Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.mft
File:                     WU96C6m9HBOGhHzoljlj_k5xY2w.mft (raw, json)
Hash identifier:          s4B+dOXxBnZAcpYgcuRp9Ppl7Zawb8iXQQk8ltjzlaM=
Subject key identifier:   A8:91:7B:A4:34:76:A6:6C:55:8A:C3:2A:D5:40:95:05:99:A5:C8:93
Authority key identifier: 59:4F:7A:0B:A9:BD:1C:13:86:84:7C:E8:96:39:63:FE:4E:71:63:6C
Certificate issuer:       /CN=A91FFEDB/serialNumber=594F7A0BA9BD1C1386847CE8963963FE4E71636C
Certificate serial:       02A7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WU96C6m9HBOGhHzoljlj_k5xY2w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.mft
Manifest number:          029F
Signing time:             Wed 13 May 2026 01:41:39 +0000
Manifest this update:     Wed 13 May 2026 01:41:38 +0000
Manifest next update:     Wed 20 May 2026 01:41:38 +0000
Files and hashes:         1: WU96C6m9HBOGhHzoljlj_k5xY2w.crl (hash: kDTjpeMrnxRgXdzge9MKckQfNwQQe4gFUtqhabxrSfk=)
                          2: 3CE5C23A550611ED96C8F350C4F9AE02.roa (hash: Q0Na7uz+8/SY8dENTuHd10OmIdY+SANtmNHmLdr0v6s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.crl
                          rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WU96C6m9HBOGhHzoljlj_k5xY2w.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 679 (0x2a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FFEDB, serialNumber=594F7A0BA9BD1C1386847CE8963963FE4E71636C
        Validity
            Not Before: May 13 01:41:38 2026 GMT
            Not After : May 20 01:41:38 2026 GMT
        Subject: CN=6a03d6d3-d4d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:8b:3e:24:1d:b9:72:15:74:d3:93:07:d1:2d:
                    78:2f:9e:42:6c:04:86:a8:22:33:29:12:a9:75:91:
                    3e:d6:47:dc:a7:1e:47:e7:a5:db:fc:55:a4:ec:e0:
                    ca:44:18:c2:ca:1b:56:7a:d8:19:b2:a0:a0:2f:ac:
                    bf:6a:8c:e5:9a:4a:17:62:12:d2:27:3a:05:02:be:
                    b6:ac:6a:fe:3a:b6:48:a1:90:53:c6:54:c5:bc:dd:
                    f2:aa:09:55:f1:75:6a:1d:36:1d:06:80:f2:63:ba:
                    6f:99:73:2d:1e:5b:ab:67:b1:40:b8:49:71:e2:6b:
                    e9:67:b8:a2:eb:a0:b3:8d:5c:e5:e3:90:b5:ec:7f:
                    63:65:f9:84:77:8f:b1:dc:f3:f6:40:ea:be:f0:e7:
                    0f:1f:11:e2:68:21:af:98:f2:a4:1d:6c:21:f2:43:
                    e7:6f:79:1f:ae:5b:c4:15:fc:27:17:ee:23:d0:65:
                    d5:c1:80:64:2f:a9:05:6f:6e:08:bc:9b:5a:9d:8a:
                    95:7e:63:c1:09:32:3f:fb:72:f0:22:84:c8:01:00:
                    ea:4e:2d:50:84:5c:ea:83:6c:2d:0a:90:3b:6a:02:
                    b1:86:47:d8:d0:9e:66:c3:40:97:13:c6:9a:d7:00:
                    2d:4e:ea:3c:5e:7e:71:84:1f:9c:31:63:03:3a:ae:
                    87:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:91:7B:A4:34:76:A6:6C:55:8A:C3:2A:D5:40:95:05:99:A5:C8:93
