Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.mft
File:                     wxT-rYcguxji2eIkk4K433VEbYs.mft (raw, json)
Hash identifier:          /NmmqtCrcxlQIfzJ8DWVYFo8b0AWwFWVP4GYrRoK4PY=
Subject key identifier:   5F:65:02:FD:3E:BA:D2:CD:94:02:A0:74:88:0D:71:C8:EE:62:75:CC
Authority key identifier: C3:14:FE:AD:87:20:BB:18:E2:D9:E2:24:93:82:B8:DF:75:44:6D:8B
Certificate issuer:       /CN=A91CFCD3/serialNumber=C314FEAD8720BB18E2D9E2249382B8DF75446D8B
Certificate serial:       064C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxT-rYcguxji2eIkk4K433VEbYs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.mft
Manifest number:          0641
Signing time:             Fri 04 Sep 2026 22:30:03 +0000
Manifest this update:     Fri 04 Sep 2026 22:30:02 +0000
Manifest next update:     Fri 11 Sep 2026 22:30:02 +0000
Files and hashes:         1: wxT-rYcguxji2eIkk4K433VEbYs.crl (hash: HWYEr88GgcjyPfgRIxVZoX59la7ClyaSFvNzHgLPpMA=)
                          2: 5058C6EEA53C11F096F1C284C4F9AE02.roa (hash: 3JM2acvcDIocyJks0EoakV6p4uSNGRyTdD0cztbL25s=)
                          3: 30D58974A53C11F0A057C775C4F9AE02.roa (hash: Yla+AjYYhaBJGPhIpeI0a0ImOXfa/xKKshsCr7MtLNw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.crl
                          rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxT-rYcguxji2eIkk4K433VEbYs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 22:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1612 (0x64c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFCD3, serialNumber=C314FEAD8720BB18E2D9E2249382B8DF75446D8B
        Validity
            Not Before: Sep  4 22:30:02 2026 GMT
            Not After : Sep 11 22:30:02 2026 GMT
        Subject: CN=6a9b466b-f229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1f:d6:3e:fb:9c:96:77:25:5e:73:cc:8e:98:
                    97:14:ca:4f:e1:c7:52:9d:02:d1:c6:bb:7e:9c:2d:
                    5d:88:e2:4e:64:e2:38:a5:7c:3a:68:30:11:bb:8b:
                    6e:93:e9:4e:58:30:e8:9b:2c:0b:59:61:e5:5d:29:
                    56:c7:95:a4:d9:58:26:f5:a8:d1:dc:aa:f6:f5:26:
                    b0:a6:ed:bb:b1:85:5a:34:30:37:b8:bc:83:25:02:
                    58:2a:a4:8b:67:d4:5b:e6:0c:31:f1:6f:35:7a:66:
                    ff:ab:e2:e2:2c:a7:b8:b2:0e:5f:1a:9e:72:7c:11:
                    a3:55:d8:69:67:2b:a9:75:a4:23:e3:a0:50:8a:cd:
                    cb:18:c9:d6:4b:8a:66:f6:b8:b7:2f:6e:3f:1c:33:
                    69:f1:95:12:55:c7:60:29:4e:cb:91:a7:70:2c:bc:
                    41:f5:b7:60:49:b6:7e:14:c2:c5:2b:71:db:ec:af:
                    0c:27:3c:d9:d5:d8:81:c0:cb:57:a0:e1:b3:31:24:
                    a7:0c:94:cf:ba:dc:0b:81:ad:4f:57:1e:9f:94:c2:
                    ec:fd:17:3f:be:f2:14:86:f9:bb:47:2f:2d:a9:c8:
                    31:19:30:01:a2:7d:21:f8:f8:02:0b:f9:cf:e4:54:
                    f3:42:98:14:1a:38:86:3d:29:f8:64:13:9e:49:37:
                    04:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:65:02:FD:3E:BA:D2:CD:94:02:A0:74:88:0D:71:C8:EE:62:75:CC
            X509v3 Authority Key Identifier:
                keyid:C3:14:FE:AD:87:20:BB:18:E2:D9:E2:24:93:82:B8:DF:75:44:6D:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxT-rYcguxji2eIkk4K433VEbYs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:6a:1b:ad:19:c9:4b:81:8f:9f:a9:7a:f9:ed:55:cc:3a:ba:
         d7:cc:05:7e:53:08:d3:fa:2e:1c:b1:56:0a:1c:3d:3c:82:2b:
         2c:fa:25:e5:e8:84:ab:e8:db:54:81:3e:b0:5a:68:a8:1b:a1:
         d8:7e:75:a0:fd:99:20:a6:6d:0f:08:eb:7d:ac:d4:c8:23:85:
         86:09:04:c3:3c:69:b4:6f:44:7b:85:38:28:45:1b:6b:8d:92:
         15:a0:57:76:7a:de:b5:3e:b1:1f:fa:1c:04:b2:b8:25:94:c2:
         d0:31:69:79:8a:aa:84:e5:05:d6:fe:c0:39:6d:70:04:c9:67:
         3b:7f:bf:0c:f9:f8:d9:a4:80:cb:9f:61:7b:c3:7c:bf:30:d6:
         df:0c:f0:db:71:7f:08:27:93:36:ab:05:86:ae:8d:74:05:41:
         01:2c:f3:1b:ba:d1:97:cd:dd:09:23:2f:d1:28:dc:6d:84:65:
         6f:ec:82:f4:9d:c8:e8:cd:31:bc:01:fe:e3:3a:ca:4b:87:01:
         f4:1b:f9:63:dc:7e:0a:d3:f5:d9:cb:3c:05:7c:e4:3b:b0:49:
         4a:0d:41:77:58:c3:75:ee:71:c0:54:b3:52:70:88:3f:31:4e:
         f3:eb:9c:e7:8a:b4:e5:5a:82:7c:f5:f5:42:d8:30:97:60:17:
         c4:1b:3f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 10:04:47 2026 by rpki-client