Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft
File:                     WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft (raw, json)
Hash identifier:          GTdwVucpwVor32d1uFmYdK0b759XXXiXVChq6Hn7y0Y=
Subject key identifier:   6B:3C:5E:DC:35:DB:66:8B:E5:17:75:1C:5A:85:23:85:CC:AF:64:0F
Authority key identifier: 58:EE:E5:2D:2A:E0:92:EC:55:86:E0:70:E6:46:2C:36:35:0F:A6:E1
Certificate issuer:       /CN=A914A75A/serialNumber=58EEE52D2AE092EC5586E070E6462C36350FA6E1
Certificate serial:       0130
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WO7lLSrgkuxVhuBw5kYsNjUPpuE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft
Manifest number:          012D
Signing time:             Wed 07 Oct 2026 06:08:27 +0000
Manifest this update:     Wed 07 Oct 2026 06:08:26 +0000
Manifest next update:     Wed 14 Oct 2026 06:08:26 +0000
Files and hashes:         1: WO7lLSrgkuxVhuBw5kYsNjUPpuE.crl (hash: axBclbOVgKrLyFMrHCYu8M3ivxXbksrfJCPZEk1b2Tk=)
                          2: D56D67B0F48711EFBB2D9D73C4F9AE02.roa (hash: csaBSpZzq59GMLhCxwkq41kKwaXSwMxp+Vf9tiYrdrg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.crl
                          rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WO7lLSrgkuxVhuBw5kYsNjUPpuE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 06:08:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 304 (0x130)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A75A, serialNumber=58EEE52D2AE092EC5586E070E6462C36350FA6E1
        Validity
            Not Before: Oct  7 06:08:26 2026 GMT
            Not After : Oct 14 06:08:26 2026 GMT
        Subject: CN=6ac5e1db-d5a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:82:d5:c0:60:c7:8e:19:0e:18:0f:6d:3f:1d:
                    88:45:72:44:f3:f6:e3:ca:a9:33:b0:5d:34:99:aa:
                    3e:ea:3e:ce:43:fd:60:f3:9c:26:17:5d:f6:4c:c3:
                    50:92:e3:22:ca:17:b3:c7:fc:e6:1a:6f:e4:16:26:
                    50:a7:99:15:6d:4e:93:e1:4d:8f:4a:1d:53:40:90:
                    0b:5f:c3:c9:bc:80:01:49:ce:bd:1c:16:0e:b4:78:
                    e4:27:61:7b:0d:b0:a6:6b:26:c4:80:13:41:6e:95:
                    1f:5c:63:7e:35:e3:d5:33:c0:28:f5:eb:4a:24:62:
                    a4:de:3e:a6:12:c9:6b:9f:6c:ca:ae:fa:79:0b:3a:
                    47:d0:a7:bb:84:91:5c:18:f6:41:13:95:37:8c:da:
                    03:56:53:89:4a:69:ae:12:b3:59:9d:31:f8:44:b7:
                    81:20:21:44:6c:77:63:eb:6d:04:cd:72:91:e7:d2:
                    f2:a4:88:7b:67:b4:43:55:2e:7c:f5:88:4f:88:57:
                    67:a0:51:4f:6c:f0:fe:b5:5b:4c:86:94:0a:67:ad:
                    2f:fc:a7:14:8a:20:f5:b3:39:bf:25:58:92:0d:53:
                    9d:0d:20:76:8d:74:6a:41:6c:b8:ec:c0:44:02:10:
                    30:57:04:a1:28:1d:36:01:f1:30:6a:f9:d6:e1:2c:
                    9a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:3C:5E:DC:35:DB:66:8B:E5:17:75:1C:5A:85:23:85:CC:AF:64:0F
            X509v3 Authority Key Identifier:
                keyid:58:EE:E5:2D:2A:E0:92:EC:55:86:E0:70:E6:46:2C:36:35:0F:A6:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WO7lLSrgkuxVhuBw5kYsNjUPpuE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:7e:2a:41:74:00:b7:85:e3:d4:a9:2b:e9:7e:9b:80:16:4b:
         3c:5c:50:65:93:56:b6:78:bd:09:8e:a7:e4:4a:46:54:4e:c2:
         07:52:1a:5a:89:99:17:c5:50:3c:77:d9:5e:39:15:d5:11:39:
         91:9f:e2:8a:33:f5:f3:39:17:49:16:3d:21:38:1f:82:21:2a:
         06:1a:8f:ec:b3:66:40:87:b1:d1:97:73:ae:90:87:94:0a:38:
         83:26:2c:ac:aa:27:e6:28:15:71:1d:44:27:9a:d8:c7:12:df:
         82:da:34:73:3a:e6:b8:d8:c0:98:95:c0:de:67:47:ec:34:40:
         df:cb:0b:86:b0:1f:e5:a4:3f:09:13:12:6b:dc:9c:a9:bd:18:
         5f:08:83:bd:58:dc:f3:42:88:59:ec:9c:9d:16:4e:ca:ed:4d:
         6e:f0:3d:05:45:7d:65:55:30:a1:58:16:78:d2:b4:8d:74:de:
         15:c7:cf:6c:df:d8:87:32:35:32:9d:c6:b5:b9:64:19:01:56:
         e5:31:73:a8:76:e4:f0:5b:fd:dc:c5:00:69:89:62:18:0b:e7:
         85:f5:cd:4c:55:e5:8c:9e:ab:b8:81:62:c4:e6:49:3f:89:9b:
         81:a9:19:9c:43:a7:db:a3:76:ab:7f:57:b1:81:6d:2a:c0:a9:
         ad:1a:8f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 04:04:23 2026 by rpki-client