Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134309/DE36345C3EE311F0B9398442C4F9AE02/wLRm2Zm4G_ldb5XWwSqzycdbQtE.mft
File:                     wLRm2Zm4G_ldb5XWwSqzycdbQtE.mft (raw, json)
Hash identifier:          cE9ZeHK4VbGdDpnzMmzJO7puxsdOu6VINLrDbmvyXyg=
Subject key identifier:   E2:D3:2B:B2:2A:A5:20:D9:AC:2D:B5:E2:B4:55:76:93:9B:32:47:BC
Authority key identifier: C0:B4:66:D9:99:B8:1B:F9:5D:6F:95:D6:C1:2A:B3:C9:C7:5B:42:D1
Certificate issuer:       /CN=A9134309/serialNumber=C0B466D999B81BF95D6F95D6C12AB3C9C75B42D1
Certificate serial:       FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLRm2Zm4G_ldb5XWwSqzycdbQtE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134309/DE36345C3EE311F0B9398442C4F9AE02/wLRm2Zm4G_ldb5XWwSqzycdbQtE.mft
Manifest number:          FC
Signing time:             Mon 05 Oct 2026 06:37:55 +0000
Manifest this update:     Mon 05 Oct 2026 06:37:54 +0000
Manifest next update:     Mon 12 Oct 2026 06:37:54 +0000
Files and hashes:         1: wLRm2Zm4G_ldb5XWwSqzycdbQtE.crl (hash: /IoCuGoG7PaqBNOJPcUjidyHuoJagrba+YS73eUEymc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134309/DE36345C3EE311F0B9398442C4F9AE02/wLRm2Zm4G_ldb5XWwSqzycdbQtE.crl
                          rsync://rpki.apnic.net/member_repository/A9134309/DE36345C3EE311F0B9398442C4F9AE02/wLRm2Zm4G_ldb5XWwSqzycdbQtE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLRm2Zm4G_ldb5XWwSqzycdbQtE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 06:37:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 252 (0xfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134309, serialNumber=C0B466D999B81BF95D6F95D6C12AB3C9C75B42D1
        Validity
            Not Before: Oct  5 06:37:54 2026 GMT
            Not After : Oct 12 06:37:54 2026 GMT
        Subject: CN=6ac345c2-a5fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:23:69:45:b6:9e:0a:a7:40:99:22:75:c2:1e:
                    25:60:e2:44:59:2b:44:89:29:c3:8f:87:7b:d0:33:
                    63:4f:08:0e:13:a7:33:e9:dc:eb:4e:bb:85:a8:d5:
                    3b:26:68:bf:84:ea:e0:03:9f:ee:6e:f3:d1:71:0d:
                    9f:dd:28:f2:57:85:8e:ef:37:85:23:6e:45:23:f9:
                    86:e6:29:8e:03:fc:11:48:3a:b6:af:96:6b:36:e3:
                    14:50:88:47:fe:b0:ce:83:f9:52:b0:9a:92:23:fb:
                    d1:b0:ab:80:2a:65:46:77:70:f8:16:f9:f1:33:ba:
                    c6:01:63:67:96:14:a9:db:c6:61:0a:83:b2:41:a4:
                    bd:2f:4e:a3:ae:0b:ad:b7:1b:52:70:11:73:8b:3f:
                    4b:e7:72:da:fb:54:98:e9:77:09:38:a4:b1:34:be:
                    1e:47:ea:9e:c1:ba:a3:20:36:9a:97:c2:6b:86:71:
                    cc:1b:43:4e:f5:a3:57:d1:5d:ca:5c:57:88:a7:26:
                    11:38:8d:65:2b:cb:af:4e:56:1f:12:0e:f7:85:46:
                    49:f0:6f:9b:1a:7a:3e:28:5d:83:07:75:9f:ea:2b:
                    e9:81:79:f0:ee:4f:7c:92:1c:58:e9:da:20:0e:88:
                    da:d6:62:94:7b:48:3e:fc:f3:ba:07:a6:29:91:be:
                    b4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:D3:2B:B2:2A:A5:20:D9:AC:2D:B5:E2:B4:55:76:93:9B:32:47:BC
            X509v3 Authority Key Identifier:
                keyid:C0:B4:66:D9:99:B8:1B:F9:5D:6F:95:D6:C1:2A:B3:C9:C7:5B:42:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134309/DE36345C3EE311F0B9398442C4F9AE02/wLRm2Zm4G_ldb5XWwSqzycdbQtE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLRm2Zm4G_ldb5XWwSqzycdbQtE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134309/DE36345C3EE311F0B9398442C4F9AE02/wLRm2Zm4G_ldb5XWwSqzycdbQtE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:82:b4:87:bf:2d:a7:01:01:0f:f8:f8:df:63:5b:61:d6:b4:
         1f:78:43:db:90:35:33:81:6a:4e:8a:d8:28:34:d5:d1:2f:50:
         2c:85:0f:d7:ee:7b:76:c8:b8:4b:94:d2:cd:62:bf:ec:12:04:
         5c:ab:c7:d6:9c:20:89:23:49:b4:03:1d:93:73:9d:cd:91:7e:
         da:e0:c2:a6:49:17:93:9b:95:d1:20:a0:ea:7b:60:65:4f:36:
         d7:2f:fd:11:54:73:cf:b0:fd:22:65:2e:e5:be:c1:b2:e6:d8:
         33:2c:95:c4:15:9d:0a:bc:94:9b:06:31:cf:33:10:ea:19:c5:
         2c:40:50:61:51:63:bd:bc:c9:1f:98:31:f9:5c:35:2a:59:bc:
         bb:9b:ab:c5:62:24:46:3f:1d:fd:2b:00:88:6d:4b:da:a4:71:
         76:6e:b9:c8:be:f1:2a:38:6b:f3:21:d9:a2:9a:6d:de:28:05:
         87:90:9e:25:dd:00:6c:19:9b:32:c9:ef:88:03:51:24:23:4e:
         b9:8f:0b:d7:81:f5:b5:d3:b6:9b:ae:f6:7e:33:ad:1a:2d:95:
         1f:f0:41:a6:29:00:db:1e:f6:73:41:ad:a4:28:ea:d6:e3:39:
         37:d6:11:31:1f:5f:ee:bf:42:59:77:00:96:ee:1c:23:40:35:
         08:6b:cc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 23:35:08 2026 by rpki-client