Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.mft
File:                     WKqOb2Cb9VgUA20moSpeKyUViTo.mft (raw, json)
Hash identifier:          DK7oeB/l6++HaUUgoo2qr6w4UjXW6AGeYVlvRGLZhao=
Subject key identifier:   7A:FE:CB:DA:93:F5:21:B8:03:82:45:A6:6D:DE:4B:6C:4E:8B:E1:B8
Authority key identifier: 58:AA:8E:6F:60:9B:F5:58:14:03:6D:26:A1:2A:5E:2B:25:15:89:3A
Certificate issuer:       /CN=A914EBB2/serialNumber=58AA8E6F609BF55814036D26A12A5E2B2515893A
Certificate serial:       8B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKqOb2Cb9VgUA20moSpeKyUViTo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.mft
Manifest number:          84
Signing time:             Thu 03 Sep 2026 04:24:13 +0000
Manifest this update:     Thu 03 Sep 2026 04:24:13 +0000
Manifest next update:     Thu 10 Sep 2026 04:24:13 +0000
Files and hashes:         1: WKqOb2Cb9VgUA20moSpeKyUViTo.crl (hash: s8dakxxES8IaLqHlRtIAMAl83azlEDP7XAeAd4OG2XE=)
                          2: 651B78142DD711F187F45729B3833773.roa (hash: orGvvH8EtrQFqpfDS8Xvz4vEWTgyCI2f9BcO9d6cJBw=)
                          3: D23FC546011111F1B3598E67446F56BC.roa (hash: vcrWn/T7PWva5wilhUJF83D5sEdB2Zxd5D/0CZVE3OU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.crl
                          rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKqOb2Cb9VgUA20moSpeKyUViTo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 04:24:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139 (0x8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EBB2, serialNumber=58AA8E6F609BF55814036D26A12A5E2B2515893A
        Validity
            Not Before: Sep  3 04:24:13 2026 GMT
            Not After : Sep 10 04:24:13 2026 GMT
        Subject: CN=6a98f66d-f68b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6e:c2:48:21:bb:6e:a4:38:03:14:f5:b5:70:
                    3b:3b:f3:9b:31:16:9d:af:b3:c4:b5:ec:d3:a5:d9:
                    b1:35:9c:0d:09:e5:61:1d:d3:f5:b1:71:58:eb:b9:
                    0c:f2:ad:89:c6:78:e7:69:ba:f8:25:43:aa:5f:a2:
                    2d:ae:56:48:92:41:39:2c:25:14:cd:2c:b9:9f:c3:
                    4e:f8:e0:7e:f5:f7:6c:37:37:f6:c2:94:95:61:cc:
                    f9:92:0e:ed:64:f8:22:ff:5b:1e:c4:b1:55:25:0e:
                    2e:6f:e9:dc:17:b2:cc:5e:41:18:67:6c:be:87:9d:
                    13:35:40:c7:3e:e8:71:65:61:a4:3a:72:3c:cd:46:
                    a6:00:d0:9b:8e:30:46:7d:d1:8f:72:bc:6d:d3:8b:
                    97:e0:f6:db:60:76:f2:36:af:b3:c7:5d:f8:7c:40:
                    c2:d7:fb:50:52:1b:dc:49:b3:4e:9f:ba:93:a8:1e:
                    1c:a1:57:09:42:b2:02:d1:c2:af:d1:8d:74:c4:aa:
                    0c:33:82:f8:6d:32:d6:fa:93:1a:c4:ca:9e:b4:65:
                    5d:09:c0:2b:1b:bd:99:f7:c9:c0:11:42:2b:b1:55:
                    f1:59:0a:1c:1c:8a:10:1e:e0:3e:a8:5c:e2:eb:ac:
                    0b:62:f1:23:53:ef:39:ad:0e:59:64:ca:1e:3d:80:
                    83:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:FE:CB:DA:93:F5:21:B8:03:82:45:A6:6D:DE:4B:6C:4E:8B:E1:B8
            X509v3 Authority Key Identifier:
                keyid:58:AA:8E:6F:60:9B:F5:58:14:03:6D:26:A1:2A:5E:2B:25:15:89:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKqOb2Cb9VgUA20moSpeKyUViTo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:c7:a8:29:f3:d4:51:a2:e8:95:c4:3f:33:6d:3b:84:cb:f8:
         5e:1f:54:d1:7a:d6:5b:30:bf:6e:15:2d:ad:f3:00:a8:e1:dc:
         45:68:5f:7a:14:bb:4d:9f:9f:9d:a0:84:db:5c:89:51:5b:d5:
         6d:de:82:a0:77:8f:18:a0:ef:92:6d:f5:57:8a:45:65:a9:8c:
         43:84:a8:be:40:6b:f4:97:28:c3:04:18:60:c0:24:96:4c:00:
         32:fc:d5:39:60:a0:c1:33:22:9b:5a:b7:2f:bc:be:87:dc:4d:
         41:e5:bc:cd:d6:91:2b:2f:5e:34:68:88:da:7f:9f:6c:da:55:
         cd:23:11:7d:dd:1a:da:a5:57:b2:c1:88:24:e3:4e:18:22:1f:
         da:66:fa:b5:0b:2d:8c:90:d1:f0:13:05:63:ab:07:66:97:f4:
         e6:ba:fe:ad:ef:d9:2d:2a:6e:46:bf:7a:7d:04:90:7e:94:66:
         11:fd:89:85:58:aa:55:a0:d6:2c:cf:69:e8:8c:8a:38:8c:de:
         c1:c0:0c:de:79:bd:a2:5e:84:31:10:03:fa:0a:d4:7d:8a:27:
         75:02:78:a1:7f:92:5c:03:a6:5d:de:a2:ae:e3:0b:33:28:ad:
         50:65:e6:81:fc:c7:12:c3:14:60:25:b9:12:95:de:69:ff:d2:
         98:41:47:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:13:22 2026 by rpki-client