Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9165D75/9F128D7EB8D211F1BDCDB98F3311F970/WxEHJBui4_SARaniY3dkk8r3XwU.mft
File:                     WxEHJBui4_SARaniY3dkk8r3XwU.mft (raw, json)
Hash identifier:          35mLe1ME+N7X0JSwJ+Z8v6ifvaL2sA3k+WVLlnUu7+I=
Subject key identifier:   B0:CA:AD:1D:4D:CC:D9:DD:CD:3F:AA:26:5A:40:D3:E6:C1:C5:08:80
Authority key identifier: 5B:11:07:24:1B:A2:E3:F4:80:45:A9:E2:63:77:64:93:CA:F7:5F:05
Certificate issuer:       /CN=A9165D75/serialNumber=5B1107241BA2E3F48045A9E263776493CAF75F05
Certificate serial:       6F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WxEHJBui4_SARaniY3dkk8r3XwU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165D75/9F128D7EB8D211F1BDCDB98F3311F970/WxEHJBui4_SARaniY3dkk8r3XwU.mft
Manifest number:          3B
Signing time:             Wed 07 Oct 2026 09:52:47 +0000
Manifest this update:     Wed 07 Oct 2026 09:52:47 +0000
Manifest next update:     Wed 14 Oct 2026 09:52:47 +0000
Files and hashes:         1: WxEHJBui4_SARaniY3dkk8r3XwU.crl (hash: Oy4hkxyCHLRAtMb09jWnabZH7oAAjOMxyg+AoKyryik=)
                          2: B606ECDCB90411F191B106834311F970.roa (hash: c9xZKpvICxeKyFv7JGgesSNazSSS3CjxGJ882f2DvNI=)
                          3: B4D9CCB6BA5911F1ABE57AF46B11F970.roa (hash: sathNNHZ1joSXHr6/t5VutNIX6HZUMy0N0z567Eju4E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165D75/9F128D7EB8D211F1BDCDB98F3311F970/WxEHJBui4_SARaniY3dkk8r3XwU.crl
                          rsync://rpki.apnic.net/member_repository/A9165D75/9F128D7EB8D211F1BDCDB98F3311F970/WxEHJBui4_SARaniY3dkk8r3XwU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WxEHJBui4_SARaniY3dkk8r3XwU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 09:52:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111 (0x6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165D75, serialNumber=5B1107241BA2E3F48045A9E263776493CAF75F05
        Validity
            Not Before: Oct  7 09:52:47 2026 GMT
            Not After : Oct 14 09:52:47 2026 GMT
        Subject: CN=6ac6166f-2751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:14:8e:20:71:1e:b7:68:42:17:85:69:76:fd:
                    04:d5:81:12:b4:1d:32:ae:7d:7f:d3:58:11:32:ca:
                    35:40:c9:82:96:60:f1:ce:4a:fa:2d:71:f0:04:4f:
                    a9:21:0d:70:c4:ee:4e:ea:46:5a:99:93:99:01:0b:
                    a8:e8:44:0a:af:57:a3:c3:af:0b:9f:32:fd:66:d1:
                    47:3b:19:62:e9:71:45:05:5f:3e:b5:f4:30:91:90:
                    60:80:b4:a5:17:76:9d:07:64:e4:dd:2d:06:dd:08:
                    4c:03:e0:ff:6e:c9:5b:28:56:3a:e9:54:6c:c2:f0:
                    c2:64:a5:fa:5c:ac:4c:b4:14:12:51:83:c9:ac:58:
                    33:6c:74:17:0c:80:cb:de:bb:cd:5d:da:e8:e3:5d:
                    fd:c7:2a:00:5d:48:53:25:b5:7d:77:24:e7:34:b2:
                    10:df:11:24:3f:c6:da:8f:a2:7e:29:ec:85:d9:a2:
                    97:61:95:17:aa:4c:a3:39:f7:bb:f1:85:1a:fb:31:
                    e7:ae:5a:9f:27:48:8b:c3:3c:b9:a1:8a:6b:b6:dc:
                    1b:c7:53:62:b1:00:c3:34:6a:0a:e1:17:52:1d:fe:
                    26:4a:d6:08:4f:d8:1f:7b:13:1a:cb:2b:db:67:90:
                    f5:3e:d1:e4:c4:2c:7c:83:d8:90:f9:ee:57:3d:f4:
                    1c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:CA:AD:1D:4D:CC:D9:DD:CD:3F:AA:26:5A:40:D3:E6:C1:C5:08:80
            X509v3 Authority Key Identifier:
                keyid:5B:11:07:24:1B:A2:E3:F4:80:45:A9:E2:63:77:64:93:CA:F7:5F:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165D75/9F128D7EB8D211F1BDCDB98F3311F970/WxEHJBui4_SARaniY3dkk8r3XwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WxEHJBui4_SARaniY3dkk8r3XwU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165D75/9F128D7EB8D211F1BDCDB98F3311F970/WxEHJBui4_SARaniY3dkk8r3XwU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:2f:5d:88:f2:88:cf:3b:b9:d1:4d:fe:a6:a7:3a:0a:03:bf:
         5d:7f:a0:c7:88:4b:2f:b7:4b:39:8f:93:cb:a6:a0:67:b4:aa:
         fe:df:35:2d:59:ef:51:8a:b8:96:5c:fd:5e:80:70:ab:e4:8c:
         17:c8:12:de:21:a4:4b:89:2a:dd:04:6d:5a:c8:7f:62:d8:87:
         e5:f4:34:1b:72:70:34:f4:f9:63:80:f7:54:b2:0f:36:04:d1:
         6c:dd:d0:27:da:f3:0b:8b:54:ee:ca:ec:28:6f:86:e7:f2:25:
         61:85:a7:d9:4f:04:b9:6c:f6:ae:c7:ed:d8:85:12:d8:15:45:
         64:fb:14:a9:6a:df:5d:8e:46:62:52:90:64:14:b9:9f:84:e0:
         13:c1:ef:d7:24:e8:f6:05:db:da:48:d6:df:ef:a8:36:05:5a:
         5d:0d:aa:57:75:de:a2:ac:cb:90:c1:a4:b0:33:2e:2f:0f:46:
         70:97:82:34:19:25:04:98:4e:e2:6f:db:9c:2d:45:7a:4b:13:
         96:af:da:9e:16:ad:53:65:a3:95:f5:66:11:2b:6f:15:31:64:
         da:8b:ed:97:be:63:d7:83:31:6b:da:30:1f:53:cc:ff:95:e3:
         09:c9:46:ef:b7:04:53:f4:d7:90:a8:ea:98:94:2b:d4:a8:51:
         a7:4c:99:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:24:28 2026 by rpki-client