            X509v3 Authority Key Identifier:
                keyid:59:4F:7A:0B:A9:BD:1C:13:86:84:7C:E8:96:39:63:FE:4E:71:63:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WU96C6m9HBOGhHzoljlj_k5xY2w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:1f:07:72:f0:e7:77:dc:c0:ec:f3:26:47:34:df:c3:d6:0d:
         da:c2:d2:6c:7a:8d:8f:9d:4a:0b:1a:1b:9f:44:2c:ff:01:56:
         b7:42:b3:ee:6b:06:26:a0:cc:36:a3:18:21:3f:bc:93:f8:bc:
         e5:c7:cd:ec:62:a1:ec:ac:90:b1:14:79:3d:72:ac:87:75:0d:
         60:e1:a0:29:48:50:31:e3:2e:b4:96:6b:ce:7a:ab:95:c1:4f:
         38:4d:f0:cd:f0:8a:67:8b:a7:73:ad:a5:50:d2:9d:8e:28:eb:
         11:f3:c4:f6:0c:9a:70:8f:6d:bc:b6:77:0c:a6:dd:73:fe:fd:
         20:25:d3:72:8f:1d:43:c5:0d:4b:59:1c:58:84:42:d4:7b:b6:
         fd:c4:cf:6a:3c:f9:64:3b:8f:9b:84:3e:21:7f:cf:a7:cb:d7:
         2f:57:cc:4b:61:6b:75:f2:98:31:66:d6:f6:d4:84:0a:a7:e7:
         e2:3d:3c:23:21:32:dc:42:0d:90:88:4c:e9:36:e0:4c:b8:58:
         10:00:60:0c:bb:04:85:0e:32:c4:42:61:cc:07:10:21:83:dd:
         e5:6c:03:0f:fe:bf:1c:7e:6b:20:16:3f:72:d9:e2:04:fc:32:
         7e:27:9e:82:d8:0a:0e:ab:5b:3e:e1:c9:1b:8e:ae:55:a2:65:
         22:7f:5d:6a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkZFREIxMTAvBgNVBAUTKDU5NEY3QTBCQTlCRDFDMTM4Njg0N0NFODk2Mzk2M0ZF
NEU3MTYzNkMwHhcNMjYwNTEzMDE0MTM4WhcNMjYwNTIwMDE0MTM4WjAYMRYwFAYD
VQQDEw02YTAzZDZkMy1kNGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjos+JB25chV005MH0S14L55CbASGqCIzKRKpdZE+1kfcpx5H56Xb/FWk7ODK
RBjCyhtWetgZsqCgL6y/aozlmkoXYhLSJzoFAr62rGr+OrZIoZBTxlTFvN3yqglV
8XVqHTYdBoDyY7pvmXMtHlurZ7FAuElx4mvpZ7ii66CzjVzl45C17H9jZfmEd4+x
3PP2QOq+8OcPHxHiaCGvmPKkHWwh8kPnb3kfrlvEFfwnF+4j0GXVwYBkL6kFb24I
vJtanYqVfmPBCTI/+3LwIoTIAQDqTi1QhFzqg2wtCpA7agKxhkfY0J5mw0CXE8aa
1wAtTuo8Xn5xhB+cMWMDOq6HRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKiRe6Q0
dqZsVYrDKtVAlQWZpciTMB8GA1UdIwQYMBaAFFlPegupvRwThoR86JY5Y/5OcWNs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkVEQi8zNEQ1RDdFNjU1
MDIxMUVEOTY0QjdBNEFDNEY5QUUwMi9XVTk2QzZtOUhCT0doSHpvbGpsal9rNXhZ
MncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1dVOTZDNm05SEJPR2hIem9samxqX2s1eFkydy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RkVEQi8zNEQ1RDdFNjU1MDIxMUVEOTY0QjdBNEFDNEY5QUUwMi9XVTk2QzZtOUhC
T0doSHpvbGpsal9rNXhZMncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALB8HcvDnd9zA7PMmRzTfw9YN2sLSbHqNj51KCxobn0Qs/wFWt0Kz7msGJqDM
NqMYIT+8k/i85cfN7GKh7KyQsRR5PXKsh3UNYOGgKUhQMeMutJZrznqrlcFPOE3w
zfCKZ4unc62lUNKdjijrEfPE9gyacI9tvLZ3DKbdc/79ICXTco8dQ8UNS1kcWIRC
1Hu2/cTPajz5ZDuPm4Q+IX/Pp8vXL1fMS2FrdfKYMWbW9tSECqfn4j08IyEy3EIN
kIhM6TbgTLhYEABgDLsEhQ4yxEJhzAcQIYPd5WwDD/6/HH5rIBY/ctniBPwyfiee
gtgKDqtbPuHJG46uVaJlIn9dag==
-----END CERTIFICATE-----
Generated at Wed May 13 05:08:46 2026 by rpki-client