Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft
File:                     woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft (raw, json)
Hash identifier:          5bm2sByl2he+FUKYtMvQUIgo9Qp4r9boob59wtu5iL4=
Subject key identifier:   83:9F:A1:E7:4A:2D:12:DF:ED:C1:2E:80:87:EF:21:BE:35:1D:CE:9A
Authority key identifier: C2:84:BA:8A:88:A0:21:16:BE:E4:34:10:E0:39:E9:09:E3:02:9D:0D
Certificate issuer:       /CN=A91C7B68/serialNumber=C284BA8A88A02116BEE43410E039E909E3029D0D
Certificate serial:       0A13
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woS6ioigIRa-5DQQ4DnpCeMCnQ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft
Manifest number:          0CAC
Signing time:             Fri 02 Oct 2026 20:07:54 +0000
Manifest this update:     Fri 02 Oct 2026 20:07:53 +0000
Manifest next update:     Fri 09 Oct 2026 20:07:53 +0000
Files and hashes:         1: woS6ioigIRa-5DQQ4DnpCeMCnQ0.crl (hash: Z8ptZE6gHCjznBFWdCaNS/8zddAqF5nEbmqTTPx6SDk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.crl
                          rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woS6ioigIRa-5DQQ4DnpCeMCnQ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 20:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2579 (0xa13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7B68, serialNumber=C284BA8A88A02116BEE43410E039E909E3029D0D
        Validity
            Not Before: Oct  2 20:07:53 2026 GMT
            Not After : Oct  9 20:07:53 2026 GMT
        Subject: CN=6ac00f19-9596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:95:5f:3e:1d:5a:aa:9e:3f:45:9c:fe:9c:5c:
                    3a:8f:55:41:6f:71:31:52:7f:e8:2a:f6:f0:14:23:
                    51:07:5d:7b:7c:99:8a:bf:67:6e:3a:15:5b:a5:e3:
                    2c:37:7b:1e:d4:02:c9:c6:3e:50:61:80:7a:a3:b0:
                    37:b4:80:94:73:28:80:ac:3d:be:ed:d0:74:d5:df:
                    b9:9d:fe:c4:7c:68:ae:e3:2d:01:a5:e2:99:bf:ed:
                    64:0c:15:92:f0:93:86:63:36:3e:e2:01:45:22:f0:
                    9c:98:73:61:6b:f1:fd:8e:7a:ed:4e:cb:72:06:4f:
                    92:7d:a1:77:71:2f:bd:29:6b:e1:fb:40:8a:92:f2:
                    3d:ba:f7:89:22:18:c1:09:2d:73:18:4c:0a:a9:3a:
                    5a:d1:22:03:84:3a:44:9e:5d:a6:7a:db:68:12:d9:
                    22:cb:28:97:f0:cb:1e:76:90:ee:59:48:e3:69:41:
                    28:9a:4f:73:e9:25:7e:e3:39:b0:d5:0e:7d:9c:3a:
                    80:69:27:e3:e2:a5:53:e8:25:3f:25:41:0e:f5:f0:
                    e3:47:7a:ca:3b:b6:7a:07:1b:4f:9d:36:ed:d8:2c:
                    8e:01:8d:a5:a8:e5:2f:15:c2:f6:e3:df:6b:98:8c:
                    ee:20:7a:e8:72:4f:9a:ee:a1:ab:58:5e:00:5c:60:
                    9b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:9F:A1:E7:4A:2D:12:DF:ED:C1:2E:80:87:EF:21:BE:35:1D:CE:9A
            X509v3 Authority Key Identifier:
                keyid:C2:84:BA:8A:88:A0:21:16:BE:E4:34:10:E0:39:E9:09:E3:02:9D:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woS6ioigIRa-5DQQ4DnpCeMCnQ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:55:ce:39:e1:76:df:96:b9:6e:cd:4e:30:b8:08:09:e0:8e:
         ce:56:5b:29:9c:8f:f1:f5:ad:bd:c8:3b:84:d6:4f:e7:b2:27:
         8a:d0:4e:ea:39:d4:f1:70:62:8c:d9:d9:0b:34:9c:ec:fe:f8:
         4b:88:9e:f0:93:bc:3a:79:0e:47:de:7b:61:37:58:a5:6f:1e:
         ac:86:05:0d:94:15:8f:8b:18:24:09:1c:5a:88:0b:48:e0:85:
         a0:a5:a9:7f:72:d3:2b:03:7b:32:aa:7a:23:6d:8a:77:00:11:
         13:b4:12:6e:b5:04:b4:a1:83:37:17:d7:6a:f4:da:c0:41:84:
         fe:ed:2c:43:86:7f:e4:cf:f7:4f:ba:ee:8e:7c:2e:9e:cf:c3:
         aa:33:5f:8d:6e:34:cc:f7:0a:03:52:b9:8b:5c:82:5f:fb:8d:
         56:22:20:f6:20:31:7f:79:00:ec:cc:9e:f2:51:7b:81:e6:4f:
         74:d9:5f:49:42:0c:9e:4b:c1:80:b9:07:e7:82:ca:6d:a7:34:
         76:90:a2:80:3f:a8:c9:85:c2:8d:60:41:56:cf:2b:aa:79:ba:
         1a:63:c9:ce:48:0b:a1:81:9a:25:bd:a2:84:f8:87:24:55:43:
         0d:1e:b1:4c:8b:0b:e1:85:f4:4e:60:e9:60:d0:28:c3:d6:ea:
         19:88:36:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:57:34 2026 by rpki-client