Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9116297/734C43B0C5CB11F09666BC58C4F9AE02/w6njKhKZ8sLJIDVl2sWZkTlyMr0.mft
File:                     w6njKhKZ8sLJIDVl2sWZkTlyMr0.mft (raw, json)
Hash identifier:          3dUN1HV7iPJ5+gDbF9gK448DcXPPOL5HpufYxz4/5R0=
Subject key identifier:   99:34:19:B2:3A:7E:48:27:15:66:7E:0E:CA:FB:7B:1A:26:8A:91:E5
Authority key identifier: C3:A9:E3:2A:12:99:F2:C2:C9:20:35:65:DA:C5:99:91:39:72:32:BD
Certificate issuer:       /CN=A9116297/serialNumber=C3A9E32A1299F2C2C9203565DAC59991397232BD
Certificate serial:       B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6njKhKZ8sLJIDVl2sWZkTlyMr0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116297/734C43B0C5CB11F09666BC58C4F9AE02/w6njKhKZ8sLJIDVl2sWZkTlyMr0.mft
Manifest number:          AE
Signing time:             Sun 25 Oct 2026 07:28:25 +0000
Manifest this update:     Sun 25 Oct 2026 07:28:24 +0000
Manifest next update:     Sun 01 Nov 2026 07:28:24 +0000
Files and hashes:         1: w6njKhKZ8sLJIDVl2sWZkTlyMr0.crl (hash: g3nTG1kOgRZSIRA4K4kw2DOZqrfU9ze1g19ki7Aci5o=)
                          2: 217645DAC5CC11F0B5963A5AC4F9AE02.roa (hash: b9SLnnmjCzEPCkObeuo8/EHmdYFDq+wqAL43fh98qxw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116297/734C43B0C5CB11F09666BC58C4F9AE02/w6njKhKZ8sLJIDVl2sWZkTlyMr0.crl
                          rsync://rpki.apnic.net/member_repository/A9116297/734C43B0C5CB11F09666BC58C4F9AE02/w6njKhKZ8sLJIDVl2sWZkTlyMr0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6njKhKZ8sLJIDVl2sWZkTlyMr0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 07:28:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176 (0xb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116297, serialNumber=C3A9E32A1299F2C2C9203565DAC59991397232BD
        Validity
            Not Before: Oct 25 07:28:24 2026 GMT
            Not After : Nov  1 07:28:24 2026 GMT
        Subject: CN=6addaf99-5bd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2b:8b:d1:c9:b9:e0:0d:2b:7d:e0:c1:2e:cc:
                    0b:74:b2:66:ee:4b:61:e4:75:c8:0c:68:c7:5a:ae:
                    6e:fc:cd:a7:d7:42:43:80:58:48:74:b2:dd:ba:9c:
                    2e:0a:f4:71:c4:77:38:c6:3c:9c:8a:88:d4:47:b3:
                    50:c1:63:37:b2:55:7e:25:f2:ed:55:dc:0c:5e:fc:
                    60:f0:2d:69:f5:f7:6c:a6:df:30:1f:03:4f:d9:c0:
                    7d:53:bb:65:a2:f4:94:90:cd:01:30:c4:66:3a:8d:
                    34:24:36:c7:a8:13:f8:3d:6d:0d:56:99:cc:a9:3f:
                    af:a7:4e:fd:67:ab:78:74:02:76:36:0f:09:bc:f6:
                    f0:b3:f5:ae:24:0b:01:d6:98:f0:55:7b:da:eb:7b:
                    b8:aa:d2:0e:1d:1d:99:3d:fc:06:6f:8f:87:53:a0:
                    ff:37:42:88:9b:cb:25:89:8a:8b:7a:7e:e1:fd:1e:
                    76:fc:43:d0:05:ae:45:2e:78:0f:a3:f4:0f:53:fb:
                    77:3b:4e:4f:a7:10:06:21:66:71:f3:79:38:7b:49:
                    dd:c5:ff:0e:9a:e1:f9:20:b0:62:b9:55:39:18:3f:
                    41:db:2f:50:d7:6d:f0:67:eb:fe:3f:e9:95:ea:67:
                    0c:ba:a3:f1:c9:08:fe:2b:12:31:3c:c8:82:1b:e6:
                    88:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:34:19:B2:3A:7E:48:27:15:66:7E:0E:CA:FB:7B:1A:26:8A:91:E5
            X509v3 Authority Key Identifier:
                keyid:C3:A9:E3:2A:12:99:F2:C2:C9:20:35:65:DA:C5:99:91:39:72:32:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116297/734C43B0C5CB11F09666BC58C4F9AE02/w6njKhKZ8sLJIDVl2sWZkTlyMr0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6njKhKZ8sLJIDVl2sWZkTlyMr0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116297/734C43B0C5CB11F09666BC58C4F9AE02/w6njKhKZ8sLJIDVl2sWZkTlyMr0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:e7:6c:4d:63:fd:ed:1e:96:dc:cc:e6:fd:a0:4e:b6:ee:99:
         73:0e:f3:28:61:d3:14:7b:dd:bd:0d:dd:46:22:93:7f:3f:38:
         f5:fa:db:64:25:d8:a5:6b:c2:03:96:ac:a1:72:72:bf:8e:7b:
         96:f5:a4:ff:13:63:36:98:69:51:eb:ea:87:36:7b:37:c1:f2:
         1d:ca:56:b0:6c:a6:45:84:11:ef:71:06:d0:b8:57:b5:a5:45:
         e6:c2:9d:04:c9:1d:98:5f:29:6e:0c:4b:ad:be:6e:49:cb:71:
         2b:7c:72:7f:c3:1d:87:71:e5:85:44:a6:fc:b3:9f:3b:b4:69:
         6c:a3:0a:72:2a:0f:59:a6:a1:98:99:06:08:02:65:7e:df:c0:
         c0:37:da:79:63:54:02:96:64:36:56:d3:48:3c:20:be:99:1b:
         fe:5b:b7:a9:eb:d1:92:2a:c5:07:d2:96:77:71:bb:3b:bc:f1:
         2c:ae:15:0c:e2:0e:9b:17:fe:ab:1b:3b:64:11:30:09:06:94:
         1c:be:7d:3b:e6:b0:6c:a5:a5:0c:1b:59:3a:db:03:75:a9:8e:
         f3:2d:fe:b8:4a:c0:fe:b2:50:2f:f9:1c:de:24:4b:e4:f0:b7:
         9a:c2:e8:cf:b1:05:99:37:ea:4e:96:dc:28:ac:ef:53:40:15:
         0b:b9:26:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 03:56:38 2026 by rpki-client