Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft
File:                     1WeS1ZfpzdAr_BbQtJLaParggPw.mft (raw, json)
Hash identifier:          XtPGWnCdlx1zW4DD57TT6SmMnPD5UdJ20NJBMUrMGTs=
Subject key identifier:   79:4F:B4:E8:8E:13:D4:CA:B9:C8:A2:75:B3:FE:96:E7:01:9B:2B:FF
Authority key identifier: D5:67:92:D5:97:E9:CD:D0:2B:FC:16:D0:B4:92:DA:3D:AA:E0:80:FC
Certificate issuer:       /CN=A91731EA/serialNumber=D56792D597E9CDD02BFC16D0B492DA3DAAE080FC
Certificate serial:       2037
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft
Manifest number:          2007
Signing time:             Sat 24 Oct 2026 15:56:57 +0000
Manifest this update:     Sat 24 Oct 2026 15:56:56 +0000
Manifest next update:     Sat 31 Oct 2026 15:56:56 +0000
Files and hashes:         1: 1WeS1ZfpzdAr_BbQtJLaParggPw.crl (hash: JoxhSzzfwSmyNDgylk5zmB9UiFa1oJ4JFDFzcalSXDQ=)
                          2: 500DFDA8578611EA8CC3B124C4F9AE02.roa (hash: zSpovKpU002aRj0qY0zdZXg1dWaqo+y8NB7/DtI+3e8=)
                          3: WZWvvFy7Z0qolLRV3uN605sl_PU.asa (hash: 7qt/VQR0S3yFw8dH5d+8OVxwduYoPfIdx4d+vJsM0SQ=)
                          4: 317CF2A634E811EFA8BEA738C4F9AE02.roa (hash: eMc+uVzb1BxMClQI5wUnSI6PJ9bDKFNnj/I/GYdK2hk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.crl
                          rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 15:56:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8247 (0x2037)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91731EA, serialNumber=D56792D597E9CDD02BFC16D0B492DA3DAAE080FC
        Validity
            Not Before: Oct 24 15:56:56 2026 GMT
            Not After : Oct 31 15:56:56 2026 GMT
        Subject: CN=6adcd549-93ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:01:57:cc:0e:c8:56:44:d2:6c:1d:63:de:b7:
                    84:f1:15:45:49:4a:8f:8f:b6:ce:7b:63:45:89:d2:
                    3a:03:63:01:6d:71:d4:68:13:93:66:c5:53:0d:7f:
                    a5:14:a8:ea:9c:01:c2:d9:70:4d:01:5c:54:86:a6:
                    83:17:67:4b:85:27:71:b0:9c:82:a0:d1:33:f3:f2:
                    c6:02:b6:08:10:0f:f4:25:c4:8b:8b:e5:c5:e7:d0:
                    9c:73:e3:76:b8:1b:a9:b4:10:64:0a:81:cb:89:fe:
                    27:00:4a:08:bc:2a:e8:35:3a:29:b0:3a:6e:fd:a6:
                    55:f1:c9:a6:68:82:4b:4c:07:42:d2:bf:23:48:38:
                    76:87:fa:7f:a6:68:f2:d8:07:0e:a6:a6:5c:68:18:
                    ab:5f:ab:7a:e0:91:93:68:73:c3:b4:5d:50:69:a6:
                    f2:36:fe:bd:d3:aa:96:b7:09:e5:b3:0c:29:ec:84:
                    b2:62:1e:3d:9a:e5:0a:bf:eb:42:9a:36:d8:67:7d:
                    b5:70:07:95:09:68:2c:c1:4e:07:c9:25:60:ae:6e:
                    26:c1:1e:74:2b:fa:cb:76:c3:6a:ee:aa:f9:22:b3:
                    52:97:89:d3:3a:1f:a2:c5:32:f9:6f:79:43:f3:12:
                    c4:6a:26:0b:da:9c:81:91:4c:98:74:86:90:09:a4:
                    33:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:4F:B4:E8:8E:13:D4:CA:B9:C8:A2:75:B3:FE:96:E7:01:9B:2B:FF
            X509v3 Authority Key Identifier:
                keyid:D5:67:92:D5:97:E9:CD:D0:2B:FC:16:D0:B4:92:DA:3D:AA:E0:80:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:dd:9e:27:6d:39:95:22:6a:ce:8c:d8:65:0e:ef:9d:3f:fa:
         93:5d:3e:fb:08:c3:7f:3e:e0:dc:4b:3a:5a:30:a7:10:af:f9:
         52:eb:69:32:94:df:97:02:39:0b:3a:5a:b2:fa:29:9c:b6:d1:
         ae:c0:f3:84:73:7b:9b:73:f8:f9:5d:27:0e:80:fc:5c:12:89:
         c8:d8:fa:b8:90:94:6b:57:c9:6a:26:7c:44:dd:1e:25:a5:66:
         73:9d:f5:fd:47:d6:07:18:d2:18:f7:e0:f4:ef:b5:b6:3e:b8:
         69:46:14:c4:7c:80:6c:61:56:e0:74:8c:9f:e9:a8:25:8c:ca:
         9b:1f:42:dd:ed:dc:8d:91:53:f0:ad:ed:aa:bc:6b:53:f7:8e:
         31:09:26:97:cb:57:35:eb:2c:dc:c1:7d:18:02:d9:43:99:ea:
         16:b5:03:92:ae:69:52:9e:79:7b:b7:8e:56:4a:76:2b:53:95:
         8e:28:bb:85:a3:c2:2b:61:51:a0:d7:6d:30:2d:7f:28:69:13:
         e4:21:bb:83:f1:a7:39:3a:47:01:6e:7a:c2:47:2a:9e:31:06:
         3a:ad:16:83:e1:0b:7a:34:04:f9:c3:cb:59:64:64:04:de:bc:
         f3:9a:f6:9c:62:e6:e8:a4:c0:f4:b0:78:8a:05:2b:7f:aa:82:
         d2:5d:a7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:18:50 2026 by rpki-client