Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.mft
File:                     CWjN62Rstqq8D0IyziOx3OVMrSA.mft (raw, json)
Hash identifier:          Al/JkOG0yDE9qSzuAGbLV2sfGDxKUebYlP0o/4ugbCY=
Subject key identifier:   3E:5F:F9:C7:3F:B4:00:71:C1:FA:AF:32:B7:B1:E4:08:F1:0C:90:9A
Authority key identifier: 09:68:CD:EB:64:6C:B6:AA:BC:0F:42:32:CE:23:B1:DC:E5:4C:AD:20
Certificate issuer:       /CN=A9187CB1/serialNumber=0968CDEB646CB6AABC0F4232CE23B1DCE54CAD20
Certificate serial:       C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CWjN62Rstqq8D0IyziOx3OVMrSA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.mft
Manifest number:          C4
Signing time:             Sun 25 Oct 2026 07:12:25 +0000
Manifest this update:     Sun 25 Oct 2026 07:12:24 +0000
Manifest next update:     Sun 01 Nov 2026 07:12:24 +0000
Files and hashes:         1: CWjN62Rstqq8D0IyziOx3OVMrSA.crl (hash: dCmWqgW3uy5ew7sRx2g4iqRgGlsVsRS5CgxYsjsUiu0=)
                          2: C4FE3638A4D711F0A8D1DB3CC4F9AE02.roa (hash: bPau6Z6P+AYKpvnSxKbqaqw77/l2J2Yx/cJ0pxXB/hA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.crl
                          rsync://rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CWjN62Rstqq8D0IyziOx3OVMrSA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 05:33:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198 (0xc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187CB1, serialNumber=0968CDEB646CB6AABC0F4232CE23B1DCE54CAD20
        Validity
            Not Before: Oct 25 07:12:24 2026 GMT
            Not After : Nov  1 07:12:24 2026 GMT
        Subject: CN=6addabd8-3b32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:64:b4:3e:1d:ff:a3:a6:a7:a3:5d:f8:a1:c7:
                    12:0f:2d:c4:63:57:ae:63:29:07:9c:19:c7:24:de:
                    15:ea:40:ba:54:0d:ec:bf:ec:44:2f:17:d1:0a:f2:
                    58:05:f4:00:25:43:e3:16:de:d5:55:e9:0c:71:30:
                    1c:5d:16:c5:ee:0d:46:19:52:38:8f:08:80:49:10:
                    ff:4c:fb:8f:de:de:36:ca:0b:d2:5b:41:1a:27:1a:
                    15:93:95:5f:5c:bd:43:61:57:52:bd:8f:50:3f:64:
                    df:00:39:c1:56:6b:b2:a0:e0:6a:78:72:48:b4:b3:
                    32:a8:b0:99:b1:7f:b4:7b:2d:97:df:d8:5e:99:b5:
                    a1:e8:56:98:2e:32:26:2f:c7:bb:27:a4:fc:af:dc:
                    cc:3c:e8:77:aa:f0:3e:e1:ea:70:e9:48:43:6e:6a:
                    b7:e2:81:07:5c:55:62:9b:69:a0:38:4c:35:9b:19:
                    ce:02:83:63:2e:36:9d:9f:25:9c:80:9f:21:9b:1d:
                    be:96:c1:c0:39:12:44:4f:9b:b8:0b:19:fa:c6:58:
                    1a:36:8f:ac:d8:c1:ff:e9:f5:52:af:e5:e2:49:f9:
                    64:c7:09:03:b5:1a:20:18:30:0b:d5:7e:8e:41:fc:
                    9c:eb:3f:53:27:fb:6a:73:2d:54:fc:c7:a7:bc:14:
                    5a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:5F:F9:C7:3F:B4:00:71:C1:FA:AF:32:B7:B1:E4:08:F1:0C:90:9A
            X509v3 Authority Key Identifier:
                keyid:09:68:CD:EB:64:6C:B6:AA:BC:0F:42:32:CE:23:B1:DC:E5:4C:AD:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CWjN62Rstqq8D0IyziOx3OVMrSA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:69:e8:53:0d:ba:55:37:0f:86:da:be:fa:8b:96:95:05:58:
         b8:53:c2:1c:e2:71:03:47:81:e0:ee:46:11:76:c0:43:7d:70:
         e2:31:d6:22:eb:b0:cc:71:ea:65:b3:aa:f9:e6:9f:86:e4:08:
         5a:d9:a1:8b:12:c4:e0:fb:d5:ee:d9:eb:32:3c:61:7d:6e:df:
         e2:f0:a9:45:09:ec:c0:33:4b:00:06:a2:00:14:ad:4d:f2:c8:
         40:99:57:93:87:27:77:59:18:1c:ab:4d:6e:0f:64:a4:7e:91:
         6c:f5:f2:9a:d0:06:55:50:f0:c4:75:eb:c9:48:68:f2:cf:66:
         f3:7a:8f:95:28:32:f5:38:34:b6:3e:6d:f1:d8:61:1e:b0:a4:
         d4:1c:ff:69:57:91:f9:4e:95:c7:08:d6:eb:88:49:0d:a3:45:
         b5:08:ee:e6:00:6b:e1:d9:cd:72:38:85:fc:20:5d:44:08:4d:
         e5:98:61:02:cd:ae:c0:48:4f:36:5b:4c:1f:8c:34:62:b4:ce:
         a8:39:ea:80:ad:77:fc:a0:7f:d8:56:e8:dc:b2:75:75:80:1a:
         17:48:92:31:8f:93:36:ce:05:14:b4:be:0e:97:24:df:5d:1e:
         d4:68:b9:74:66:8f:6c:55:b8:15:c8:11:d0:d9:2a:c4:f6:dd:
         17:72:79:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:37:36 2026 by rpki-client