Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft
File:                     WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft (raw, json)
Hash identifier:          NAhs/09VOysKqlx0eSLCYtWridjTHsxdaWwD+xg3UuE=
Subject key identifier:   B3:30:09:03:11:77:DB:7D:69:D6:55:A1:E5:4C:56:59:66:66:27:C7
Authority key identifier: 5A:22:3B:9C:52:4F:AA:ED:87:27:21:A4:2B:3C:30:2D:97:1E:38:04
Certificate issuer:       /CN=A9137843/serialNumber=5A223B9C524FAAED872721A42B3C302D971E3804
Certificate serial:       0652
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft
Manifest number:          064A
Signing time:             Fri 04 Sep 2026 22:28:06 +0000
Manifest this update:     Fri 04 Sep 2026 22:28:05 +0000
Manifest next update:     Fri 11 Sep 2026 22:28:05 +0000
Files and hashes:         1: WiI7nFJPqu2HJyGkKzwwLZceOAQ.crl (hash: Q0RhTVW9c1DS4c/UYNpEQiFLlbcigISOptDk+LWkc4Y=)
                          2: F2DDD4EEFB3211EB967B1759C4F9AE02.roa (hash: QnCIfaBwZolfnjhgtwAliuHrR1tHCV7ZzJ1Dz2+uA9o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.crl
                          rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 22:28:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1618 (0x652)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137843, serialNumber=5A223B9C524FAAED872721A42B3C302D971E3804
        Validity
            Not Before: Sep  4 22:28:05 2026 GMT
            Not After : Sep 11 22:28:05 2026 GMT
        Subject: CN=6a9b45f5-b04f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b7:42:ab:6a:7c:9b:dc:6b:22:e6:f9:fe:37:
                    d7:1b:93:59:f1:bd:ba:3d:7b:7d:56:db:dc:6a:11:
                    cb:e6:65:bc:fe:8f:ab:08:58:d3:7f:3b:14:c3:bf:
                    d3:f2:02:b4:92:c3:09:79:0f:92:01:77:3e:e9:6c:
                    00:ad:3e:ed:15:4f:bb:7e:4f:92:e5:76:70:9c:33:
                    36:71:e9:5a:4c:22:dc:98:1d:c6:1e:74:bb:c5:79:
                    78:c7:30:cf:33:2c:ba:53:59:19:28:92:b2:cf:42:
                    c4:d1:f3:f8:41:75:73:c7:23:4a:45:3b:c9:9b:ad:
                    66:1a:2b:73:4a:16:9c:23:cf:09:00:2e:95:03:b2:
                    df:9a:ed:ea:ef:58:e7:3c:86:27:84:6d:c5:4e:c2:
                    11:3f:a4:22:66:b3:c4:d5:76:5b:34:4e:3c:0d:92:
                    02:e8:7e:cd:c8:5d:27:29:11:e3:19:85:23:59:fe:
                    78:03:41:50:a8:7b:65:20:64:bf:d2:9b:7e:d9:0a:
                    a7:51:3c:1e:cc:53:5a:31:2a:b6:3c:19:64:c3:34:
                    8a:83:63:68:75:da:d8:e9:ec:1d:cd:f0:88:c9:e5:
                    92:26:8c:73:9c:dc:90:0d:3d:ff:c7:89:94:50:01:
                    eb:45:a6:bd:e8:c9:a7:ce:d1:f0:17:e4:a6:7b:1d:
                    f5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:30:09:03:11:77:DB:7D:69:D6:55:A1:E5:4C:56:59:66:66:27:C7
            X509v3 Authority Key Identifier:
                keyid:5A:22:3B:9C:52:4F:AA:ED:87:27:21:A4:2B:3C:30:2D:97:1E:38:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:bd:d6:bb:89:71:6a:1e:7f:72:17:87:30:bc:2a:ce:c5:20:
         5d:c8:af:b6:18:bb:c2:70:51:7a:df:2f:e6:e0:d7:26:97:bb:
         fb:bf:70:f9:4a:68:c6:5f:36:a0:d6:8f:a6:97:47:81:84:e9:
         ec:06:e3:70:bc:e2:65:ac:10:4b:2a:05:84:82:39:36:35:7c:
         fb:43:44:e0:bc:89:ab:3f:9d:de:39:ab:7b:d1:06:1c:04:2f:
         c2:e9:04:9a:92:82:09:16:62:67:da:fa:a3:8d:c8:89:c9:d2:
         cb:54:ec:63:d1:7c:64:90:90:89:da:72:6e:0c:f3:c4:83:f1:
         d5:a1:70:01:c7:e0:41:07:12:93:f6:29:09:39:a2:5b:a2:36:
         f8:93:91:94:96:92:9a:f4:aa:68:01:e9:7d:ad:a3:26:e5:fd:
         00:40:73:f0:8f:ad:4b:a7:81:94:f7:72:f7:e9:3e:52:23:d1:
         72:5b:dd:cb:c6:f2:d7:55:50:e5:0d:97:fe:60:59:c2:0d:6a:
         71:dc:42:e6:94:d5:d4:73:31:94:62:c7:fa:e0:e8:86:f9:5c:
         96:0b:72:d2:ac:a2:f7:16:ca:5e:7b:0a:a6:04:f2:8a:46:16:
         e0:95:a7:e9:1d:88:32:08:98:96:89:7c:40:5b:90:5f:ce:9f:
         2e:7d:a3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:56:46 2026 by rpki-client