Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft
File:                     Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft (raw, json)
Hash identifier:          vclcbeXGM026oVg4Tl7zZSMFayoHCetAMMFm5mpi/2I=
Subject key identifier:   72:6D:8F:13:E8:EF:D8:E1:78:04:9D:7D:DF:97:EA:5E:5F:35:95:1D
Authority key identifier: 5A:8F:C6:D9:B9:92:32:2F:2D:7C:07:73:45:43:F7:98:97:ED:80:37
Certificate issuer:       /CN=A9153AC4/serialNumber=5A8FC6D9B992322F2D7C07734543F79897ED8037
Certificate serial:       0CB8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wo_G2bmSMi8tfAdzRUP3mJftgDc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft
Manifest number:          0CAB
Signing time:             Mon 26 Oct 2026 18:36:22 +0000
Manifest this update:     Mon 26 Oct 2026 18:36:21 +0000
Manifest next update:     Mon 02 Nov 2026 18:36:21 +0000
Files and hashes:         1: Wo_G2bmSMi8tfAdzRUP3mJftgDc.crl (hash: zftVsRCVCh930eVKMdh8Ovik4dtlkxbnESVju7nO2hg=)
                          2: 0E50DF10261311EAAD88B67EC4F9AE02.roa (hash: MhB9naybDJ/7DHZu1RdxB9qiA1NaM+cJxe9bnQE9aaI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.crl
                          rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wo_G2bmSMi8tfAdzRUP3mJftgDc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 18:36:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3256 (0xcb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153AC4, serialNumber=5A8FC6D9B992322F2D7C07734543F79897ED8037
        Validity
            Not Before: Oct 26 18:36:21 2026 GMT
            Not After : Nov  2 18:36:21 2026 GMT
        Subject: CN=6adf9da6-6def
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:57:e5:e7:35:8e:ff:ef:90:02:7e:ec:5b:c1:
                    dd:b5:76:cd:d0:7c:ca:64:1d:7e:f6:0e:43:7f:28:
                    8b:31:9a:a2:8e:f3:ae:6e:d0:8b:d5:13:19:78:7c:
                    2f:2d:4a:5a:57:29:51:3e:24:20:24:89:0a:06:10:
                    a7:6a:11:4a:53:f2:d3:c4:c6:db:66:76:d4:7e:ee:
                    67:dd:29:0c:8d:46:59:01:4d:df:d5:18:37:c8:34:
                    7c:84:06:2f:93:7d:36:d1:d2:7e:b8:a9:04:9d:a3:
                    12:ff:07:b4:f7:5d:64:b4:fa:c5:e7:fc:ee:37:8e:
                    71:a3:0a:b0:d8:53:49:d3:e2:4d:fd:e3:48:07:7a:
                    e5:1c:8c:a6:13:b2:d6:5c:63:23:3b:da:d8:e2:80:
                    af:5f:5c:61:17:e0:09:80:2c:2d:93:03:56:fa:f7:
                    2f:33:23:e9:98:2b:bc:50:07:b3:f5:06:69:6b:3a:
                    c4:76:fa:52:89:b7:7a:ec:a8:29:d6:cd:7d:d7:b3:
                    16:f3:3c:dc:6d:9b:5e:5b:ef:04:db:ae:f2:70:d0:
                    e5:62:71:41:a0:93:9f:1b:39:e5:7f:a5:24:ea:61:
                    5c:10:a4:8f:00:aa:12:94:f4:d1:0b:06:6f:3b:cd:
                    9b:4f:31:8a:ab:68:6d:3a:0c:86:d1:99:45:6d:cd:
                    a7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:6D:8F:13:E8:EF:D8:E1:78:04:9D:7D:DF:97:EA:5E:5F:35:95:1D
            X509v3 Authority Key Identifier:
                keyid:5A:8F:C6:D9:B9:92:32:2F:2D:7C:07:73:45:43:F7:98:97:ED:80:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wo_G2bmSMi8tfAdzRUP3mJftgDc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:14:bf:21:3a:7c:48:89:aa:3f:a1:83:4d:36:ca:89:fb:45:
         b2:d3:a3:62:e0:06:c7:14:76:18:75:ae:48:77:c6:ac:57:5d:
         31:43:4f:77:64:3b:fc:55:e2:d4:37:f9:37:00:18:70:df:43:
         88:b9:e3:ab:0a:a7:6f:02:fa:01:25:1d:d1:49:bd:a7:b3:a1:
         0e:02:b8:43:cf:ea:e1:79:2c:fe:c5:95:53:01:80:fe:ce:55:
         f9:45:6f:29:38:ca:5f:61:ae:f6:a8:67:70:0a:68:44:bf:ec:
         26:57:00:18:89:6d:fe:25:2c:2c:dd:4e:22:3a:c6:c6:6e:60:
         fb:77:25:63:91:e3:b5:5d:f0:33:67:61:ff:9a:b6:9b:e4:c0:
         b8:4c:a1:ff:83:a8:2c:d0:42:31:10:d9:93:ff:1f:c3:93:b9:
         f8:a4:cd:f6:86:ca:bf:d7:3b:0f:a9:8c:03:2e:5e:ae:3b:91:
         f9:8d:b6:da:d4:c8:0e:b6:c4:08:23:e9:1c:af:d3:0a:ab:17:
         16:9d:5a:83:bd:9d:f9:33:c5:3f:fe:44:c5:1b:11:ce:28:44:
         30:eb:c8:ae:12:85:76:c0:da:ba:be:77:57:52:f3:08:2a:3e:
         f9:15:d5:a6:06:f3:d7:4a:a9:4f:16:95:d1:f9:a8:09:a6:58:
         61:b7:cc:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:28:13 2026 by rpki-client