Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft
File:                     WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft (raw, json)
Hash identifier:          euzqWpw4xk84NDwaH/NU5j4SuEuA41rZz4vO4flsd2s=
Subject key identifier:   51:43:A3:81:2A:EB:EF:42:9F:BF:AC:B1:24:17:7E:3F:87:4C:60:47
Authority key identifier: 59:CA:0E:D6:B9:6B:70:C2:9B:3D:D8:E4:EC:59:8E:A1:2E:0D:C2:E6
Certificate issuer:       /CN=A91C7AB9/serialNumber=59CA0ED6B96B70C29B3DD8E4EC598EA12E0DC2E6
Certificate serial:       021B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WcoO1rlrcMKbPdjk7FmOoS4NwuY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft
Manifest number:          020D
Signing time:             Wed 09 Sep 2026 03:27:15 +0000
Manifest this update:     Wed 09 Sep 2026 03:27:15 +0000
Manifest next update:     Wed 16 Sep 2026 03:27:15 +0000
Files and hashes:         1: WcoO1rlrcMKbPdjk7FmOoS4NwuY.crl (hash: xMX07AZ/3LkUEwLZ2qqSrPNndPr6pyt25az/u9ABM2M=)
                          2: 5CB841E69B1411EEA456FE83C4F9AE02.roa (hash: vuhGbAXmdFyZHU5zcn6qI6D4hSXtuQyTQbfw33B7PYM=)
                          3: 7CF0A45404DF11F0B877A115C4F9AE02.roa (hash: 3zvmMVyOd3Cbubn7cAeWSSyiDSHBJieehrUFUeq/rLk=)
                          4: 321296E212E711F1ABE68E4F0D3D8C67.roa (hash: fLV89AyiqIKtRsF5UkgoIwTy20rGQz1nx0VUvYpw5g0=)
                          5: EAAE802834B911F1B8589B72BC833773.roa (hash: hYHnbi70DEeeHLUAwomrQxmvt6OsQN+4vZ8kSWKcIq4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.crl
                          rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WcoO1rlrcMKbPdjk7FmOoS4NwuY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Sep 2026 03:27:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 539 (0x21b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7AB9, serialNumber=59CA0ED6B96B70C29B3DD8E4EC598EA12E0DC2E6
        Validity
            Not Before: Sep  9 03:27:15 2026 GMT
            Not After : Sep 16 03:27:15 2026 GMT
        Subject: CN=6aa0d213-dcd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e6:9e:f6:e1:90:59:36:a6:8d:3f:04:d9:48:
                    e2:cf:0e:eb:f8:2e:b2:bb:d0:fb:a2:7c:cf:d0:8d:
                    1f:d4:9e:3a:3d:65:0d:fd:9e:1a:d3:23:0c:7f:cc:
                    59:a8:1d:40:14:a4:6a:83:18:14:e4:df:17:04:0a:
                    40:f4:e7:a4:ac:af:54:67:56:1f:83:d1:67:06:94:
                    14:21:e4:04:ce:5c:12:e8:c3:f7:87:62:14:72:dc:
                    c7:a3:20:23:a4:39:37:e0:83:aa:90:55:af:be:a2:
                    c3:a8:b6:f7:44:cf:dc:39:8b:84:6b:d9:07:06:cb:
                    06:44:3a:f5:0a:9b:d8:56:74:42:43:20:5c:b8:bf:
                    60:82:e6:33:9a:4e:4a:ff:97:bf:d8:54:c9:aa:f8:
                    e1:ee:49:65:e6:33:3f:0c:26:55:8c:1b:a3:b4:b1:
                    d5:58:55:97:e5:27:7a:bd:25:b9:3a:26:9a:42:b9:
                    0d:6f:b8:ae:77:97:ed:cc:e6:a7:16:45:59:14:d9:
                    52:ab:ff:11:6a:04:62:c8:ba:63:91:fa:1c:3d:1e:
                    e2:a8:7a:6d:fa:f1:6f:20:2c:8a:7b:0b:bb:3a:6e:
                    b3:46:62:7e:77:57:77:2f:82:0f:6a:bf:c7:58:4d:
                    58:6a:a9:e8:ac:bf:62:15:14:7c:1b:76:27:4e:c9:
                    df:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:43:A3:81:2A:EB:EF:42:9F:BF:AC:B1:24:17:7E:3F:87:4C:60:47
            X509v3 Authority Key Identifier:
                keyid:59:CA:0E:D6:B9:6B:70:C2:9B:3D:D8:E4:EC:59:8E:A1:2E:0D:C2:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WcoO1rlrcMKbPdjk7FmOoS4NwuY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:7f:9e:c9:f9:46:66:ea:c7:0e:9f:e1:c5:0b:15:a0:8f:96:
         91:f8:a8:4b:1b:6d:a3:2f:96:51:3b:9b:21:ad:f9:60:4a:99:
         89:e3:bf:71:d1:ab:9a:cc:b7:13:7d:5f:fd:46:85:5e:22:e7:
         4d:43:b5:6d:a6:6d:b3:f7:15:f0:d8:01:b6:e4:74:b1:b6:cb:
         e5:54:af:56:88:19:5c:c1:d2:98:9b:67:ab:a6:0b:53:bd:08:
         b9:9b:b5:a2:77:ad:46:35:d4:e1:31:5c:a5:dc:73:91:f9:ba:
         b9:a2:b7:9c:7a:b2:6f:50:b1:ce:91:4b:c9:9a:8e:43:49:93:
         d6:e9:5f:da:41:61:6e:8d:55:e0:0a:2c:b7:c9:51:7b:41:a8:
         38:e5:d9:df:0b:ba:75:77:38:32:32:5f:7e:47:45:a0:63:28:
         cf:fc:19:c0:17:3b:7c:c1:a2:78:8a:03:21:ad:69:6e:ff:ff:
         77:63:e3:81:b4:69:87:f3:e4:bf:b6:3c:1a:c1:4f:29:c9:9e:
         a3:92:8f:9f:cf:6e:7b:72:fa:39:d1:7f:45:6b:4a:0b:97:8e:
         c6:aa:c2:25:c7:7d:10:32:c2:17:09:4a:f1:9f:54:3b:4d:12:
         cf:5d:a9:92:ca:e9:0d:36:ce:bf:cd:3c:6a:a1:ce:82:a6:b1:
         7d:25:12:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 04:33:41 2026 by rpki-client