Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.mft
File:                     WKqOb2Cb9VgUA20moSpeKyUViTo.mft (raw, json)
Hash identifier:          6gQo3FA1itTBen2XG8CiY7jq8DyInqQlKjRoE5u15hI=
Subject key identifier:   DD:F1:68:2A:45:00:92:E7:EF:24:2B:44:DC:D1:FB:6D:4A:60:71:CD
Authority key identifier: 58:AA:8E:6F:60:9B:F5:58:14:03:6D:26:A1:2A:5E:2B:25:15:89:3A
Certificate issuer:       /CN=A914EBB2/serialNumber=58AA8E6F609BF55814036D26A12A5E2B2515893A
Certificate serial:       A6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKqOb2Cb9VgUA20moSpeKyUViTo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.mft
Manifest number:          9F
Signing time:             Tue 27 Oct 2026 04:10:34 +0000
Manifest this update:     Tue 27 Oct 2026 04:10:34 +0000
Manifest next update:     Tue 03 Nov 2026 04:10:34 +0000
Files and hashes:         1: WKqOb2Cb9VgUA20moSpeKyUViTo.crl (hash: zLea56asvtH3wV0CtCV13+sv4IpQcn08FBSLbUiR5ag=)
                          2: D23FC546011111F1B3598E67446F56BC.roa (hash: vcrWn/T7PWva5wilhUJF83D5sEdB2Zxd5D/0CZVE3OU=)
                          3: 651B78142DD711F187F45729B3833773.roa (hash: orGvvH8EtrQFqpfDS8Xvz4vEWTgyCI2f9BcO9d6cJBw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.crl
                          rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKqOb2Cb9VgUA20moSpeKyUViTo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 04:10:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166 (0xa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EBB2, serialNumber=58AA8E6F609BF55814036D26A12A5E2B2515893A
        Validity
            Not Before: Oct 27 04:10:34 2026 GMT
            Not After : Nov  3 04:10:34 2026 GMT
        Subject: CN=6ae0243a-ce14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:7b:18:83:e8:5d:9d:48:d5:48:e5:b9:2a:fe:
                    e7:b3:c0:97:45:dc:32:79:96:65:99:f6:d5:de:d3:
                    5a:ce:49:db:24:02:cf:d1:80:bd:40:5d:69:a0:bb:
                    63:5e:60:a5:de:92:d8:7d:79:d1:21:ff:5f:11:2e:
                    29:c4:2c:be:23:94:c5:92:3a:5b:42:96:f5:81:83:
                    23:8b:9d:b8:80:61:36:07:34:87:f0:92:39:eb:89:
                    c8:5c:43:13:e8:7f:e5:85:47:35:3d:74:b2:e5:b1:
                    83:f7:7b:9e:44:7f:48:67:74:9e:4b:74:8a:e2:71:
                    a7:37:25:d4:af:0b:d2:51:58:61:81:43:c5:24:a0:
                    5c:88:9e:b3:e3:c0:33:10:aa:96:82:b1:19:72:b6:
                    8f:b6:c3:45:f6:e7:20:20:41:66:76:ef:66:a1:31:
                    b6:7f:e1:e5:db:17:42:ee:5c:8e:48:a4:23:23:a0:
                    23:8c:0e:d2:4a:cf:62:3c:59:5c:e8:61:84:6d:8c:
                    a4:9d:70:94:15:72:06:5a:95:66:02:fa:2c:87:4f:
                    13:de:07:2c:1d:1e:50:06:36:00:c9:31:3f:74:dd:
                    af:63:47:23:f6:ec:17:05:cf:46:dc:eb:66:12:06:
                    d3:79:69:3d:a5:4d:59:f1:4d:69:6d:2e:13:1e:7e:
                    45:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F1:68:2A:45:00:92:E7:EF:24:2B:44:DC:D1:FB:6D:4A:60:71:CD
            X509v3 Authority Key Identifier:
                keyid:58:AA:8E:6F:60:9B:F5:58:14:03:6D:26:A1:2A:5E:2B:25:15:89:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKqOb2Cb9VgUA20moSpeKyUViTo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:db:e5:3b:28:75:8c:24:a3:8c:ba:a3:25:57:54:44:d5:88:
         0f:23:f8:be:bf:4b:6e:ff:3b:53:c4:f6:27:7e:c4:c6:bb:a8:
         3c:9f:45:aa:ea:76:b5:2d:98:a9:cf:f3:04:07:7a:86:67:a7:
         9a:66:2d:03:21:93:f5:f0:34:41:d1:e1:9b:25:9f:7d:17:2c:
         0a:8e:38:ea:84:14:e3:4d:8a:72:2e:51:bc:46:13:20:87:75:
         14:10:bc:26:b0:cf:c6:08:cc:22:92:96:2f:b0:ad:4b:cc:02:
         12:89:56:99:db:69:4d:bb:ef:69:91:0e:91:26:93:94:0a:ca:
         d2:c0:00:6b:18:31:b1:2c:1c:7a:3e:25:ab:aa:86:e3:6e:c7:
         56:38:61:8c:75:46:50:e8:f4:10:16:2d:03:65:7c:fe:5c:bf:
         9f:06:7f:46:77:bb:95:04:3a:00:31:3e:8c:f7:0c:7d:56:1e:
         eb:8e:34:2a:94:0d:af:b3:63:50:9e:30:40:42:2f:41:62:a5:
         52:d9:4b:8e:b7:ce:2c:88:c3:97:f2:56:42:fd:4c:5b:f8:94:
         c8:0d:fb:ef:d2:72:83:a4:d5:90:17:4e:d4:81:d2:13:bf:6a:
         db:5c:fe:7f:7c:d0:18:06:45:6f:b2:59:44:2a:1a:bd:08:2c:
         2e:38:d0:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:50:53 2026 by rpki-client