Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft
File:                     WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft (raw, json)
Hash identifier:          j/7fy8oPDGPI56GnVFV9XCCQ9+iWfbsT3JCmvOxnmoM=
Subject key identifier:   DE:A3:8D:BD:5A:28:38:2D:42:E2:C8:E1:EC:63:1D:77:69:47:6D:F1
Authority key identifier: 59:0F:A3:C6:70:00:E9:69:85:79:1E:63:55:AD:1F:6D:AD:5C:18:76
Certificate issuer:       /CN=A91275A6/serialNumber=590FA3C67000E96985791E6355AD1F6DAD5C1876
Certificate serial:       02BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ-jxnAA6WmFeR5jVa0fba1cGHY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft
Manifest number:          02B9
Signing time:             Mon 05 Oct 2026 01:43:21 +0000
Manifest this update:     Mon 05 Oct 2026 01:43:20 +0000
Manifest next update:     Mon 12 Oct 2026 01:43:20 +0000
Files and hashes:         1: WQ-jxnAA6WmFeR5jVa0fba1cGHY.crl (hash: DV7VOmA02DAjwUWLhCHyI04A9X3H93TGJcby8EYETUU=)
                          2: 8FA08DC29C8511EDB3506E5AC4F9AE02.roa (hash: TaJdRiGSYLXxN+5sGdAd2EbJ36eAZlZPdEwMNT5EY+w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.crl
                          rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ-jxnAA6WmFeR5jVa0fba1cGHY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 01:43:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 703 (0x2bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91275A6, serialNumber=590FA3C67000E96985791E6355AD1F6DAD5C1876
        Validity
            Not Before: Oct  5 01:43:20 2026 GMT
            Not After : Oct 12 01:43:20 2026 GMT
        Subject: CN=6ac300b9-78b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4d:f4:44:97:37:24:11:c7:29:a5:f3:49:43:
                    6a:53:c4:c7:71:44:5b:84:18:3c:d7:a8:8a:3c:0f:
                    d9:c1:7d:42:aa:9b:ee:57:69:55:8d:73:5a:4c:a5:
                    ad:ca:70:c8:f6:39:b6:b5:d8:f2:a9:08:02:9d:24:
                    27:11:cf:7a:8f:7a:76:f6:17:15:df:cf:34:a4:d8:
                    3b:7f:b2:0a:db:a6:34:38:53:04:e8:0a:ce:96:d6:
                    16:09:ac:d3:e4:fa:38:fa:c3:dc:29:dc:d0:8b:b9:
                    ba:46:01:28:f8:e5:3d:bd:3a:0c:25:7f:c5:db:54:
                    9a:e4:10:cb:a4:f6:5f:62:ff:e4:a3:b9:08:c9:56:
                    7a:d9:f6:6b:6c:5c:3f:b1:c0:07:0b:7d:80:b6:cc:
                    51:c9:10:62:a4:4c:70:29:5d:4e:38:5d:0c:ea:98:
                    3a:87:ad:bf:e8:a6:04:04:22:3e:8b:82:c4:36:09:
                    aa:6e:cd:86:18:41:88:3e:55:b8:56:b6:ee:a5:df:
                    c4:a5:7f:e3:66:c0:a2:a4:5e:6f:4b:b7:77:bd:8c:
                    3b:7d:a4:ea:24:95:fb:8d:6a:94:bd:a0:22:45:b8:
                    d7:e8:8f:91:c5:3c:cb:52:2f:e5:b3:36:c0:48:97:
                    b7:be:fa:52:3c:6e:9d:17:26:e2:68:79:b7:4a:d9:
                    63:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A3:8D:BD:5A:28:38:2D:42:E2:C8:E1:EC:63:1D:77:69:47:6D:F1
            X509v3 Authority Key Identifier:
                keyid:59:0F:A3:C6:70:00:E9:69:85:79:1E:63:55:AD:1F:6D:AD:5C:18:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ-jxnAA6WmFeR5jVa0fba1cGHY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:15:a4:0c:c9:84:dc:a0:2b:0a:7a:9a:e7:6c:78:c4:93:fc:
         6f:27:b7:70:d1:a9:f8:4e:90:35:46:1f:26:be:8a:b1:84:93:
         f2:f5:1c:e9:2d:19:4f:1b:cc:1a:8a:27:42:c6:27:53:5e:d3:
         95:6d:91:7a:2b:cb:3c:32:8b:10:9f:67:a6:c9:ee:f7:ad:be:
         86:4a:99:a3:4b:3a:8b:d8:53:cf:76:07:a5:28:c4:cc:0e:e4:
         05:93:5f:57:62:2a:31:b9:48:10:c1:a1:da:12:63:7b:30:9e:
         ae:10:fb:d0:17:ed:1a:c0:70:61:55:5f:bb:6d:9d:28:cc:bc:
         12:bc:dc:3c:b9:f7:a2:38:f7:8d:26:d5:b7:72:88:c1:b7:3e:
         70:bd:a6:91:01:bf:18:05:6d:85:f7:87:1c:33:51:26:7d:73:
         f8:b3:8b:8a:31:58:de:1c:3e:52:cf:8a:ae:6a:86:71:d2:c2:
         a5:01:69:c0:71:76:35:a9:79:31:8f:27:38:ab:97:c2:f1:d2:
         75:1f:1f:a9:3f:a0:ee:8a:4b:61:c8:b9:4f:88:b4:3e:35:cc:
         db:6d:6f:de:d2:8e:bb:ed:a0:0d:59:68:52:81:c7:c4:91:4b:
         24:61:4b:51:2e:f9:3d:af:1c:e1:cb:17:d4:88:eb:85:f6:1e:
         bd:73:95:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 03:16:03 2026 by rpki-client