Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft
File:                     wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft (raw, json)
Hash identifier:          jJqtOTjuvzLUEWRq7vUktzMVDRWLj8tic8qZSWSR6cw=
Subject key identifier:   00:ED:CB:9B:AB:DC:48:7C:BC:70:F0:B7:10:25:94:AF:9F:9A:C7:4C
Authority key identifier: C1:3A:8A:BD:57:04:3A:AF:A5:8F:58:53:BE:2F:AB:CA:9F:26:F0:ED
Certificate issuer:       /CN=A91AA618/serialNumber=C13A8ABD57043AAFA58F5853BE2FABCA9F26F0ED
Certificate serial:       015E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wTqKvVcEOq-lj1hTvi-ryp8m8O0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft
Manifest number:          0152
Signing time:             Mon 21 Sep 2026 04:13:14 +0000
Manifest this update:     Mon 21 Sep 2026 04:13:13 +0000
Manifest next update:     Mon 28 Sep 2026 04:13:13 +0000
Files and hashes:         1: wTqKvVcEOq-lj1hTvi-ryp8m8O0.crl (hash: tv8Sh5js1uWegKt1uNMbHyQLOR8Fm+Wq0Nc07JG+pXs=)
                          2: 1C236FDEE51411EFA6CE3C1EC4F9AE02.roa (hash: dz5htNtz6B/YK8WvexH2V0gl/URlN+hf24kH7PZk6Yw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.crl
                          rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wTqKvVcEOq-lj1hTvi-ryp8m8O0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 04:13:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 350 (0x15e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AA618, serialNumber=C13A8ABD57043AAFA58F5853BE2FABCA9F26F0ED
        Validity
            Not Before: Sep 21 04:13:13 2026 GMT
            Not After : Sep 28 04:13:13 2026 GMT
        Subject: CN=6ab0aed9-89ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:21:a5:59:07:8b:a6:bd:f0:1a:9d:6e:f7:3e:
                    a8:9a:86:cd:ec:05:1a:53:2f:f6:ce:e4:97:52:c2:
                    17:79:03:a6:4a:5d:48:20:a7:b8:5a:24:53:a3:34:
                    b2:39:30:97:67:e7:cc:5f:a7:e7:23:b1:9a:7b:64:
                    fd:9d:39:fe:45:db:b1:48:3a:7f:55:25:18:1c:fd:
                    2a:1c:af:f2:fb:2c:df:13:ec:4c:d1:92:e8:f1:d7:
                    88:1d:c0:18:39:2a:4f:16:ac:83:d6:9f:af:d3:f4:
                    6c:eb:25:ee:3b:32:f0:1f:a8:48:e1:08:1c:6e:4a:
                    01:49:b4:27:5c:23:3b:fc:c8:cc:0c:99:83:6e:f8:
                    19:2a:8e:de:22:f5:a8:1f:2a:5a:2f:e8:e6:70:db:
                    0f:0b:ac:16:58:2c:29:2d:93:81:9f:dd:f4:fa:62:
                    aa:76:7d:99:28:1d:df:a0:52:59:27:2e:b4:af:51:
                    97:da:8a:b7:79:ab:bc:81:e6:05:e3:5d:f5:41:58:
                    bc:0f:50:85:40:45:8e:57:24:ed:1e:74:87:82:0c:
                    47:25:52:69:eb:66:10:c9:b2:a6:cc:6d:b8:6e:66:
                    a2:76:d1:f9:b3:87:ec:c3:56:7a:3c:d6:30:16:33:
                    57:09:02:34:fc:02:a8:89:43:38:97:90:ee:4a:b9:
                    34:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:ED:CB:9B:AB:DC:48:7C:BC:70:F0:B7:10:25:94:AF:9F:9A:C7:4C
            X509v3 Authority Key Identifier:
                keyid:C1:3A:8A:BD:57:04:3A:AF:A5:8F:58:53:BE:2F:AB:CA:9F:26:F0:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wTqKvVcEOq-lj1hTvi-ryp8m8O0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:de:38:d9:62:2e:81:64:1b:50:cf:9b:66:72:dd:f1:15:32:
         ef:cb:a1:ad:35:0b:c8:6e:1f:0d:92:33:05:81:99:e0:50:95:
         fc:9e:49:a2:25:8d:7b:75:97:c8:83:68:f3:25:06:47:d4:c0:
         01:6f:f9:b2:da:28:d8:3a:0f:8c:c7:25:70:fe:70:e5:a7:e9:
         cb:a0:e5:de:68:a6:ad:62:99:40:dd:74:d6:0c:30:75:25:9f:
         8e:03:93:2c:76:2a:55:36:66:ad:1e:77:ce:18:72:40:82:32:
         a8:ed:f2:fc:cb:a0:cf:7e:f4:2f:66:df:d2:38:0c:bb:e4:48:
         2d:d0:c5:7e:4c:a5:31:5f:bf:46:ab:3f:57:e3:38:f5:ba:6d:
         1c:8a:a3:d1:12:a1:c6:12:ca:b0:ed:70:78:81:e2:3c:34:6c:
         6b:a4:ec:0a:42:aa:1d:bf:ef:bf:b5:8c:ee:26:f9:d9:56:ff:
         67:56:e5:4d:01:1d:53:bc:30:2b:ae:de:14:8e:c3:2d:95:10:
         bc:97:5b:52:86:09:bf:dd:a1:af:2d:9d:87:80:5c:96:da:3c:
         63:ea:1a:6a:69:bb:8a:0b:35:c8:f6:f4:80:96:be:dd:42:4d:
         7e:12:60:94:5b:57:25:d4:13:5f:bb:4a:27:b3:22:09:e4:06:
         9a:60:6c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:55:51 2026 by rpki-client