Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft
File:                     WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft (raw, json)
Hash identifier:          7+x66y/mc2oyQDi30wusxMurqqw/S6SThbnFbc6BGi4=
Subject key identifier:   92:1E:A6:A5:6E:83:8B:E0:43:90:E7:0F:AB:B6:3E:36:03:65:B4:C3
Authority key identifier: 5B:3B:8B:FB:2C:9F:2C:E8:83:51:5F:A3:DC:F9:D1:C0:CF:AD:07:A4
Certificate issuer:       /CN=A9188D0C/serialNumber=5B3B8BFB2C9F2CE883515FA3DCF9D1C0CFAD07A4
Certificate serial:       03EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft
Manifest number:          03E3
Signing time:             Sat 03 Oct 2026 00:47:43 +0000
Manifest this update:     Sat 03 Oct 2026 00:47:43 +0000
Manifest next update:     Sat 10 Oct 2026 00:47:43 +0000
Files and hashes:         1: WzuL-yyfLOiDUV-j3PnRwM-tB6Q.crl (hash: X9mx/SBV1VrebFmuQFJWHLEXsUp662J/k00ZVT/5x4c=)
                          2: 42CD71AEE33511EC9EDB371BC4F9AE02.roa (hash: BmkDfGNwDvTFPWcc2oNSmzFiujBl/Zzlp/ccZkQmaXc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.crl
                          rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 00:47:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1003 (0x3eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188D0C, serialNumber=5B3B8BFB2C9F2CE883515FA3DCF9D1C0CFAD07A4
        Validity
            Not Before: Oct  3 00:47:43 2026 GMT
            Not After : Oct 10 00:47:43 2026 GMT
        Subject: CN=6ac050af-aed4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:da:19:2d:9d:7b:e6:19:0c:45:5e:e0:cf:91:
                    0e:79:33:a7:7d:0d:c9:99:bd:39:59:80:c9:3e:df:
                    fd:6a:a0:e4:50:b6:fa:25:dd:c9:aa:de:20:cf:8e:
                    0d:91:3b:78:c5:de:8f:a8:9a:b2:12:02:87:b6:22:
                    cd:6a:8d:71:4a:ce:f2:81:fc:91:5f:1d:51:53:49:
                    d4:5a:47:b4:a4:25:cc:ed:b1:58:c0:d2:b2:f2:19:
                    4e:bf:48:70:11:65:42:c6:3d:88:76:a0:1d:ac:4b:
                    45:5d:86:64:45:3e:56:dc:01:fc:23:15:30:d3:71:
                    ff:2d:fa:32:24:84:65:f4:86:ee:99:87:51:99:4c:
                    4f:52:bb:2d:e0:06:8a:26:2e:ba:ee:31:bd:4e:e0:
                    2e:a1:65:ed:70:db:8a:14:4b:fb:db:27:a3:91:84:
                    c1:e9:8f:4d:18:c4:12:aa:16:d8:b4:bd:15:6e:b2:
                    7f:be:c9:2e:c5:9b:cd:e8:eb:89:86:d3:fc:52:5a:
                    87:f3:06:44:30:5a:6e:23:7a:55:fc:84:73:06:48:
                    ce:a0:f4:38:5d:95:da:20:21:df:6a:a5:7f:b4:78:
                    7a:25:85:be:9c:52:2c:3a:91:75:b8:e8:3a:78:89:
                    1e:a6:99:d3:13:84:ee:a4:4c:44:30:ac:ea:c3:5c:
                    1d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:1E:A6:A5:6E:83:8B:E0:43:90:E7:0F:AB:B6:3E:36:03:65:B4:C3
            X509v3 Authority Key Identifier:
                keyid:5B:3B:8B:FB:2C:9F:2C:E8:83:51:5F:A3:DC:F9:D1:C0:CF:AD:07:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:eb:c3:b9:96:06:93:33:00:5a:9d:97:4e:03:e5:c9:a1:c2:
         56:e2:04:87:ca:ef:1f:e3:44:bc:33:15:e7:67:2d:ec:7f:e7:
         39:75:c6:07:e5:46:26:dd:f7:1c:f3:e3:63:7e:b7:d9:e9:e4:
         5d:60:eb:97:0d:ad:94:a4:db:7d:5a:16:eb:0d:0f:48:03:14:
         fa:35:2e:91:e2:b6:df:1d:11:3e:2e:77:a8:a7:02:d2:fa:78:
         2d:53:b6:b2:95:f3:89:b1:88:24:ad:53:80:95:63:42:e5:56:
         9e:4f:59:c2:96:dc:0f:83:56:8b:d5:e5:14:de:0d:f7:ef:01:
         6a:0a:df:a2:24:bc:e3:aa:4f:e5:1f:38:50:ca:20:50:16:ed:
         d2:47:b9:9d:52:fb:75:9a:50:70:30:26:7f:f2:fd:85:3a:5c:
         ce:68:df:5d:cb:3f:d8:c6:5a:4e:da:cd:d2:77:b7:55:5d:f0:
         6e:86:53:c4:72:3f:6b:f3:51:d9:7b:c8:77:f3:4a:55:d0:e5:
         53:68:23:cf:87:25:2d:a2:12:4c:d1:a5:d6:ff:ec:7c:2a:66:
         36:8d:1e:00:06:fd:be:fe:f1:e0:84:03:3a:8a:87:e4:94:65:
         31:38:91:4b:1c:9a:bd:2d:1f:7f:88:bb:a0:8f:fd:3c:f9:cd:
         b0:b1:f0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:03:00 2026 by rpki-client