Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.mft
File:                     iWZCPuKkFWMfevMU5NiEAHqEaLY.mft (raw, json)
Hash identifier:          zQkXtAtuVxRWsVwLLlwi9pbeoRg5GgcHcwXj+oHs8cA=
Subject key identifier:   00:7C:11:58:44:B8:4C:D2:70:17:4B:70:50:61:2B:54:9F:96:7A:1F
Authority key identifier: 89:66:42:3E:E2:A4:15:63:1F:7A:F3:14:E4:D8:84:00:7A:84:68:B6
Certificate issuer:       /CN=A91A91CB/serialNumber=8966423EE2A415631F7AF314E4D884007A8468B6
Certificate serial:       013B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWZCPuKkFWMfevMU5NiEAHqEaLY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.mft
Manifest number:          0137
Signing time:             Fri 09 Oct 2026 06:13:17 +0000
Manifest this update:     Fri 09 Oct 2026 06:13:17 +0000
Manifest next update:     Fri 16 Oct 2026 06:13:17 +0000
Files and hashes:         1: iWZCPuKkFWMfevMU5NiEAHqEaLY.crl (hash: sRWTCwcmselzQVsMnPKhl6ZMLV/QUyuIQT5Z07rx55k=)
                          2: 0EB302DCEA5B11EFABB07C6DC4F9AE02.roa (hash: yxcEwj+JBBXiVTX+aFQc5ddxq/vEi232S7B1rwDfWO0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.crl
                          rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWZCPuKkFWMfevMU5NiEAHqEaLY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 06:13:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 315 (0x13b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A91CB, serialNumber=8966423EE2A415631F7AF314E4D884007A8468B6
        Validity
            Not Before: Oct  9 06:13:17 2026 GMT
            Not After : Oct 16 06:13:17 2026 GMT
        Subject: CN=6ac885fd-8535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d4:74:e9:d3:06:32:a7:73:2b:a3:37:fc:68:
                    70:d1:62:24:dd:c2:24:e8:68:4b:ed:53:ba:40:a8:
                    62:1f:eb:66:b0:82:75:bb:e5:93:af:cf:05:54:fe:
                    bd:41:0f:b9:94:97:0e:40:45:db:be:5e:30:94:25:
                    44:d5:c6:32:3d:83:75:5c:63:ae:98:4f:aa:c7:92:
                    d9:b5:a5:dc:2f:c1:68:c8:74:c3:34:44:ae:c4:3d:
                    8f:c6:04:80:c6:9c:0b:ea:c4:ee:9b:e1:c2:4d:23:
                    02:6e:6c:d3:bc:1a:02:c4:c8:f2:90:f7:40:3c:1c:
                    4c:e6:e3:b1:d9:4c:e0:5d:db:26:e7:c5:b2:5e:f6:
                    d7:f1:a0:60:3b:f2:6a:11:99:eb:d6:fd:25:86:9e:
                    c9:e4:e6:8a:c0:db:d7:04:56:1b:f5:8a:0a:8a:27:
                    76:3f:51:0b:24:9c:22:40:63:4f:05:ba:5f:c6:7f:
                    7a:8f:ec:75:31:35:48:8d:8c:a6:0e:80:47:c4:c9:
                    29:22:3c:a9:b7:62:ef:ae:43:e5:66:0e:7a:cd:63:
                    7f:af:a4:51:7a:13:30:60:e3:20:86:eb:54:74:d1:
                    ef:f9:e2:e7:3d:92:44:37:e4:6e:8b:0f:bb:37:28:
                    aa:3e:9d:0c:63:76:1c:73:6c:0b:f1:56:65:eb:5d:
                    c5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:7C:11:58:44:B8:4C:D2:70:17:4B:70:50:61:2B:54:9F:96:7A:1F
            X509v3 Authority Key Identifier:
                keyid:89:66:42:3E:E2:A4:15:63:1F:7A:F3:14:E4:D8:84:00:7A:84:68:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWZCPuKkFWMfevMU5NiEAHqEaLY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:a9:9d:76:2c:53:ac:96:8b:22:b2:15:7c:6e:a7:74:be:2c:
         58:b1:4f:ef:47:32:ef:f8:33:e1:b8:a9:ef:0d:0d:bd:4f:ab:
         d8:f4:22:8e:c7:12:59:0d:b9:82:66:4f:36:e1:4d:36:4f:01:
         9c:2f:15:74:e4:1f:33:76:9d:d2:3f:91:2a:02:66:0d:c4:70:
         fb:ce:69:10:c9:dc:2f:d5:0e:59:52:2e:f1:12:e2:47:de:7e:
         d6:57:bc:c0:3b:1e:f7:f0:f1:60:67:d4:35:5c:6e:be:67:c0:
         71:69:31:29:21:02:d5:e7:44:4b:52:a5:2b:2e:62:cb:9e:fa:
         ce:14:ad:90:04:2c:e6:43:4d:3b:c9:17:bb:5a:8e:f6:48:dc:
         d7:a0:ae:8b:e5:8a:ec:d7:8e:49:de:1a:94:49:0b:59:67:7d:
         c0:9c:27:fe:b8:58:1d:bf:6e:8c:60:78:f9:6f:19:e0:09:ac:
         d8:9b:ef:2b:54:46:39:e5:0a:2c:1b:d0:41:8f:ef:78:dc:60:
         57:2a:ab:2c:b7:b4:02:46:73:d0:d6:04:8a:bc:4e:57:fe:86:
         9d:ac:eb:c7:bc:b0:3d:35:52:ad:3d:be:2b:7a:c0:d3:01:2b:
         c6:ce:c3:1f:a7:ce:70:99:ec:f2:92:c4:8a:45:92:01:22:90:
         c0:d4:67:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 00:37:19 2026 by rpki-client