Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft
File:                     Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft (raw, json)
Hash identifier:          +GraRbEcJ3qoPP7sjSDm+bpuIwXomsCMaWvc6dDpP54=
Subject key identifier:   F8:7A:44:E1:C4:8F:30:5D:4A:5F:AC:A9:96:EB:66:83:1E:33:BE:16
Authority key identifier: 5A:18:3B:1E:0F:FC:A6:DA:DD:79:6F:6B:B4:AA:AF:93:69:2F:0D:C9
Certificate issuer:       /CN=A91D90B9/serialNumber=5A183B1E0FFCA6DADD796F6BB4AAAF93692F0DC9
Certificate serial:       0496
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft
Manifest number:          047B
Signing time:             Sat 31 Oct 2026 00:08:17 +0000
Manifest this update:     Sat 31 Oct 2026 00:08:17 +0000
Manifest next update:     Sat 07 Nov 2026 00:08:17 +0000
Files and hashes:         1: Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl (hash: cbmUKUIzR5/j8ti6uPSrB31kUg6noKjTJPoF7p1s+m0=)
                          2: 2A25BB5ED0DE11EFBCC7F76DC4F9AE02.roa (hash: ySJe+I3dozNuenRqVNkRZyIcXxzpogjD9zxaSvpwIMo=)
                          3: C02374609D0E11EF866C8F16C4F9AE02.roa (hash: 9iACXyqJyXbzjckCXFceS2N5xwZfybCxOngbROUjtGI=)
                          4: CC5A0854D0DD11EFB1C6656DC4F9AE02.roa (hash: 9MUJ5ahbTn/0nfX/uwJrKv31jpeuSAMP0+bUKlRgGCg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl
                          rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Nov 2026 00:08:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1174 (0x496)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D90B9, serialNumber=5A183B1E0FFCA6DADD796F6BB4AAAF93692F0DC9
        Validity
            Not Before: Oct 31 00:08:17 2026 GMT
            Not After : Nov  7 00:08:17 2026 GMT
        Subject: CN=6ae53171-3483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:37:f8:14:4a:f3:18:51:8e:2f:97:fb:9d:21:
                    34:41:67:eb:e6:0f:26:dd:80:c4:bf:dc:49:7b:0c:
                    e8:e2:e2:9c:78:cc:ba:b4:42:b4:a9:fb:e3:7c:ea:
                    ab:05:e8:01:09:b9:1f:43:e1:73:93:f6:80:3c:9f:
                    a1:87:b9:fc:3a:60:3e:ed:f7:dc:8e:34:a0:25:a0:
                    0a:5f:ce:f5:15:90:56:db:a3:cd:e0:26:41:ef:5d:
                    80:60:01:3a:52:42:fb:16:2f:ac:56:f8:0b:24:f9:
                    6b:5b:55:ac:53:3e:f7:b6:e8:72:3d:14:7b:69:4a:
                    04:ed:39:d9:46:7e:0d:44:5f:1d:b9:f7:cd:31:8b:
                    16:c2:11:78:8e:b4:76:e2:92:63:54:c5:79:69:cb:
                    8e:0f:d9:af:4b:59:3e:99:d4:f0:3b:62:1a:47:6f:
                    8b:f2:97:14:bb:eb:72:96:bb:e4:7f:36:c4:c5:52:
                    75:5e:30:74:a0:24:f9:8c:50:b3:c1:97:d8:aa:40:
                    c8:63:fc:d0:fd:0d:71:41:2f:17:64:ca:4e:ad:3c:
                    15:31:38:88:18:5d:f4:67:2f:0a:bb:48:cb:57:21:
                    5f:f3:dc:b9:34:1a:63:48:15:b4:6c:cf:af:1d:d3:
                    a5:7c:cd:26:46:64:26:ff:7f:e8:c3:33:5e:7a:ac:
                    ca:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:7A:44:E1:C4:8F:30:5D:4A:5F:AC:A9:96:EB:66:83:1E:33:BE:16
            X509v3 Authority Key Identifier:
                keyid:5A:18:3B:1E:0F:FC:A6:DA:DD:79:6F:6B:B4:AA:AF:93:69:2F:0D:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:f6:68:3e:27:97:27:78:5e:6b:8c:f3:13:47:99:1c:ae:01:
         7f:c6:3e:c0:0d:a3:39:6c:d3:cd:08:e2:b2:39:3c:32:9e:39:
         28:71:ca:f4:1c:e6:3b:ac:11:1a:c5:3c:dd:e5:42:ac:51:b8:
         ce:df:2c:e2:cc:81:e1:dd:30:79:f0:da:ee:d0:59:29:c7:ce:
         dd:02:b7:c2:23:4e:9f:64:bb:3d:12:3d:c9:70:ea:84:a5:9d:
         d5:32:5a:88:8a:75:a0:80:e4:11:47:57:a7:0a:c0:ba:8a:e4:
         39:b7:d5:9d:60:21:65:35:56:91:26:9f:1e:63:bc:5d:c6:3e:
         f5:fe:25:af:ef:e4:9a:b1:ef:b5:22:dd:3a:86:c4:70:37:1a:
         ad:0e:4c:6b:29:b2:1c:39:76:24:62:04:df:b8:c4:23:17:4e:
         ad:b5:f1:a2:cc:7f:37:e7:10:67:30:44:0d:11:6e:77:95:e2:
         ff:88:6c:4e:b5:d8:49:32:cc:d2:bc:04:ae:42:b9:3b:b0:47:
         4c:3d:6b:fe:12:60:4c:b9:5a:60:55:a2:c3:f8:36:f7:e3:4b:
         37:06:5c:a0:da:55:62:02:cc:fc:6b:83:f3:69:7b:d8:4c:a7:
         6e:a9:5d:54:1a:c7:f1:d0:f3:c6:bb:ef:5a:5b:44:0e:e7:60:
         a4:26:54:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:49:18 2026 by rpki-client