Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
File:                     wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft (raw, json)
Hash identifier:          TausULbOgo/HwclfNW/Yf5/r10O+zkns3CMld7wx83o=
Subject key identifier:   BB:D9:DD:58:48:0C:F1:02:4C:28:89:11:1B:F4:13:59:17:FF:15:13
Authority key identifier: C1:48:53:D9:BD:3F:78:F6:48:0C:63:35:20:76:94:3B:C7:9B:9F:C2
Certificate issuer:       /CN=A91478E2/serialNumber=C14853D9BD3F78F6480C63352076943BC79B9FC2
Certificate serial:       18A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
Manifest number:          1863
Signing time:             Thu 22 Oct 2026 16:32:44 +0000
Manifest this update:     Thu 22 Oct 2026 16:32:44 +0000
Manifest next update:     Thu 29 Oct 2026 16:32:44 +0000
Files and hashes:         1: wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl (hash: tSSplrJQpR0ZCEju5vchaJb7EDn2hODVMWZT5Guozd4=)
                          2: 51635E7E32B011EE89DFF774C4F9AE02.roa (hash: n1u9iSyb9bdQc1QOK/WYlhLEbmOoYxOlffVDVXq1fW4=)
                          3: 507A39A632B011EE89DFF774C4F9AE02.roa (hash: t9gfSRrRBhg5aKee6bLsa2HCvO/wXMYsjYUGDi3D7i0=)
                          4: 047C0BCC373211F1887E264A90833773.roa (hash: LWhnCQp9VfJYhsJdhzflBR7RBHFtlmggsyH3Tj4cj0M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl
                          rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 29 Oct 2026 16:32:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6304 (0x18a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91478E2, serialNumber=C14853D9BD3F78F6480C63352076943BC79B9FC2
        Validity
            Not Before: Oct 22 16:32:44 2026 GMT
            Not After : Oct 29 16:32:44 2026 GMT
        Subject: CN=6ada3aac-c0e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d3:d4:86:1a:16:cd:3e:6f:3e:ec:21:f9:e4:
                    75:74:b3:cd:ed:c0:af:83:e4:26:26:96:94:93:c1:
                    b5:23:e9:bb:1c:9b:ad:54:d7:b4:61:bd:c5:49:8d:
                    50:02:76:68:1f:60:89:3c:9e:8a:5c:87:80:88:5b:
                    f8:50:3f:de:11:ce:81:11:42:26:5c:5f:22:28:37:
                    df:a8:7b:b8:47:0d:7c:6f:e5:37:1e:a1:c4:d5:03:
                    aa:f1:1c:48:e9:f2:43:a2:48:15:d0:2d:55:c2:0f:
                    54:5d:0e:0e:3d:21:b2:55:3c:05:3b:2f:a8:8e:de:
                    8b:3a:c3:24:85:ed:b9:60:a8:06:a7:85:af:f5:04:
                    ff:c2:1c:1c:25:0a:c5:38:8d:90:31:5a:79:6a:83:
                    be:4c:b5:ad:42:6b:21:72:db:37:15:b9:c9:01:00:
                    43:77:68:8f:be:ba:2b:55:fc:f1:44:56:72:c5:1d:
                    bb:22:86:49:85:ec:c2:d2:af:76:83:c5:c1:18:c7:
                    35:4f:f9:88:5f:07:c8:75:e4:b0:e4:67:1f:1b:4a:
                    ea:03:82:db:e5:f7:8f:a6:bb:8e:63:b5:76:1e:b1:
                    71:65:6e:45:29:df:63:9c:9a:27:dd:0d:d8:37:43:
                    a9:4e:75:75:b8:08:05:5d:35:00:97:f3:e8:27:c0:
                    ff:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D9:DD:58:48:0C:F1:02:4C:28:89:11:1B:F4:13:59:17:FF:15:13
            X509v3 Authority Key Identifier:
                keyid:C1:48:53:D9:BD:3F:78:F6:48:0C:63:35:20:76:94:3B:C7:9B:9F:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:f1:39:9a:90:cc:54:3a:b7:3d:51:69:1b:b0:4c:aa:af:09:
         bd:e5:46:9b:f0:b4:e2:f9:49:28:15:4a:32:9c:e5:f8:33:f0:
         1b:44:39:cc:62:31:0d:ce:75:d1:3a:ba:30:cb:4d:47:9b:76:
         fe:be:95:0a:da:eb:d8:f9:e9:c2:a1:f0:ad:e5:7e:ca:e9:9e:
         09:d1:d1:61:7e:ac:73:0b:99:7a:ac:a6:7b:81:1a:c7:50:29:
         cc:f3:d4:19:c5:b4:e7:8f:6e:53:85:2c:12:d9:e8:f9:22:7e:
         5d:9f:cb:57:ed:02:cd:b8:f8:f5:be:26:76:7b:fe:5b:a9:30:
         0a:e0:99:e9:ff:b2:f6:d9:a0:2a:ab:4c:f6:80:6b:61:a8:9b:
         4d:54:88:f2:7b:6d:56:66:8c:45:ca:a1:7e:1a:e6:29:d4:ba:
         36:21:64:70:11:94:78:c5:ef:80:67:8e:ea:97:3e:f2:16:30:
         5a:83:fd:c0:aa:3a:0c:35:ed:0f:d8:40:56:7a:79:90:1c:90:
         2e:d2:1e:83:04:de:b3:d9:6e:7a:2f:20:a8:9d:ed:f8:a6:0d:
         b5:b0:93:3b:6b:1a:2e:f1:82:f1:04:3c:b1:97:a4:8d:e4:3e:
         56:36:cc:94:fe:bb:c6:fe:5f:9b:36:e4:bf:dd:53:66:43:2f:
         60:33:53:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 12:53:40 2026 by rpki-client