:                     s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft (raw, json)
Hash identifier:          urb4Qe1vyMTQLdZECDNcXeoFSCwcJa2fM/skkdsHZ2g=
Subject key identifier:   9E:FA:B8:7F:48:66:A1:E7:6C:DA:21:88:33:24:9D:0C:0E:79:10:C7
Authority key identifier: B3:EC:1F:F6:AD:55:2A:A1:6E:E1:01:95:64:BA:D9:F7:61:FD:B5:D8
Certificate issuer:       /CN=A91A381A/serialNumber=B3EC1FF6AD552AA16EE1019564BAD9F761FDB5D8
Certificate serial:       01ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-wf9q1VKqFu4QGVZLrZ92H9tdg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft
Manifest number:          01DF
Signing time:             Wed 13 May 2026 03:37:01 +0000
Manifest this update:     Wed 13 May 2026 03:37:01 +0000
Manifest next update:     Wed 20 May 2026 03:37:01 +0000
Files and hashes:         1: s-wf9q1VKqFu4QGVZLrZ92H9tdg.crl (hash: CoIVnxqcVTMP/ScKjjfIl3HBw9B1oQTyHhl+6pgA5gg=)
                          2: EBB7A41AB4DA11EEBD650259C4F9AE02.roa (hash: SDwmGnNA62CDBnu6SIeNZtXcNKrSVhcMHLtnwpsVMtg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.crl
                          rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-wf9q1VKqFu4QGVZLrZ92H9tdg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 03:37:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 493 (0x1ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A381A, serialNumber=B3EC1FF6AD552AA16EE1019564BAD9F761FDB5D8
        Validity
            Not Before: May 13 03:37:01 2026 GMT
            Not After : May 20 03:37:01 2026 GMT
        Subject: CN=6a03f1dd-bcd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:99:26:8e:52:00:0d:e6:5b:73:8a:99:e7:ed:
                    66:b2:3a:a8:f1:86:47:68:9e:7d:17:64:eb:08:f9:
                    63:32:df:e0:ca:7f:fa:74:b8:3e:59:1c:13:3f:ef:
                    42:6b:ce:0c:ef:61:52:da:09:90:6b:30:15:50:00:
                    d1:2e:93:bf:f2:13:2e:f4:3b:ca:28:29:61:99:e9:
                    59:98:be:09:36:e6:e4:12:f4:0d:7a:93:72:47:d4:
                    ff:f8:2d:2e:cb:57:fb:8a:61:47:09:dc:0c:51:5f:
                    fd:d1:cb:07:37:bc:95:96:b0:7b:f8:08:e6:50:88:
                    50:ca:e5:00:cf:9f:e4:ee:3a:60:7c:2d:48:d8:45:
                    73:6e:2c:b6:95:a2:57:2d:3d:a1:8d:d7:00:72:bc:
                    73:9b:7b:85:e2:a0:77:c6:1c:dc:92:e1:35:22:a7:
                    4c:72:a5:da:a3:3a:39:32:b7:15:42:65:f2:88:f1:
                    6d:05:c6:9f:58:3f:14:3c:49:97:71:be:b9:fc:e7:
                    a1:37:50:18:34:3a:f2:fe:33:e2:31:b7:dd:6c:84:
                    13:65:8b:e3:db:27:26:6b:55:d6:73:23:12:b0:79:
                    0c:d1:95:1f:cc:6e:49:e9:e8:af:35:f0:1d:81:7c:
                    ca:3e:d5:f3:06:f7:f1:7a:70:ac:7a:03:cf:a4:c2:
                    0d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:FA:B8:7F:48:66:A1:E7:6C:DA:21:88:33:24:9D:0C:0E:79:10:C7
