Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.mft
File:                     W_AAFHNK0bVlsQhtEv_KtZDMuLs.mft (raw, json)
Hash identifier:          k2i+6RbVWrejZJL4KSMLNfrPTC6ksZZvIur1Yv01lH8=
Subject key identifier:   C5:A6:47:F5:91:7B:04:E2:BB:F0:90:7E:B0:A2:DC:65:9E:B2:D9:8E
Authority key identifier: 5B:F0:00:14:73:4A:D1:B5:65:B1:08:6D:12:FF:CA:B5:90:CC:B8:BB
Certificate issuer:       /CN=A9131C4B/serialNumber=5BF00014734AD1B565B1086D12FFCAB590CCB8BB
Certificate serial:       CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_AAFHNK0bVlsQhtEv_KtZDMuLs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.mft
Manifest number:          C8
Signing time:             Fri 09 Oct 2026 07:26:57 +0000
Manifest this update:     Fri 09 Oct 2026 07:26:56 +0000
Manifest next update:     Fri 16 Oct 2026 07:26:56 +0000
Files and hashes:         1: W_AAFHNK0bVlsQhtEv_KtZDMuLs.crl (hash: XjlXbdIuXdWzvI5yJAOI20Adr07Y9kAkw5eZ0cXJc48=)
                          2: D65EFE0A91F711F087341C45C4F9AE02.roa (hash: /DGfu5IZwgqK2fcVU/zNOMsbLyKflPYKY+TO1byR3vA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.crl
                          rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_AAFHNK0bVlsQhtEv_KtZDMuLs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 07:26:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 203 (0xcb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131C4B, serialNumber=5BF00014734AD1B565B1086D12FFCAB590CCB8BB
        Validity
            Not Before: Oct  9 07:26:56 2026 GMT
            Not After : Oct 16 07:26:56 2026 GMT
        Subject: CN=6ac89740-a457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:39:a6:95:49:e9:dd:79:c1:b0:ef:19:0b:27:
                    7b:90:72:56:d7:26:ac:02:4d:01:e8:b2:bd:6b:85:
                    70:6c:0a:4e:11:88:16:cd:17:06:a9:13:27:51:91:
                    f4:0f:a3:c0:a3:54:ba:81:dc:c1:87:cb:59:18:86:
                    ee:e0:28:38:a5:04:85:3d:eb:2e:3e:2a:12:e8:ec:
                    e6:05:45:99:e5:a9:93:3b:7f:b9:b4:c5:41:bb:2c:
                    e2:4b:99:c4:6c:9b:6d:84:29:30:4c:cf:5d:34:37:
                    8a:cd:02:ac:a8:4f:b8:81:85:e4:65:00:22:4b:46:
                    9e:c7:a0:15:1b:8e:f4:6a:e6:25:0f:16:3c:fb:40:
                    5f:18:0c:72:8b:ef:20:83:b3:1e:35:4e:90:e0:d2:
                    cd:a2:0e:93:b6:40:17:59:96:18:f3:5f:2a:30:67:
                    26:3c:74:77:b8:6d:41:e9:19:90:45:8d:cb:0b:49:
                    3b:3c:98:ad:61:19:dc:d6:1c:b4:fa:f1:db:c7:20:
                    f8:9c:52:ad:40:40:7f:c5:df:55:1d:f0:21:21:55:
                    8d:98:1e:ff:cc:1a:53:a1:0c:3f:4d:bc:32:b1:88:
                    0d:ee:d9:11:93:04:76:86:16:15:20:62:38:e8:55:
                    13:18:e9:53:48:a3:da:67:9c:b9:41:fa:46:f4:58:
                    2b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:A6:47:F5:91:7B:04:E2:BB:F0:90:7E:B0:A2:DC:65:9E:B2:D9:8E
            X509v3 Authority Key Identifier:
                keyid:5B:F0:00:14:73:4A:D1:B5:65:B1:08:6D:12:FF:CA:B5:90:CC:B8:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_AAFHNK0bVlsQhtEv_KtZDMuLs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:5f:f4:11:81:1d:e3:69:38:66:03:8b:9a:4d:60:a6:45:72:
         54:04:f6:c0:53:60:75:cb:fe:a9:5f:6e:e2:5e:33:d3:e1:90:
         25:70:11:fc:66:bc:ed:a1:e8:0e:d1:56:23:30:41:e1:8b:6c:
         3b:3d:e3:22:c2:de:21:64:94:77:84:ac:ba:f3:81:92:e7:e5:
         98:e9:b9:70:ca:86:f3:df:4f:06:ee:84:80:26:5e:0e:ba:b5:
         60:32:e4:1f:72:5f:c8:d6:3c:1c:fd:fb:4f:48:bd:7f:f9:48:
         76:d4:a7:69:68:13:d9:42:7a:93:06:40:3d:ba:49:3e:64:e2:
         38:1a:90:41:54:b1:cc:03:aa:53:c5:88:07:59:dc:a8:a9:94:
         3e:22:3f:97:de:ca:33:af:11:ac:f4:84:12:6b:7b:77:ef:6c:
         ac:c7:12:19:b1:9c:8b:36:cb:8e:e7:ae:9b:2f:7e:80:7f:db:
         dc:8b:d4:0e:01:81:41:c5:b7:44:9c:45:28:e0:dc:d2:fe:64:
         f9:44:0c:2b:c9:69:c6:ba:eb:20:83:82:4b:a1:8b:8b:e5:80:
         71:f8:07:2c:ec:01:17:65:b9:ce:31:c6:88:0f:51:37:7b:91:
         12:6d:a1:23:a7:bc:fe:26:80:92:b1:72:b7:06:58:09:e8:1e:
         14:d7:98:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 23:17:11 2026 by rpki-client