Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft
File:                     WZsF7zwJOSLemJvcc5k_RtYldUk.mft (raw, json)
Hash identifier:          CB/YJuePH5pBaBZqMGxoLXN1b/HWl6mhPRwMXKJdgHE=
Subject key identifier:   41:C3:BB:24:7A:91:3D:87:71:9C:EE:4F:E6:B3:69:13:2F:22:12:75
Authority key identifier: 59:9B:05:EF:3C:09:39:22:DE:98:9B:DC:73:99:3F:46:D6:25:75:49
Certificate issuer:       /CN=A91308CE/serialNumber=599B05EF3C093922DE989BDC73993F46D6257549
Certificate serial:       358A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft
Manifest number:          358A
Signing time:             Sun 18 Oct 2026 14:54:13 +0000
Manifest this update:     Sun 18 Oct 2026 14:54:12 +0000
Manifest next update:     Sun 25 Oct 2026 14:54:12 +0000
Files and hashes:         1: WZsF7zwJOSLemJvcc5k_RtYldUk.crl (hash: 9RIuaOJPiqU3qF9of5wzU7TI6TbMnV40b0+5SACaHHo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.crl
                          rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Oct 2026 14:54:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13706 (0x358a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91308CE, serialNumber=599B05EF3C093922DE989BDC73993F46D6257549
        Validity
            Not Before: Oct 18 14:54:12 2026 GMT
            Not After : Oct 25 14:54:12 2026 GMT
        Subject: CN=6ad4dd95-5464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b1:d7:97:2c:de:fe:ed:ed:dd:c8:a0:db:e1:
                    2f:ab:dc:41:09:3f:74:2b:4c:e9:fa:81:8f:79:b9:
                    c2:45:bc:fa:dd:06:7b:33:9d:26:ed:42:8c:b6:21:
                    54:70:a6:18:22:86:76:93:64:68:bf:4e:0a:84:d3:
                    96:92:82:2b:f9:fc:62:7e:92:b4:10:19:f5:b7:22:
                    7a:8b:36:1d:93:f4:35:23:62:b7:dc:7a:f1:0c:d8:
                    ed:fc:2b:e3:ed:65:3e:1b:97:bf:a3:b7:64:f0:fb:
                    f6:58:70:cf:b4:7a:38:2c:78:19:7d:8a:97:78:85:
                    de:87:0f:03:29:0a:bd:56:86:9e:e1:31:01:54:61:
                    c9:b6:2f:16:f5:07:22:cf:85:50:69:88:00:dc:bb:
                    9a:4b:30:66:55:3b:f0:1d:73:44:9d:dd:90:c5:9d:
                    73:9b:4d:25:02:59:34:d4:ee:43:27:b0:9e:40:9f:
                    ed:ea:ce:44:2d:77:93:18:86:ea:4d:5b:b4:28:c2:
                    87:85:58:9a:68:d1:5b:86:77:ea:ff:98:0f:ce:24:
                    8b:8d:77:76:eb:78:31:cc:db:83:16:e5:41:c3:97:
                    6e:34:a6:f0:b0:4e:b8:00:11:38:9e:41:62:3e:03:
                    30:f7:5f:3a:54:6c:61:e8:86:f2:9f:80:0c:50:7f:
                    6a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C3:BB:24:7A:91:3D:87:71:9C:EE:4F:E6:B3:69:13:2F:22:12:75
            X509v3 Authority Key Identifier:
                keyid:59:9B:05:EF:3C:09:39:22:DE:98:9B:DC:73:99:3F:46:D6:25:75:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:8b:73:bd:37:6e:0a:b2:7e:07:3b:3c:82:b5:7f:b0:e9:1a:
         e3:51:a6:0c:ac:0f:8d:23:d7:cc:32:e8:59:93:b6:43:d5:54:
         9d:e3:b3:31:81:e1:be:17:80:bf:34:7f:ff:e8:f8:c3:4d:df:
         6d:79:a2:fd:b3:60:45:1b:60:ee:2a:ce:01:db:b5:a6:b8:4c:
         c6:63:5d:bd:56:9f:d1:10:74:68:2a:8b:c2:6b:22:9a:72:17:
         e9:e6:48:ed:4d:65:1e:33:9f:26:89:df:c7:15:28:66:91:04:
         37:fc:46:84:1a:1a:bd:4a:b5:20:65:16:1b:c0:94:77:75:ae:
         0a:0c:ee:62:08:09:17:ef:7b:12:60:25:76:d0:a1:d6:85:97:
         13:2e:d2:34:b0:04:d1:b9:8f:28:19:5a:7a:0f:13:23:ea:8d:
         ac:f9:e7:3e:51:47:98:2b:f6:06:c9:b0:3b:0e:69:5d:4d:dd:
         d6:bc:71:ba:f9:d3:e7:04:81:6a:76:59:e5:8e:62:27:0b:8e:
         c4:12:2b:aa:78:d1:93:05:bc:3a:9f:f1:b1:13:20:a4:97:1a:
         b8:d8:32:36:80:ae:7c:fd:c7:83:7c:1c:e5:6c:44:69:18:7f:
         cc:46:81:96:75:8d:f3:40:82:9b:e1:be:ea:4f:40:a7:c5:3f:
         cf:f8:c4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:44:08 2026 by rpki-client