Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.mft
File:                     wj3utHnnD2DvynyIRiuVudwiydA.mft (raw, json)
Hash identifier:          3zZkJA1YsinuS/fDMLeH4agcdTyka13bDuVxxvQ42eQ=
Subject key identifier:   9D:DC:14:E0:02:80:CE:44:F5:69:AB:C9:F1:86:4E:B2:94:B7:7B:00
Authority key identifier: C2:3D:EE:B4:79:E7:0F:60:EF:CA:7C:88:46:2B:95:B9:DC:22:C9:D0
Certificate issuer:       /CN=A9142A22/serialNumber=C23DEEB479E70F60EFCA7C88462B95B9DC22C9D0
Certificate serial:       FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wj3utHnnD2DvynyIRiuVudwiydA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.mft
Manifest number:          E8
Signing time:             Mon 05 Oct 2026 06:56:19 +0000
Manifest this update:     Mon 05 Oct 2026 06:56:19 +0000
Manifest next update:     Mon 12 Oct 2026 06:56:19 +0000
Files and hashes:         1: wj3utHnnD2DvynyIRiuVudwiydA.crl (hash: 1FbWUa2b3GHnLAp1vu/jxPjAPNczU/6PhYXQkhS97c8=)
                          2: 9EE7FBDA678511F0999A252DC4F9AE02.roa (hash: i9qFzs4jcopAlys8hXxF83fhftnlVXNWVCgR4foN+vo=)
                          3: 9F685E60678511F0999A252DC4F9AE02.roa (hash: /3g7W2sZcKvJU54TrxyHeP6DXKh2Hj/Gzoz/rHd6bTs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.crl
                          rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wj3utHnnD2DvynyIRiuVudwiydA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 06:56:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 250 (0xfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142A22, serialNumber=C23DEEB479E70F60EFCA7C88462B95B9DC22C9D0
        Validity
            Not Before: Oct  5 06:56:19 2026 GMT
            Not After : Oct 12 06:56:19 2026 GMT
        Subject: CN=6ac34a13-8415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:38:79:c5:df:18:3b:1a:b0:e3:a5:9c:1a:58:
                    8a:28:c7:99:f7:9a:bb:74:aa:77:2f:6f:c9:40:03:
                    26:8a:f4:9d:87:86:e7:02:2e:fd:49:8c:aa:88:2e:
                    02:8e:33:63:f9:b6:5e:7b:02:3e:bd:d8:d0:ea:03:
                    89:e6:7a:59:67:8d:6b:e2:d2:57:6a:7a:01:3f:a2:
                    82:b4:d7:6d:0b:ea:b5:f8:7d:29:1e:55:9b:2b:88:
                    e1:96:4c:a9:06:87:d2:c9:e5:69:65:3c:7a:3a:e4:
                    b0:0d:c7:da:ac:3a:68:26:02:e5:28:28:74:92:49:
                    5f:0c:71:f3:09:fb:8e:68:66:ad:17:d1:4e:15:66:
                    be:40:96:77:31:dd:d0:47:c7:a5:00:bb:f9:28:42:
                    f5:e9:f6:a7:ed:29:45:f7:aa:0f:a7:4c:6e:bf:15:
                    c3:b7:d2:57:f9:5d:35:bb:b9:17:bb:6a:71:c8:f6:
                    37:2b:78:54:a9:4a:40:d4:2e:33:ac:53:ec:cc:02:
                    d0:fd:01:08:22:32:fc:d1:e9:bf:b5:29:a7:a8:b3:
                    c7:5c:bf:c1:f9:62:4a:41:c7:35:96:2b:9b:6b:5a:
                    c0:f3:8f:55:e7:19:4e:47:73:08:0e:30:e5:06:59:
                    3c:48:9c:8e:ee:56:2c:fc:fb:11:69:bd:06:8d:9e:
                    fb:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:DC:14:E0:02:80:CE:44:F5:69:AB:C9:F1:86:4E:B2:94:B7:7B:00
            X509v3 Authority Key Identifier:
                keyid:C2:3D:EE:B4:79:E7:0F:60:EF:CA:7C:88:46:2B:95:B9:DC:22:C9:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wj3utHnnD2DvynyIRiuVudwiydA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:ed:2b:c8:a2:33:c4:2d:2d:47:7b:30:8d:40:e8:94:3b:b9:
         32:b2:82:66:52:c7:16:c3:31:2d:fa:ff:59:22:cc:c7:70:9b:
         32:24:ec:ea:88:54:98:7e:35:ce:83:a0:50:2a:9b:fa:50:d5:
         2a:dc:d7:6e:d1:58:c6:f2:47:f3:ac:a2:2d:67:e4:b2:5f:4f:
         e8:60:f4:5d:ca:ec:84:93:64:ce:61:44:39:d2:bd:b9:0a:7a:
         28:88:52:39:eb:9e:86:3b:ff:23:ff:ec:9c:af:31:31:ff:72:
         4a:5a:4a:df:86:02:a5:62:a7:e4:89:da:eb:5a:88:c6:86:be:
         a8:c5:38:ea:dc:29:ab:df:47:9a:48:82:ea:64:ac:c2:70:31:
         d0:e7:57:09:59:ea:90:c4:86:47:35:21:ce:44:b7:e5:46:f6:
         4f:c2:eb:52:f7:4a:a4:ec:fd:37:34:73:1f:18:7e:a0:90:31:
         f7:c0:4d:6e:48:0a:b5:a8:9a:f8:99:3c:5b:ae:d6:ff:24:b0:
         1e:10:36:2b:fb:0c:9f:12:cb:7c:b1:25:c0:05:91:24:25:6c:
         d2:49:b7:db:f8:7e:87:0b:9a:8d:90:3f:de:7e:92:fc:eb:bc:
         17:53:a5:59:84:7f:16:30:00:0a:a1:36:fa:7a:4e:bd:07:56:
         09:d4:52:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 02:29:09 2026 by rpki-client