Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.mft
File:                     wsO6iC7D3Pwn8TzociVgfaqheE0.mft (raw, json)
Hash identifier:          jOBheBWTIqSj8k5jWFuR3HZgYr8CofbPkWZqfnv7PQw=
Subject key identifier:   B7:64:A1:C6:E6:BE:D5:EC:1F:FD:66:30:4C:32:C3:BD:03:C7:78:73
Authority key identifier: C2:C3:BA:88:2E:C3:DC:FC:27:F1:3C:E8:72:25:60:7D:AA:A1:78:4D
Certificate issuer:       /CN=A91D3ED4/serialNumber=C2C3BA882EC3DCFC27F13CE87225607DAAA1784D
Certificate serial:       0610
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsO6iC7D3Pwn8TzociVgfaqheE0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.mft
Manifest number:          0607
Signing time:             Tue 12 May 2026 22:58:13 +0000
Manifest this update:     Tue 12 May 2026 22:58:12 +0000
Manifest next update:     Tue 19 May 2026 22:58:12 +0000
Files and hashes:         1: wsO6iC7D3Pwn8TzociVgfaqheE0.crl (hash: zH5ef77VISLnnThCvND7ee9jlX9e0A2+Gk3orHwXRIQ=)
                          2: B84B847AEF3911EBACC9E938C4F9AE02.roa (hash: fJFNVhrHKXOPT9xHSax1POpAyESfiKByTHIHaV1ut8U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.crl
                          rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsO6iC7D3Pwn8TzociVgfaqheE0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:58:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1552 (0x610)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D3ED4, serialNumber=C2C3BA882EC3DCFC27F13CE87225607DAAA1784D
        Validity
            Not Before: May 12 22:58:12 2026 GMT
            Not After : May 19 22:58:12 2026 GMT
        Subject: CN=6a03b085-c76d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4a:b9:dd:7c:d2:f7:05:ce:a8:c9:ba:d0:ad:
                    04:e6:e6:98:69:79:8e:ac:54:fe:ba:84:b8:2b:70:
                    0f:0b:a8:9e:fd:cc:f1:01:34:60:cd:4a:ad:27:53:
                    a0:14:82:f3:55:50:6e:08:bd:c1:61:c8:cb:11:3b:
                    c0:e9:6e:e9:c1:e5:f5:57:f2:e2:67:34:26:ad:11:
                    d9:52:97:99:16:d1:b0:f8:89:cd:e4:e1:28:04:81:
                    2c:1c:98:cf:56:98:10:11:11:f1:13:c8:25:14:ae:
                    81:20:3d:38:7d:29:27:69:4c:85:73:96:bc:46:a9:
                    30:64:fd:c5:97:62:bd:48:33:a0:2a:1f:86:4d:85:
                    58:33:25:d3:02:2f:4b:bc:42:8b:2f:ad:95:db:35:
                    52:4d:5e:b3:df:52:3e:7b:34:b5:fc:3e:32:ce:ee:
                    5c:dc:68:ae:1c:55:f0:92:d1:49:3f:07:ca:ef:af:
                    41:06:4b:6e:30:af:d9:ae:65:98:53:ac:69:a0:23:
                    d8:af:ed:dc:08:bd:f8:59:4f:af:aa:6e:0f:a1:09:
                    64:88:8f:5e:5d:9b:c5:75:06:5f:7c:48:10:e5:65:
                    88:41:3f:ce:3e:a2:0d:ef:63:5c:3b:3c:f9:ec:3c:
                    11:e5:19:93:9e:9a:2e:40:8d:1d:5c:59:9c:ca:7e:
