Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A1366/76D663783EDC11F1893BD254B5833773/WBXl6-ivfnATBwIqWPqPDeY4ViQ.mft
File:                     WBXl6-ivfnATBwIqWPqPDeY4ViQ.mft (raw, json)
Hash identifier:          xukKZsBhuuC3rbCLyZDIof5VxmAEF7KXnzWls0SNd/I=
Subject key identifier:   47:04:36:0C:66:F6:68:70:54:42:D5:4B:B8:EE:B7:1E:2E:54:79:A2
Authority key identifier: 58:15:E5:EB:E8:AF:7E:70:13:07:02:2A:58:FA:8F:0D:E6:38:56:24
Certificate issuer:       /CN=A91A1366/serialNumber=5815E5EBE8AF7E701307022A58FA8F0DE6385624
Certificate serial:       69
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBXl6-ivfnATBwIqWPqPDeY4ViQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1366/76D663783EDC11F1893BD254B5833773/WBXl6-ivfnATBwIqWPqPDeY4ViQ.mft
Manifest number:          65
Signing time:             Sun 01 Nov 2026 09:09:00 +0000
Manifest this update:     Sun 01 Nov 2026 09:08:59 +0000
Manifest next update:     Sun 08 Nov 2026 09:08:59 +0000
Files and hashes:         1: WBXl6-ivfnATBwIqWPqPDeY4ViQ.crl (hash: wl6OS2VknyXkdfrKGIgndfNO0U99FH0i2reggHjKxA8=)
                          2: 857B25F03EDF11F1939FAF8DB6833773.roa (hash: jvx3jLr9s6QjVJZgrGVKD9kTWgR2nMK23/H41dS7lCY=)
                          3: 9DE21B78534111F196833CCBCD833773.roa (hash: 5D8pGtcI0i0PyQLkaDycsxgJHQA/3dZqJfK5aATBRWs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1366/76D663783EDC11F1893BD254B5833773/WBXl6-ivfnATBwIqWPqPDeY4ViQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A1366/76D663783EDC11F1893BD254B5833773/WBXl6-ivfnATBwIqWPqPDeY4ViQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBXl6-ivfnATBwIqWPqPDeY4ViQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Nov 2026 09:08:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1366, serialNumber=5815E5EBE8AF7E701307022A58FA8F0DE6385624
        Validity
            Not Before: Nov  1 09:08:59 2026 GMT
            Not After : Nov  8 09:08:59 2026 GMT
        Subject: CN=6ae701ac-8be6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:dd:3a:c7:27:15:24:33:85:41:27:20:d7:ea:
                    ee:f0:5a:36:f3:1d:cc:41:f3:29:9d:6c:f2:1d:76:
                    7b:69:6c:33:24:62:bf:74:3c:9f:ca:46:c4:e2:31:
                    88:0d:4f:d7:bc:95:c0:15:ab:1b:bf:93:b8:46:82:
                    2d:4d:7b:08:d3:cf:7c:db:71:e9:06:93:ec:fc:0e:
                    fc:d9:3d:e5:52:fd:b1:06:44:b6:ba:03:26:8d:ba:
                    e0:46:48:55:b0:bb:56:45:be:8d:77:99:18:2e:a7:
                    ce:85:b1:4e:b4:92:85:6f:d5:96:08:e4:ec:a7:ec:
                    36:c9:b3:5a:bd:04:34:7d:b7:ed:bd:bd:dc:3c:6e:
                    ec:58:49:b7:1f:ed:3b:03:92:36:0e:70:f0:82:16:
                    75:ea:d4:e6:d8:d7:f1:da:19:60:bd:c0:d7:01:c0:
                    81:46:09:43:12:c9:96:cd:91:8f:cc:ea:e1:27:f7:
                    7a:e6:6e:1c:8f:42:22:65:c5:a0:66:0b:c4:11:83:
                    11:1b:2a:0d:26:f4:7b:4a:5c:ab:c2:33:0c:fd:3d:
                    d6:d0:df:ba:6e:ad:48:55:3a:6b:bc:c0:de:47:09:
                    9d:50:93:f1:3d:ad:a9:c7:da:ff:33:e2:52:a0:91:
                    cb:bd:0a:2f:84:a0:21:f5:74:da:00:cc:3c:cd:08:
                    f5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:04:36:0C:66:F6:68:70:54:42:D5:4B:B8:EE:B7:1E:2E:54:79:A2
            X509v3 Authority Key Identifier:
                keyid:58:15:E5:EB:E8:AF:7E:70:13:07:02:2A:58:FA:8F:0D:E6:38:56:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1366/76D663783EDC11F1893BD254B5833773/WBXl6-ivfnATBwIqWPqPDeY4ViQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBXl6-ivfnATBwIqWPqPDeY4ViQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1366/76D663783EDC11F1893BD254B5833773/WBXl6-ivfnATBwIqWPqPDeY4ViQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:5a:53:14:2c:b1:aa:95:07:37:33:27:15:41:90:14:99:e6:
         0b:db:a7:a0:20:45:83:88:45:2d:0e:e0:00:b0:a5:d9:c3:27:
         b2:87:b0:67:31:f2:ec:39:44:e8:63:ff:08:99:59:35:da:0a:
         b3:51:52:f4:b6:54:f3:b3:5f:47:d9:ad:37:0f:25:82:fd:78:
         53:39:04:a8:b0:c1:41:73:15:13:98:4d:0f:56:d1:43:5a:cb:
         84:9e:66:b7:1b:27:d6:34:e9:e3:42:2a:4b:86:ab:fa:09:9d:
         de:dd:09:f1:b4:e6:42:fc:70:c9:ad:fb:94:44:81:8e:a0:53:
         8b:9e:99:95:6c:09:52:c5:27:9b:2c:1a:25:d1:ab:2a:f2:9e:
         ee:12:c6:d4:ca:74:f6:04:fd:9f:c1:8f:aa:6d:0d:6b:d2:e4:
         41:6e:b6:5c:3a:09:e5:6a:6e:42:4a:65:14:33:ee:58:cd:47:
         a3:c4:7e:7d:2f:f2:62:21:96:27:6c:44:7e:4f:2f:39:63:43:
         5a:5d:06:41:04:43:2f:b7:a3:84:13:83:25:04:d2:95:99:25:
         d6:7c:cf:a1:fd:98:49:29:aa:e3:e8:5f:fb:84:f7:45:63:09:
         c4:41:1b:8a:2f:db:7b:da:c6:54:72:53:83:81:bf:c3:c8:15:
         ab:8b:62:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 02:50:41 2026 by rpki-client