Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C5911/C35392263E0411F1871F0B19A6833773/wFfoOZ81FgYs0rjsbgjcLEisMTQ.mft
File:                     wFfoOZ81FgYs0rjsbgjcLEisMTQ.mft (raw, json)
Hash identifier:          y2/b1lSr5b/5mPzjBh2FsHKlvLWt4s4EO9LwNJOJMOc=
Subject key identifier:   70:2B:B9:EA:DE:D3:3F:77:A1:AC:59:B7:2E:50:65:60:7A:9C:91:D3
Authority key identifier: C0:57:E8:39:9F:35:16:06:2C:D2:B8:EC:6E:08:DC:2C:48:AC:31:34
Certificate issuer:       /CN=A91C5911/serialNumber=C057E8399F3516062CD2B8EC6E08DC2C48AC3134
Certificate serial:       55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFfoOZ81FgYs0rjsbgjcLEisMTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5911/C35392263E0411F1871F0B19A6833773/wFfoOZ81FgYs0rjsbgjcLEisMTQ.mft
Manifest number:          55
Signing time:             Mon 05 Oct 2026 08:38:16 +0000
Manifest this update:     Mon 05 Oct 2026 08:38:15 +0000
Manifest next update:     Mon 12 Oct 2026 08:38:15 +0000
Files and hashes:         1: wFfoOZ81FgYs0rjsbgjcLEisMTQ.crl (hash: dAmsoct+cIkAYj4szG2SKL33T2McxjgW3l78q5fR9a4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5911/C35392263E0411F1871F0B19A6833773/wFfoOZ81FgYs0rjsbgjcLEisMTQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C5911/C35392263E0411F1871F0B19A6833773/wFfoOZ81FgYs0rjsbgjcLEisMTQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFfoOZ81FgYs0rjsbgjcLEisMTQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 08:38:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5911, serialNumber=C057E8399F3516062CD2B8EC6E08DC2C48AC3134
        Validity
            Not Before: Oct  5 08:38:15 2026 GMT
            Not After : Oct 12 08:38:15 2026 GMT
        Subject: CN=6ac361f8-df45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c7:ca:f1:67:d5:f8:3b:e0:c4:5f:ad:6b:17:
                    8c:1b:43:3c:3a:bd:7d:4e:65:ca:41:b3:8e:32:e2:
                    53:0e:f7:30:b0:a8:69:27:cd:8b:29:c9:27:b0:f7:
                    7f:b4:9e:7c:b7:f2:4f:9d:67:9f:e5:76:e2:82:9a:
                    cb:cd:20:84:d5:64:32:8c:98:36:8a:81:e5:b4:cc:
                    aa:7e:37:0b:6f:5e:64:f7:16:f7:0b:dc:2e:0f:62:
                    24:5a:b1:a7:4d:fd:0f:ff:d0:e5:28:dc:4a:dc:72:
                    51:c4:55:72:12:4e:d9:5e:72:df:7e:fc:56:c5:3d:
                    7d:8a:a8:9b:27:52:df:64:0e:da:3a:db:7f:33:30:
                    97:03:27:e1:1c:a8:eb:a6:02:3a:38:14:02:18:d8:
                    27:73:45:27:af:29:95:5d:96:32:1e:d8:65:96:7c:
                    a0:78:6b:17:a8:9b:d1:a2:26:85:4b:ca:0b:04:56:
                    f0:72:d7:3e:93:3f:21:38:4f:ce:49:1e:98:b8:82:
                    c8:d8:02:96:3b:c3:c0:19:44:d1:3c:6b:e9:df:59:
                    e6:85:5e:63:e5:31:14:b4:5a:22:4b:32:3c:55:5c:
                    e1:6b:70:eb:11:8d:29:3e:bb:bc:75:d9:1b:e3:0f:
                    90:64:10:83:ad:d2:a6:bb:ba:2a:62:68:b5:56:fc:
                    83:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:2B:B9:EA:DE:D3:3F:77:A1:AC:59:B7:2E:50:65:60:7A:9C:91:D3
            X509v3 Authority Key Identifier:
                keyid:C0:57:E8:39:9F:35:16:06:2C:D2:B8:EC:6E:08:DC:2C:48:AC:31:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5911/C35392263E0411F1871F0B19A6833773/wFfoOZ81FgYs0rjsbgjcLEisMTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFfoOZ81FgYs0rjsbgjcLEisMTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5911/C35392263E0411F1871F0B19A6833773/wFfoOZ81FgYs0rjsbgjcLEisMTQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:f1:73:e6:7c:24:5f:35:9a:17:d2:22:4a:ce:36:47:3e:d7:
         26:04:40:04:10:5a:a5:67:73:3a:2e:13:8f:27:51:2c:99:d5:
         64:0d:f7:3e:d2:ed:c2:d1:32:40:78:19:76:99:94:b7:38:fe:
         25:3a:79:7f:da:ff:50:bd:74:42:b7:24:45:e7:23:8a:74:79:
         4c:fc:22:7e:56:07:c0:51:ee:39:00:34:3f:b9:b9:69:f8:12:
         34:13:f1:9e:54:44:ed:07:64:37:d7:fb:45:2f:f9:58:1d:31:
         57:8e:fb:75:76:f5:26:43:61:50:89:03:c5:f0:d1:2e:5e:48:
         bf:86:27:6c:ba:b9:a6:ff:a2:71:27:17:70:14:85:c7:b6:96:
         85:77:0c:bf:c2:b6:a2:76:e6:53:7b:6b:5d:58:c8:c2:02:90:
         46:4a:ef:8f:8d:db:47:ab:de:e8:ea:a1:f9:c6:ec:e6:4f:cf:
         74:cc:7a:03:18:c3:d1:34:f4:d9:bc:9f:bd:4a:3a:9a:a8:82:
         d3:fc:ac:f6:d0:d2:15:ab:da:4b:07:32:da:b7:11:92:13:59:
         ca:c6:dc:d9:c8:dc:3f:6e:ad:a8:90:aa:44:b1:68:be:39:93:
         4b:5a:4a:67:3b:3a:4f:ec:54:d6:fc:5e:28:6a:e9:2a:c0:74:
         2e:54:e1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 04:03:30 2026 by rpki-client