                    71:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:64:A1:C6:E6:BE:D5:EC:1F:FD:66:30:4C:32:C3:BD:03:C7:78:73
            X509v3 Authority Key Identifier:
                keyid:C2:C3:BA:88:2E:C3:DC:FC:27:F1:3C:E8:72:25:60:7D:AA:A1:78:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsO6iC7D3Pwn8TzociVgfaqheE0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:02:ad:ce:5b:59:11:4e:da:e0:26:8b:fa:5b:8a:f5:a9:52:
         25:f7:06:dc:7c:d9:f4:82:c4:aa:9d:e0:2f:ab:b5:2a:d2:f9:
         d0:74:ab:76:b4:e4:3b:95:e4:5c:12:69:fb:32:67:e2:6e:69:
         fe:73:c4:12:56:b1:87:c5:a7:c2:2d:a6:6b:50:b7:13:27:65:
         78:2d:ba:79:89:68:1a:99:5c:f2:16:a7:a1:8d:ec:c8:da:74:
         a1:d5:b4:1d:ae:05:ac:56:de:6b:c0:03:2f:31:82:ec:39:75:
         2e:2d:1e:fa:af:b7:1e:af:18:a3:b7:25:09:6a:20:89:3e:ba:
         1d:84:04:b2:0d:a5:9f:71:64:1f:bc:88:5e:87:8e:29:14:dd:
         73:43:01:64:32:8b:8a:96:db:a4:ba:90:db:35:57:2e:a5:56:
         0e:5c:6d:30:4e:e9:3a:7f:09:d8:af:fe:c5:ab:57:4b:a8:7c:
         62:cd:eb:3a:9b:c5:7b:64:95:6a:fe:ff:37:70:e3:0b:7d:05:
         a3:53:59:7d:8a:4e:74:7a:4c:03:cf:b7:d7:a4:c3:ba:ce:37:
         ae:a6:bd:37:0a:a8:45:78:2c:f8:23:fa:d1:8c:1f:f5:e4:2f:
         13:db:63:a5:18:8c:58:57:ba:d9:4c:4d:a1:9e:fa:91:59:ce:
         45:45:19:d8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDNFRDQxMTAvBgNVBAUTKEMyQzNCQTg4MkVDM0RDRkMyN0YxM0NFODcyMjU2MDdE
QUFBMTc4NEQwHhcNMjYwNTEyMjI1ODEyWhcNMjYwNTE5MjI1ODEyWjAYMRYwFAYD
VQQDEw02YTAzYjA4NS1jNzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAl0q53XzS9wXOqMm60K0E5uaYaXmOrFT+uoS4K3APC6ie/czxATRgzUqtJ1Og
FILzVVBuCL3BYcjLETvA6W7pweX1V/LiZzQmrRHZUpeZFtGw+InN5OEoBIEsHJjP
VpgQERHxE8glFK6BID04fSknaUyFc5a8RqkwZP3Fl2K9SDOgKh+GTYVYMyXTAi9L
vEKLL62V2zVSTV6z31I+ezS1/D4yzu5c3GiuHFXwktFJPwfK769BBktuMK/ZrmWY
U6xpoCPYr+3cCL34WU+vqm4PoQlkiI9eXZvFdQZffEgQ5WWIQT/OPqIN72NcOzz5
7DwR5RmTnpouQI0dXFmcyn5xRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLdkocbm
vtXsH/1mMEwyw70Dx3hzMB8GA1UdIwQYMBaAFMLDuoguw9z8J/E86HIlYH2qoXhN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0VENC8yOTA3OEE3MkVG
MzcxMUVCOTE3NjhBMzZDNEY5QUUwMi93c082aUM3RDNQd244VHpvY2lWZ2ZhcWhl
RTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dzTzZpQzdEM1B3bjhUem9jaVZnZmFxaGVFMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
M0VENC8yOTA3OEE3MkVGMzcxMUVCOTE3NjhBMzZDNEY5QUUwMi93c082aUM3RDNQ
d244VHpvY2lWZ2ZhcWhlRTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADQKtzltZEU7a4CaL+luK9alSJfcG3HzZ9ILEqp3gL6u1KtL50HSrdrTkO5Xk
XBJp+zJn4m5p/nPEElaxh8Wnwi2ma1C3EydleC26eYloGplc8hanoY3syNp0odW0
Ha4FrFbea8ADLzGC7Dl1Li0e+q+3Hq8Yo7clCWogiT66HYQEsg2ln3FkH7yIXoeO
KRTdc0MBZDKLipbbpLqQ2zVXLqVWDlxtME7pOn8J2K/+xatXS6h8Ys3rOpvFe2SV
av7/N3DjC30Fo1NZfYpOdHpMA8+316TDus43rqa9NwqoRXgs+CP60Ywf9eQvE9tj
pRiMWFe62UxNoZ76kVnORUUZ2A==
-----END CERTIFICATE-----
Generated at Wed May 13 08:50:33 2026 by rpki-client