Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/Wwu8hLXL0Vww2QFCcGUozxkBBWg.mft
File:                     Wwu8hLXL0Vww2QFCcGUozxkBBWg.mft (raw, json)
Hash identifier:          tNMIcOx9OynPgROPAx/NTtJZ3sZJyrQIqR8PSfw88Bo=
Subject key identifier:   05:02:6F:B6:BD:C5:D3:40:DB:D1:DE:80:CA:23:7B:DD:1F:7C:16:D0
Authority key identifier: 5B:0B:BC:84:B5:CB:D1:5C:30:D9:01:42:70:65:28:CF:19:01:05:68
Certificate issuer:       /CN=A91806C2/serialNumber=5B0BBC84B5CBD15C30D90142706528CF19010568
Certificate serial:       043B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wwu8hLXL0Vww2QFCcGUozxkBBWg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/Wwu8hLXL0Vww2QFCcGUozxkBBWg.mft
Manifest number:          042F
Signing time:             Wed 07 Oct 2026 00:22:28 +0000
Manifest this update:     Wed 07 Oct 2026 00:22:28 +0000
Manifest next update:     Wed 14 Oct 2026 00:22:28 +0000
Files and hashes:         1: Wwu8hLXL0Vww2QFCcGUozxkBBWg.crl (hash: 5sQFnZE2SDnLhRbhY1dQT9uAJ4U9XNpM6zwKE4Xdin8=)
                          2: 1C3679E8C4A211EC8FD6D313C4F9AE02.roa (hash: 3fEYiDnMfJ41q2uUI4xXAM9BWNFsWhIVNeViN5QuT84=)
                          3: 1CD62088C4A211EC8FD6D313C4F9AE02.roa (hash: 4e0p3icN1/S8SNGjqk90GnWKUbC9uM7d133P9FgKLXM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/Wwu8hLXL0Vww2QFCcGUozxkBBWg.crl
                          rsync://rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/Wwu8hLXL0Vww2QFCcGUozxkBBWg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wwu8hLXL0Vww2QFCcGUozxkBBWg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 00:22:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1083 (0x43b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91806C2, serialNumber=5B0BBC84B5CBD15C30D90142706528CF19010568
        Validity
            Not Before: Oct  7 00:22:28 2026 GMT
            Not After : Oct 14 00:22:28 2026 GMT
        Subject: CN=6ac590c4-df01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:97:37:bf:92:4b:6e:43:cb:4a:39:d1:d5:78:
                    3d:dc:26:e0:b2:b2:93:2e:47:97:3c:49:16:f2:58:
                    f7:b2:79:d0:aa:2a:6e:58:4f:ad:f7:88:07:89:24:
                    98:65:21:73:16:5e:cc:bb:fc:93:20:72:bc:01:c9:
                    99:da:f9:71:51:9a:8e:70:ab:c2:b2:24:15:f8:d5:
                    1d:32:ff:05:94:5a:62:ba:d9:02:2b:7f:3f:72:39:
                    5a:9b:cc:27:1c:0c:c9:2c:63:85:56:46:9b:99:1d:
                    af:d5:bc:e2:5c:73:69:d6:2e:b7:3d:31:5c:0e:1e:
                    ce:36:3c:0a:49:be:86:4e:6f:2f:d4:4a:7f:75:1c:
                    cc:6a:52:e6:ae:52:52:5f:a9:f9:03:86:5c:84:57:
                    54:86:f3:ce:76:b7:f3:44:68:56:f6:86:90:a9:5d:
                    26:65:57:26:f4:63:9e:e6:a7:aa:e0:5f:35:2b:60:
                    16:db:02:22:ce:56:19:23:1a:86:ff:2b:36:54:af:
                    c2:b4:3a:ee:50:2d:5b:cc:d4:4a:89:17:ee:2a:79:
                    2f:55:1b:5c:d4:83:de:50:5e:63:96:5a:74:34:cd:
                    73:34:f1:dd:f3:80:a2:dd:55:fb:26:35:de:77:0d:
                    5e:af:e2:82:16:c0:cf:96:e0:23:fd:9c:f4:ec:c2:
                    e9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:02:6F:B6:BD:C5:D3:40:DB:D1:DE:80:CA:23:7B:DD:1F:7C:16:D0
            X509v3 Authority Key Identifier:
                keyid:5B:0B:BC:84:B5:CB:D1:5C:30:D9:01:42:70:65:28:CF:19:01:05:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/Wwu8hLXL0Vww2QFCcGUozxkBBWg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wwu8hLXL0Vww2QFCcGUozxkBBWg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/Wwu8hLXL0Vww2QFCcGUozxkBBWg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:c8:c6:b8:42:32:28:ca:0f:4b:20:fc:42:5f:5c:59:f0:62:
         fb:48:45:9d:4a:7e:24:91:4d:49:9e:54:28:d4:c3:83:40:ba:
         a7:97:0d:63:8e:62:f2:62:a2:35:89:ea:8b:98:39:6c:e9:27:
         8e:80:38:3b:82:13:29:d7:b5:9a:38:9e:2e:b7:94:e0:dc:83:
         17:c1:9b:50:25:4c:fb:e0:6b:ba:d1:52:0f:46:d8:52:5f:1e:
         cb:1a:e8:41:7b:01:cb:76:ba:06:c9:dd:c5:79:c3:9b:a5:0d:
         43:5c:d3:17:6b:71:32:ab:3c:83:9b:4f:70:dc:69:bb:f3:18:
         4a:89:f7:1c:cc:bc:11:40:d6:2f:7b:00:31:ea:e8:ec:44:ae:
         33:54:bb:15:db:0f:ea:ca:44:e8:96:a9:51:36:10:2c:c0:5c:
         e0:a7:dd:60:26:96:dc:f9:99:d7:c2:6c:3c:76:b8:bc:73:69:
         b8:f2:f8:c6:b5:3d:05:e5:1d:7a:cf:66:75:c9:e2:5c:0e:15:
         71:ff:e9:62:e8:86:4d:b0:d2:5b:07:4f:3e:3b:66:83:44:89:
         f2:84:53:7f:2c:d4:34:16:8d:13:f5:7d:f2:06:52:67:e4:c7:
         1b:6b:71:eb:78:f2:d2:54:33:75:e8:1e:99:c1:54:ea:89:f5:
         90:6b:a7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 22:47:11 2026 by rpki-client