Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914A657/E037AAFC9B8411F1BEC77B6A4411F970/wpNx2m2rAa1T7eCsaB55cKV9MrA.mft
File:                     wpNx2m2rAa1T7eCsaB55cKV9MrA.mft (raw, json)
Hash identifier:          VTk0muShR3sdLcq5jqxpVot6uFC1DPBPIq9xDYCUdO0=
Subject key identifier:   00:F7:4C:42:00:4A:FC:16:0B:84:D1:CA:7A:5D:D8:07:E0:23:B2:A1
Authority key identifier: C2:93:71:DA:6D:AB:01:AD:53:ED:E0:AC:68:1E:79:70:A5:7D:32:B0
Certificate issuer:       /CN=A914A657/serialNumber=C29371DA6DAB01AD53EDE0AC681E7970A57D32B0
Certificate serial:       20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpNx2m2rAa1T7eCsaB55cKV9MrA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A657/E037AAFC9B8411F1BEC77B6A4411F970/wpNx2m2rAa1T7eCsaB55cKV9MrA.mft
Manifest number:          1F
Signing time:             Thu 15 Oct 2026 10:04:22 +0000
Manifest this update:     Thu 15 Oct 2026 10:04:22 +0000
Manifest next update:     Thu 22 Oct 2026 10:04:22 +0000
Files and hashes:         1: wpNx2m2rAa1T7eCsaB55cKV9MrA.crl (hash: Mky/bW0GdiHbF7C150oEK+2pGxe0eqiTiFeKjIttKDc=)
                          2: 47DB57BC9B8511F191BA30A64411F970.roa (hash: mGDH4+uO6s8a5TDyRvtaDlG1gpsiOPrQ8V4FMaRxljU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A657/E037AAFC9B8411F1BEC77B6A4411F970/wpNx2m2rAa1T7eCsaB55cKV9MrA.crl
                          rsync://rpki.apnic.net/member_repository/A914A657/E037AAFC9B8411F1BEC77B6A4411F970/wpNx2m2rAa1T7eCsaB55cKV9MrA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpNx2m2rAa1T7eCsaB55cKV9MrA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 Oct 2026 10:04:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A657, serialNumber=C29371DA6DAB01AD53EDE0AC681E7970A57D32B0
        Validity
            Not Before: Oct 15 10:04:22 2026 GMT
            Not After : Oct 22 10:04:22 2026 GMT
        Subject: CN=6ad0a526-5933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:46:28:f6:10:d8:31:c7:12:b7:ae:59:73:43:
                    af:fe:19:ba:7e:1e:1a:3c:d2:44:34:bf:57:fc:63:
                    14:c4:c5:67:36:2e:c8:14:98:c3:6d:1b:ca:51:ad:
                    b9:40:d8:59:7b:a0:e9:f3:eb:8e:64:43:7d:d1:b3:
                    1d:3b:46:e2:21:ec:12:34:0a:87:cc:3d:d1:a3:0c:
                    76:52:c5:61:81:66:2e:57:07:d2:34:9b:2b:75:87:
                    3b:a3:bc:b3:42:58:95:5d:72:be:0e:d9:07:cb:33:
                    d2:f3:91:7f:7e:05:f5:ce:bd:4d:45:00:43:bd:57:
                    42:e9:73:c7:75:2f:54:e6:1d:47:a7:d3:15:ff:53:
                    c0:b6:07:1f:96:3d:18:04:a1:a1:82:a4:38:83:c7:
                    5b:a6:42:6e:4a:e8:c5:df:57:36:79:92:39:2d:d1:
                    38:93:0f:49:f9:0c:6b:77:29:b7:a6:0f:6c:bb:e6:
                    23:8a:75:cf:1d:84:cf:56:93:f8:15:bc:95:f2:0e:
                    5e:44:98:c8:d5:41:2c:97:84:92:65:5c:a6:7e:54:
                    e1:6f:10:35:2c:40:b0:6d:8b:56:f4:34:85:6b:75:
                    45:61:60:6b:1d:4f:d4:7a:e0:1f:7b:bf:31:81:33:
                    83:f1:55:50:a8:46:83:fb:d1:72:20:cc:10:96:90:
                    5e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F7:4C:42:00:4A:FC:16:0B:84:D1:CA:7A:5D:D8:07:E0:23:B2:A1
            X509v3 Authority Key Identifier:
                keyid:C2:93:71:DA:6D:AB:01:AD:53:ED:E0:AC:68:1E:79:70:A5:7D:32:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A657/E037AAFC9B8411F1BEC77B6A4411F970/wpNx2m2rAa1T7eCsaB55cKV9MrA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpNx2m2rAa1T7eCsaB55cKV9MrA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A657/E037AAFC9B8411F1BEC77B6A4411F970/wpNx2m2rAa1T7eCsaB55cKV9MrA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:80:9c:ce:c7:dc:52:54:ac:88:7b:ba:fe:d2:47:54:c2:c2:
         90:c9:19:c7:6c:23:13:b4:a0:77:4b:2b:c9:69:4d:b4:11:9b:
         76:d7:f8:46:da:f1:60:7e:0f:39:fc:3f:5e:40:a4:46:7b:7e:
         2f:87:ea:69:ee:2e:ee:bc:0c:ed:b0:69:6f:cc:a5:e0:58:c1:
         09:7d:e5:c6:3e:a7:9f:ab:f9:e8:11:b9:8f:80:d9:08:31:c5:
         e1:34:28:39:24:99:c3:8b:db:1b:5d:b7:2f:05:c8:db:f9:63:
         e1:03:54:a8:56:d9:a1:c8:59:c3:b6:b9:de:4b:68:c7:a6:fa:
         be:18:37:e4:7e:42:cf:d7:06:da:d3:ff:64:08:3e:a9:82:79:
         8a:c4:db:a3:2c:ee:1f:e0:22:7b:63:b4:dd:06:16:49:28:c7:
         c8:5e:bf:62:50:d7:cd:a5:ee:50:0c:db:63:73:e0:14:78:5b:
         40:6f:b8:29:ac:f0:13:b9:8a:58:6f:5f:dd:ee:a4:67:fa:2f:
         c4:2c:f0:68:41:3c:01:ad:c3:81:4e:04:cc:b3:9f:84:94:6d:
         51:ff:34:91:c8:0d:e8:d9:ca:bd:a0:7b:be:9d:6b:6a:76:21:
         df:39:5e:3d:17:0b:65:03:4f:70:6c:c3:15:ac:dd:3e:94:db:
         c4:ba:a1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:48:18 2026 by rpki-client