Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A1366/76D663783EDC11F1893BD254B5833773/WBXl6-ivfnATBwIqWPqPDeY4ViQ.mft
File:                     WBXl6-ivfnATBwIqWPqPDeY4ViQ.mft (raw, json)
Hash identifier:          l0LbvGM8n7aYqexpZTyH2GmfRhgraKL7t5iI5iGKmd4=
Subject key identifier:   99:6E:84:C6:92:E7:FD:0F:2E:25:86:01:36:34:64:B7:DB:37:ED:93
Authority key identifier: 58:15:E5:EB:E8:AF:7E:70:13:07:02:2A:58:FA:8F:0D:E6:38:56:24
Certificate issuer:       /CN=A91A1366/serialNumber=5815E5EBE8AF7E701307022A58FA8F0DE6385624
Certificate serial:       67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBXl6-ivfnATBwIqWPqPDeY4ViQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1366/76D663783EDC11F1893BD254B5833773/WBXl6-ivfnATBwIqWPqPDeY4ViQ.mft
Manifest number:          63
Signing time:             Thu 29 Oct 2026 08:50:04 +0000
Manifest this update:     Thu 29 Oct 2026 08:50:04 +0000
Manifest next update:     Thu 05 Nov 2026 08:50:04 +0000
Files and hashes:         1: WBXl6-ivfnATBwIqWPqPDeY4ViQ.crl (hash: ogbpSh5cAKknMwmdeilEDLsiC2MZcP/rFLvSl7B+NCQ=)
                          2: 9DE21B78534111F196833CCBCD833773.roa (hash: 5D8pGtcI0i0PyQLkaDycsxgJHQA/3dZqJfK5aATBRWs=)
                          3: 857B25F03EDF11F1939FAF8DB6833773.roa (hash: jvx3jLr9s6QjVJZgrGVKD9kTWgR2nMK23/H41dS7lCY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1366/76D663783EDC11F1893BD254B5833773/WBXl6-ivfnATBwIqWPqPDeY4ViQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A1366/76D663783EDC11F1893BD254B5833773/WBXl6-ivfnATBwIqWPqPDeY4ViQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBXl6-ivfnATBwIqWPqPDeY4ViQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Nov 2026 08:50:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1366, serialNumber=5815E5EBE8AF7E701307022A58FA8F0DE6385624
        Validity
            Not Before: Oct 29 08:50:04 2026 GMT
            Not After : Nov  5 08:50:04 2026 GMT
        Subject: CN=6ae308bc-acc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1c:25:7d:8c:61:ec:f2:b8:d2:0a:d0:a3:7a:
                    9c:a8:cf:2e:e6:8e:43:bb:39:e9:2a:ed:11:6c:58:
                    f9:10:a4:79:2d:ae:34:35:2a:18:22:f4:9b:af:2e:
                    3e:f1:e3:19:a4:52:2a:6b:18:5c:9d:cf:4b:19:54:
                    54:64:57:43:2d:a5:7d:21:85:44:b1:1e:1f:a7:9e:
                    f5:6e:8f:75:13:94:35:a6:d9:bf:97:68:e8:2a:5c:
                    91:4e:18:3c:69:f6:4b:56:37:b8:3c:85:40:81:fb:
                    f9:d7:b8:a3:63:2c:1e:51:74:02:b3:cb:7e:4a:dc:
                    5f:59:68:5d:8e:19:a4:7b:7f:6d:7c:18:35:53:22:
                    f3:cb:1f:ff:1e:a4:02:31:96:84:45:a3:9d:fa:11:
                    0b:52:36:03:9c:9f:27:b1:fa:ae:f4:20:43:ff:33:
                    fb:83:71:59:41:0b:1c:da:a0:cd:a2:70:62:fe:20:
                    90:ae:f7:4f:09:48:5f:1e:73:7c:f9:8d:24:ee:5e:
                    dc:ed:2c:78:91:85:61:82:3b:7f:02:31:e7:08:4c:
                    d5:8e:d4:94:fa:f1:c9:4a:ba:4b:f0:3d:74:dd:d0:
                    d7:25:2d:b2:20:40:ff:5b:15:61:c9:66:43:e7:3f:
                    b0:7b:b3:43:ca:cb:66:5a:ec:6b:e7:55:d4:df:0d:
