Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/W-l_pNNLPtMdvWSGDhgAk_6hEd8.mft
File:                     W-l_pNNLPtMdvWSGDhgAk_6hEd8.mft (raw, json)
Hash identifier:          94/o5HWiyRH2KaYmbcFXqe9qtvHhOWMTsjYnHz1HkRc=
Subject key identifier:   1A:D8:B7:27:61:F9:48:F1:E9:9A:E4:5B:B6:C9:8C:33:6A:3E:B2:FD
Authority key identifier: 5B:E9:7F:A4:D3:4B:3E:D3:1D:BD:64:86:0E:18:00:93:FE:A1:11:DF
Certificate issuer:       /CN=A913B714/serialNumber=5BE97FA4D34B3ED31DBD64860E180093FEA111DF
Certificate serial:       064D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W-l_pNNLPtMdvWSGDhgAk_6hEd8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/W-l_pNNLPtMdvWSGDhgAk_6hEd8.mft
Manifest number:          0639
Signing time:             Fri 02 Oct 2026 23:01:18 +0000
Manifest this update:     Fri 02 Oct 2026 23:01:17 +0000
Manifest next update:     Fri 09 Oct 2026 23:01:17 +0000
Files and hashes:         1: W-l_pNNLPtMdvWSGDhgAk_6hEd8.crl (hash: XjqOmniv15PUrLTmGn/wOGr1R8m/T4dbsGtBlDV2XOM=)
                          2: 4A4C8CD0F67311EBA0F18818C4F9AE02.roa (hash: 1kXvyMyTfQW1wNgNaYMaoQ9qTTwEo0KtJXbFw2dkbNQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/W-l_pNNLPtMdvWSGDhgAk_6hEd8.crl
                          rsync://rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/W-l_pNNLPtMdvWSGDhgAk_6hEd8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W-l_pNNLPtMdvWSGDhgAk_6hEd8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 23:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1613 (0x64d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B714, serialNumber=5BE97FA4D34B3ED31DBD64860E180093FEA111DF
        Validity
            Not Before: Oct  2 23:01:17 2026 GMT
            Not After : Oct  9 23:01:17 2026 GMT
        Subject: CN=6ac037be-d494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7d:09:c8:08:99:23:86:da:66:50:6c:43:18:
                    e5:a4:f6:a5:e8:19:1e:fe:a9:da:d4:c5:7f:1a:7a:
                    f9:54:da:24:96:ca:ee:03:64:b8:66:83:20:d8:d3:
                    7b:97:7b:37:f1:78:4d:1e:d1:1c:cf:28:07:41:c6:
                    78:9a:53:19:19:60:6d:3f:fa:b8:e6:69:65:fa:c1:
                    81:34:e9:4e:6b:81:9e:1a:a7:50:46:43:b5:86:7c:
                    03:72:cb:d9:44:fd:56:8b:b8:89:1b:bd:04:d0:74:
                    12:df:c5:9c:9c:a2:3c:d7:79:55:9b:a4:0f:c3:21:
                    58:b6:5b:78:4a:91:86:a9:49:d9:32:93:36:57:f6:
                    d3:a4:00:b8:59:9c:38:8d:32:df:f4:d4:b7:f3:73:
                    90:37:a2:20:5a:c2:3a:fa:ee:9f:83:33:5a:c6:9a:
                    c4:af:6e:23:cf:05:f9:06:74:47:88:35:83:85:95:
                    d8:e9:19:2c:9e:39:b8:7b:c9:d8:6e:97:bd:e5:37:
                    0f:c2:3d:06:9d:7f:27:48:47:d8:0f:30:99:96:10:
                    5b:30:7e:d4:67:3b:30:ff:25:9b:97:ab:4f:b3:92:
                    90:d0:2f:32:6b:bc:ad:25:df:c6:37:b5:5d:81:13:
                    8b:0f:76:66:1e:32:61:7b:03:a0:a3:78:3c:e0:92:
                    b1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:D8:B7:27:61:F9:48:F1:E9:9A:E4:5B:B6:C9:8C:33:6A:3E:B2:FD
            X509v3 Authority Key Identifier:
                keyid:5B:E9:7F:A4:D3:4B:3E:D3:1D:BD:64:86:0E:18:00:93:FE:A1:11:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/W-l_pNNLPtMdvWSGDhgAk_6hEd8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W-l_pNNLPtMdvWSGDhgAk_6hEd8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/W-l_pNNLPtMdvWSGDhgAk_6hEd8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:ea:11:06:70:25:54:14:78:77:8b:5e:91:7d:5a:19:b2:de:
         2f:b4:9c:85:54:44:58:4c:60:19:7b:c6:2d:f8:03:f3:6b:de:
         7d:9a:69:1f:55:e6:60:33:48:85:31:ef:3e:50:f8:2f:94:31:
         9d:9d:7b:fd:15:53:47:0e:0b:4c:5b:c3:83:8c:4d:fd:ed:25:
         fb:57:34:5f:14:0d:66:b9:0b:05:d1:f2:63:d3:2e:ba:6b:4b:
         20:7e:5a:44:ad:8f:32:3b:05:01:13:5f:f6:9d:e0:42:0d:e7:
         93:97:fc:67:4c:7e:21:e6:17:4b:38:0d:3a:b5:cc:7e:3b:b2:
         62:08:c7:60:f8:7e:29:a8:7b:82:bd:bb:dc:08:fa:40:2a:a6:
         47:87:c3:70:fb:94:a1:66:2e:a8:80:d1:43:70:ec:2c:a8:86:
         cb:4c:2a:86:b3:f6:a3:30:95:ba:13:39:4e:7e:29:33:c0:06:
         4a:95:b0:7c:37:db:5c:2f:27:b7:89:37:60:01:88:99:c2:b8:
         86:ff:0f:43:3e:45:72:bf:86:bf:73:fd:01:26:ef:15:94:b6:
         02:04:0f:bb:58:da:a0:57:1e:75:13:e0:2a:c9:77:61:df:f1:
         2c:42:05:e6:c2:b3:b0:1a:7d:76:c5:84:06:1e:47:92:0f:ad:
         6d:e3:a5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:57:40 2026 by rpki-client