            X509v3 Authority Key Identifier:
                keyid:B3:EC:1F:F6:AD:55:2A:A1:6E:E1:01:95:64:BA:D9:F7:61:FD:B5:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-wf9q1VKqFu4QGVZLrZ92H9tdg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:70:e0:a5:3a:8e:5e:b0:70:35:75:12:18:ff:3e:b4:15:76:
         89:64:a6:61:ec:0a:82:e0:1f:83:c9:bd:41:c5:3c:5a:b9:ca:
         a7:76:42:b7:d6:24:12:37:b6:37:f5:da:c2:ee:d6:20:4a:39:
         68:08:a6:6d:94:96:b5:5b:42:8a:ac:d4:14:d5:1c:28:ad:3d:
         91:94:f0:43:fd:09:a9:dc:d8:db:27:97:46:f0:f4:95:6b:cc:
         7a:10:e1:2d:c7:7e:97:a7:cc:c2:5f:f9:96:9c:02:1c:5d:2a:
         69:54:df:a3:bf:ae:fd:30:90:1a:3d:d4:8b:ff:b5:4b:96:0c:
         85:8d:f4:05:bd:01:79:34:83:76:f3:b5:22:e9:75:7d:db:24:
         fe:05:eb:f4:0a:d8:f1:87:26:61:a9:e5:27:38:30:c7:95:21:
         e0:4f:04:ec:2a:6b:25:0e:ee:de:2e:f5:0f:03:b0:d8:85:bf:
         6b:01:72:ce:39:e9:ce:af:90:f5:20:7c:fd:1b:b7:e1:53:1a:
         3a:59:c1:9a:91:c8:8d:5d:82:41:7b:56:16:1f:45:1e:fc:a0:
         cc:a9:29:77:7d:2f:4d:e5:2b:69:14:b0:34:a4:48:2c:1e:d5:
         23:ff:5c:98:88:59:00:7c:51:0b:31:32:4a:dd:8a:ee:71:a7:
         1a:7d:0d:fc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTM4MUExMTAvBgNVBAUTKEIzRUMxRkY2QUQ1NTJBQTE2RUUxMDE5NTY0QkFEOUY3
NjFGREI1RDgwHhcNMjYwNTEzMDMzNzAxWhcNMjYwNTIwMDMzNzAxWjAYMRYwFAYD
VQQDEw02YTAzZjFkZC1iY2QwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAypkmjlIADeZbc4qZ5+1msjqo8YZHaJ59F2TrCPljMt/gyn/6dLg+WRwTP+9C
a84M72FS2gmQazAVUADRLpO/8hMu9DvKKClhmelZmL4JNubkEvQNepNyR9T/+C0u
y1f7imFHCdwMUV/90csHN7yVlrB7+AjmUIhQyuUAz5/k7jpgfC1I2EVzbiy2laJX
LT2hjdcAcrxzm3uF4qB3xhzckuE1IqdMcqXaozo5MrcVQmXyiPFtBcafWD8UPEmX
cb65/OehN1AYNDry/jPiMbfdbIQTZYvj2ycma1XWcyMSsHkM0ZUfzG5J6eivNfAd
gXzKPtXzBvfxenCsegPPpMINjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ76uH9I
ZqHnbNohiDMknQwOeRDHMB8GA1UdIwQYMBaAFLPsH/atVSqhbuEBlWS62fdh/bXY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzgxQS8yOEU4NkU0NDc5
RkYxMUVFQjMyQzIzNzlDNEY5QUUwMi9zLXdmOXExVktxRnU0UUdWWkxyWjkySDl0
ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Mtd2Y5cTFWS3FGdTRRR1ZaTHJaOTJIOXRkZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MzgxQS8yOEU4NkU0NDc5RkYxMUVFQjMyQzIzNzlDNEY5QUUwMi9zLXdmOXExVktx
RnU0UUdWWkxyWjkySDl0ZGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAt3DgpTqOXrBwNXUSGP8+tBV2iWSmYewKguAfg8m9QcU8WrnKp3ZCt9YkEje2
N/Xawu7WIEo5aAimbZSWtVtCiqzUFNUcKK09kZTwQ/0JqdzY2yeXRvD0lWvMehDh
Lcd+l6fMwl/5lpwCHF0qaVTfo7+u/TCQGj3Ui/+1S5YMhY30Bb0BeTSDdvO1Iul1
fdsk/gXr9ArY8YcmYanlJzgwx5Uh4E8E7CprJQ7u3i71DwOw2IW/awFyzjnpzq+Q
9SB8/Ru34VMaOlnBmpHIjV2CQXtWFh9FHvygzKkpd30vTeUraRSwNKRILB7VI/9c
mIhZAHxRCzEySt2K7nGnGn0N/A==
-----END CERTIFICATE-----
Generated at Wed May 13 14:06:06 2026 by rpki-client