Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.mft
File:                     wuC1g9pA223YMwUcBSRZnhpZAsY.mft (raw, json)
Hash identifier:          w9nHuuWe7psSrRcb/HApW5OdS9i/1gzc1RxYAYVEgHE=
Subject key identifier:   3F:00:D4:6D:D1:9B:2E:77:35:1D:98:0A:B3:71:42:C9:7E:62:CE:AF
Authority key identifier: C2:E0:B5:83:DA:40:DB:6D:D8:33:05:1C:05:24:59:9E:1A:59:02:C6
Certificate issuer:       /CN=A91CCDD3/serialNumber=C2E0B583DA40DB6DD833051C0524599E1A5902C6
Certificate serial:       0954
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuC1g9pA223YMwUcBSRZnhpZAsY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.mft
Manifest number:          0939
Signing time:             Wed 26 Aug 2026 20:09:32 +0000
Manifest this update:     Wed 26 Aug 2026 20:09:32 +0000
Manifest next update:     Wed 02 Sep 2026 20:09:32 +0000
Files and hashes:         1: wuC1g9pA223YMwUcBSRZnhpZAsY.crl (hash: rmdwdrOz8186yrpu4YYA8wAJz9Cv4sFoGRxEy4d8RUs=)
                          2: 68EAE318D09411EA9D19403FC4F9AE02.roa (hash: 4XnvS/mVt4krZEvK8Mt6aIcYDu95KaNvH0tNHh8rej4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.crl
                          rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuC1g9pA223YMwUcBSRZnhpZAsY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Sep 2026 20:09:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2388 (0x954)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCDD3, serialNumber=C2E0B583DA40DB6DD833051C0524599E1A5902C6
        Validity
            Not Before: Aug 26 20:09:32 2026 GMT
            Not After : Sep  2 20:09:32 2026 GMT
        Subject: CN=6a8f47fc-4f1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:af:d3:52:14:1e:2f:ed:22:71:f9:ee:de:9a:
                    04:ca:b4:e2:34:7c:04:b7:9b:94:7a:ab:1f:ac:99:
                    45:05:1c:03:49:62:f1:33:a4:c8:3c:5e:75:c9:68:
                    0d:3a:c1:bb:5d:dc:17:02:c8:fd:27:1e:c9:f9:a9:
                    76:e3:3a:88:29:65:9e:15:71:2a:7c:bf:32:19:5f:
                    07:75:1e:09:fe:3f:45:bd:43:9e:78:e1:dd:11:ec:
                    89:37:c7:6b:68:27:77:7a:32:4f:79:11:84:56:a7:
                    83:38:f4:7e:78:9f:ef:83:f6:4d:c5:73:5d:29:f6:
                    94:c5:a7:30:ba:f2:3e:60:7e:d8:fe:c1:02:3b:3a:
                    ab:de:03:31:45:23:f0:de:b0:0d:99:5c:82:d0:6e:
                    b0:38:4f:74:c1:1e:43:5f:85:7d:20:8c:1d:bc:92:
                    de:ab:a4:6a:cf:7b:8a:5a:0c:fa:b8:20:3a:1e:ba:
                    e1:b5:9d:b7:8e:4b:93:36:fc:03:4d:66:5e:5c:08:
                    e2:98:2e:8b:5f:53:c7:00:4f:de:b8:20:94:8d:24:
                    ed:f6:e0:a4:3f:ef:2a:80:95:0c:01:74:b0:d8:d0:
                    b9:08:7e:fc:5f:08:c6:e6:e2:3e:5e:fb:9e:e6:96:
                    dd:6b:07:90:64:79:78:79:6d:3e:28:17:c2:4e:4e:
                    5b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:00:D4:6D:D1:9B:2E:77:35:1D:98:0A:B3:71:42:C9:7E:62:CE:AF
            X509v3 Authority Key Identifier:
                keyid:C2:E0:B5:83:DA:40:DB:6D:D8:33:05:1C:05:24:59:9E:1A:59:02:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuC1g9pA223YMwUcBSRZnhpZAsY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:7c:bb:96:ea:8b:de:53:df:d9:18:0d:c1:5b:35:a0:cc:3f:
         42:62:16:1c:9c:39:65:0e:9d:6e:4c:b5:bf:18:b6:7b:62:6d:
         ed:b9:7e:7d:1a:08:8e:23:c9:4d:dd:e1:14:55:cf:e9:b2:e8:
         bc:01:4e:06:34:db:9e:c3:46:34:ef:a8:ef:b6:78:ef:f2:81:
         54:ca:23:9b:5f:f5:d5:5b:0c:5b:bb:b2:5b:50:0f:74:f6:90:
         7f:3c:a9:ec:ed:72:0f:f0:53:f1:bc:82:3d:0c:df:08:83:d4:
         23:e4:75:7a:86:f7:a0:1e:4d:96:d0:72:e7:1d:53:bd:c4:a7:
         86:a0:8b:89:74:24:5d:e4:c6:a9:27:74:4a:36:52:ef:45:de:
         35:2a:5c:b9:e9:0e:2d:5d:b4:f9:05:6d:da:89:85:ef:95:d4:
         28:43:9f:8c:e8:69:17:a2:c0:b4:13:8e:8b:fd:9a:e2:aa:b6:
         da:43:47:ab:34:47:62:17:f5:dd:64:a0:c6:91:82:fa:13:be:
         b7:d4:cf:c8:c7:57:b9:c5:62:19:92:ad:7e:86:7c:b7:1c:23:
         38:90:af:6c:2e:77:e4:64:fa:b9:35:18:c2:71:1c:a3:b8:0a:
         87:76:dd:fd:54:29:49:52:50:04:fd:e4:f2:3e:0a:03:65:1d:
         bd:7d:34:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 00:09:46 2026 by rpki-client