Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft
File:                     WRGN11PwUw7cK4w74mO-2wzOvA4.mft (raw, json)
Hash identifier:          WNHKB17LsaF31C01/84DIuFJBY6dYoOC8tpz5nxbVBA=
Subject key identifier:   79:78:1A:72:09:96:5B:19:4A:DD:34:8C:67:A1:80:FF:66:0F:21:A1
Authority key identifier: 59:11:8D:D7:53:F0:53:0E:DC:2B:8C:3B:E2:63:BE:DB:0C:CE:BC:0E
Certificate issuer:       /CN=A91B12FB/serialNumber=59118DD753F0530EDC2B8C3BE263BEDB0CCEBC0E
Certificate serial:       03F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft
Manifest number:          03DD
Signing time:             Tue 27 Oct 2026 00:22:14 +0000
Manifest this update:     Tue 27 Oct 2026 00:22:14 +0000
Manifest next update:     Tue 03 Nov 2026 00:22:14 +0000
Files and hashes:         1: WRGN11PwUw7cK4w74mO-2wzOvA4.crl (hash: 7rjUNUfdkolZdgBMjrUQM8xS3ga328CjY1dmzNDTjsU=)
                          2: 6967C1F494F711EF905E5F13C4F9AE02.roa (hash: mKFpBz7LnTMIno4TR7tCdYsZBoH90M0+D1suFZ+WgoU=)
                          3: E15780AA32E111EFB163924BC4F9AE02.roa (hash: bzNQiyAKc14b2YsJ0ACA9zxJopod+tvzEv/bYGNnKyM=)
                          4: 8409527078B011EE8D737723C4F9AE02.roa (hash: LVprJ5d8tMhR1z5h1C8mZdP/Z7v1X0R55VbhyFfScwk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.crl
                          rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 00:22:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1013 (0x3f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B12FB, serialNumber=59118DD753F0530EDC2B8C3BE263BEDB0CCEBC0E
        Validity
            Not Before: Oct 27 00:22:14 2026 GMT
            Not After : Nov  3 00:22:14 2026 GMT
        Subject: CN=6adfeeb6-dbc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:40:f1:a5:2d:b0:da:14:b6:7d:06:67:01:18:
                    a0:aa:ab:e2:39:8d:19:71:7b:81:41:85:d5:af:2b:
                    5a:a0:f9:e1:19:87:7a:ca:54:31:e0:6a:4f:56:79:
                    bd:6c:6d:50:2f:96:2c:54:47:00:4e:27:23:4c:74:
                    73:2f:d1:71:84:e2:b5:81:96:f9:39:c1:c6:62:17:
                    4d:fe:7a:c0:f4:fb:09:ab:b0:89:5d:7b:e3:77:f6:
                    db:0e:42:78:17:0d:94:70:c5:b5:5c:f3:55:25:da:
                    01:f7:03:48:13:a6:ca:4d:44:54:8c:7f:fe:5f:61:
                    80:5c:07:07:fe:53:60:b1:dd:89:f7:5e:c5:91:5f:
                    18:df:6a:de:6a:f4:ce:d0:e8:07:4a:89:18:b7:24:
                    e6:c2:24:7c:bd:84:91:0b:dd:c7:37:a1:a0:bc:53:
                    48:aa:f7:10:bd:4c:7f:5d:47:d9:25:36:78:b6:ec:
                    cb:72:d5:32:f5:cb:f1:dc:f8:35:6f:25:f3:08:9d:
                    c5:12:90:36:98:c1:a9:bc:07:94:0c:ac:a1:a4:ae:
                    c0:a8:95:4b:62:c7:70:74:71:12:25:d7:12:ba:13:
                    0b:ef:f0:23:18:65:7f:a6:7b:e3:6b:7a:99:53:e8:
                    7f:40:29:45:cf:ba:c1:36:10:a8:cb:f4:d5:cc:f4:
                    be:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:78:1A:72:09:96:5B:19:4A:DD:34:8C:67:A1:80:FF:66:0F:21:A1
            X509v3 Authority Key Identifier:
                keyid:59:11:8D:D7:53:F0:53:0E:DC:2B:8C:3B:E2:63:BE:DB:0C:CE:BC:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:59:ec:5b:77:c5:86:93:e8:0a:6e:77:0d:35:09:27:49:4a:
         d9:d2:04:49:ed:ad:fe:43:3a:0c:3d:ef:68:46:c5:88:93:2f:
         9f:9b:a4:33:df:48:19:7a:5f:1d:50:b8:7a:cb:4b:fa:99:27:
         a5:2d:e1:82:77:ac:f1:98:16:14:5e:2a:9d:67:d0:ed:64:44:
         37:67:a8:e3:17:cf:e7:26:a3:b7:8c:2d:a8:67:ce:39:a8:f5:
         56:34:26:d1:1f:c9:2e:e4:18:f8:85:19:d0:30:46:6c:c8:d8:
         c3:97:a9:74:6a:c0:0c:d7:10:67:6b:38:0e:4c:44:c6:a6:51:
         1f:19:fa:b4:3d:ed:23:b4:c0:a7:ec:b0:26:02:ce:ed:12:6f:
         b2:bd:82:a1:08:c3:bd:cd:49:01:2a:38:39:c0:32:21:d5:8f:
         20:fb:40:4f:e4:63:0d:d9:ff:73:5a:c2:1b:d3:41:c2:15:b4:
         9a:55:3d:b2:64:d3:ee:be:f1:dc:4d:b4:a9:f1:38:d9:20:ea:
         13:57:1a:33:f1:19:df:c1:d7:91:b2:35:04:10:5b:00:93:75:
         15:2d:db:36:29:cf:b0:bd:33:bf:40:ec:19:d5:66:88:8f:17:
         f6:01:55:2c:35:81:64:41:02:df:67:0b:5c:f8:a3:6f:d6:4e:
         86:22:50:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:22:27 2026 by rpki-client