                    7b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:6E:84:C6:92:E7:FD:0F:2E:25:86:01:36:34:64:B7:DB:37:ED:93
            X509v3 Authority Key Identifier:
                keyid:58:15:E5:EB:E8:AF:7E:70:13:07:02:2A:58:FA:8F:0D:E6:38:56:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1366/76D663783EDC11F1893BD254B5833773/WBXl6-ivfnATBwIqWPqPDeY4ViQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBXl6-ivfnATBwIqWPqPDeY4ViQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1366/76D663783EDC11F1893BD254B5833773/WBXl6-ivfnATBwIqWPqPDeY4ViQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:53:e1:f7:28:c3:38:81:c7:4f:16:f9:cf:a8:6c:3f:65:c5:
         fb:47:a3:d5:7f:ef:6f:f6:95:a3:c8:c8:0c:53:56:f2:8c:06:
         38:31:2b:e6:09:86:72:79:c7:8d:e9:94:20:2b:da:a1:e7:db:
         a3:eb:7d:94:1b:84:01:d8:e0:39:19:ba:56:21:01:5d:e2:4a:
         cb:a7:e4:1b:05:de:7c:f4:5c:78:1d:59:0e:a2:ed:62:c1:d9:
         53:0d:c2:28:c2:93:0b:8b:14:3d:e6:39:f7:ad:82:57:14:dc:
         21:09:7c:67:be:eb:83:04:d5:e8:9d:33:a4:1d:49:6d:2a:f3:
         55:e2:9c:93:1f:4f:fa:09:fd:c1:b6:38:e7:92:7e:b7:4a:57:
         07:8d:ce:44:f5:eb:d6:e2:c3:56:89:75:f2:31:4e:b4:02:5d:
         ba:2d:f4:bb:f8:2e:ed:c1:ba:a2:a0:29:b7:70:b4:42:6a:fc:
         b1:a7:1c:1e:88:da:06:ba:af:ae:dd:e7:55:79:2a:36:f9:19:
         a7:43:b6:ff:8e:43:1d:b7:89:c2:20:4a:b2:11:db:03:4d:ad:
         c1:b5:1f:ce:fb:5c:94:a1:40:4e:d9:63:eb:22:56:bc:02:8d:
         eb:d3:74:a4:b7:cf:0a:d1:d5:72:6f:e7:27:22:78:7a:3a:ab:
         2b:68:8a:d0
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
MTM2NjExMC8GA1UEBRMoNTgxNUU1RUJFOEFGN0U3MDEzMDcwMjJBNThGQThGMERF
NjM4NTYyNDAeFw0yNjEwMjkwODUwMDRaFw0yNjExMDUwODUwMDRaMBgxFjAUBgNV
BAMTDTZhZTMwOGJjLWFjYzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCaHCV9jGHs8rjSCtCjepyozy7mjkO7Oekq7RFsWPkQpHktrjQ1Khgi9JuvLj7x
4xmkUiprGFydz0sZVFRkV0MtpX0hhUSxHh+nnvVuj3UTlDWm2b+XaOgqXJFOGDxp
9ktWN7g8hUCB+/nXuKNjLB5RdAKzy35K3F9ZaF2OGaR7f218GDVTIvPLH/8epAIx
loRFo536EQtSNgOcnyex+q70IEP/M/uDcVlBCxzaoM2icGL+IJCu908JSF8ec3z5
jSTuXtztLHiRhWGCO38CMecITNWO1JT68clKukvwPXTd0NclLbIgQP9bFWHJZkPn
P7B7s0PKy2Za7GvnVdTfDXu/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUmW6ExpLn
/Q8uJYYBNjRkt9s37ZMwHwYDVR0jBBgwFoAUWBXl6+ivfnATBwIqWPqPDeY4ViQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUExMzY2Lzc2RDY2Mzc4M0VE
QzExRjE4OTNCRDI1NEI1ODMzNzczL1dCWGw2LWl2Zm5BVEJ3SXFXUHFQRGVZNFZp
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvV0JYbDYtaXZmbkFUQndJcVdQcVBEZVk0VmlRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEx
MzY2Lzc2RDY2Mzc4M0VEQzExRjE4OTNCRDI1NEI1ODMzNzczL1dCWGw2LWl2Zm5B
VEJ3SXFXUHFQRGVZNFZpUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCYU+H3KMM4gcdPFvnPqGw/ZcX7R6PVf+9v9pWjyMgMU1byjAY4MSvmCYZyeceN
6ZQgK9qh59uj632UG4QB2OA5GbpWIQFd4krLp+QbBd589Fx4HVkOou1iwdlTDcIo
wpMLixQ95jn3rYJXFNwhCXxnvuuDBNXonTOkHUltKvNV4pyTH0/6Cf3Btjjnkn63
SlcHjc5E9evW4sNWiXXyMU60Al26LfS7+C7twbqioCm3cLRCavyxpxweiNoGuq+u
3edVeSo2+RmnQ7b/jkMdt4nCIEqyEdsDTa3BtR/O+1yUoUBO2WPrIla8Ao3r03Sk
t88K0dVyb+cnInh6OqsraIrQ
-----END CERTIFICATE-----
Generated at Sat Oct 31 08:20:53 2026 by rpki-client