Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft
File:                     WKDd0CVVyDdIbVVDUYbcxXahKD4.mft (raw, json)
Hash identifier:          Mbm1otE4LujInQRNDRBf7ak2KoKzLC4mAJxurZLitRQ=
Subject key identifier:   37:2F:5B:21:79:E9:D5:04:F0:D9:E7:C8:93:1A:93:99:ED:13:F5:60
Authority key identifier: 58:A0:DD:D0:25:55:C8:37:48:6D:55:43:51:86:DC:C5:76:A1:28:3E
Certificate issuer:       /CN=A91E4C30/serialNumber=58A0DDD02555C837486D55435186DCC576A1283E
Certificate serial:       02CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft
Manifest number:          02B6
Signing time:             Fri 11 Sep 2026 01:33:37 +0000
Manifest this update:     Fri 11 Sep 2026 01:33:37 +0000
Manifest next update:     Fri 18 Sep 2026 01:33:37 +0000
Files and hashes:         1: WKDd0CVVyDdIbVVDUYbcxXahKD4.crl (hash: XXQXE3NcuqZxrJISywXI+7chNHnfA0/xHyL6e8oXDE8=)
                          2: 58A53DF483EB11F083FC5148C4F9AE02.roa (hash: 0AcNJYbPABCo7geahEBKTRdq6wGpuolAL2JTEM7M9Jk=)
                          3: 8C48B22C47E711EE91530D28C4F9AE02.roa (hash: lA0GUtoywdP3W0s4fPvZbdcVPY5+3iGjlHV5SalUa/g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.crl
                          rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 01:33:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 715 (0x2cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4C30, serialNumber=58A0DDD02555C837486D55435186DCC576A1283E
        Validity
            Not Before: Sep 11 01:33:37 2026 GMT
            Not After : Sep 18 01:33:37 2026 GMT
        Subject: CN=6aa35a71-1d52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:61:b9:f9:d0:60:d5:cb:3e:4a:81:e6:1a:3a:
                    dd:27:27:31:99:bc:53:67:39:55:a7:50:29:da:14:
                    bd:42:17:30:8b:61:89:97:4b:25:6e:4d:b0:d0:ac:
                    41:09:1d:42:04:1c:27:86:2b:a4:ba:46:1f:18:57:
                    ae:aa:87:dd:dd:50:6b:0f:3d:6a:b7:85:76:c6:3a:
                    12:0d:31:fe:98:4b:d6:be:e4:e1:03:f1:d4:91:04:
                    f3:42:1e:91:7e:34:0e:9d:a8:d7:5a:4a:41:b6:11:
                    8a:5f:28:d1:1f:63:1a:3d:9c:f9:3b:70:06:1a:37:
                    43:3d:d2:a1:3a:fe:50:69:e3:56:f6:67:9b:51:e4:
                    11:34:bc:81:42:6c:d3:9e:77:2c:ec:cd:2e:ae:71:
                    59:74:9c:e6:04:35:e0:11:e0:f7:9e:6f:ed:fd:1d:
                    be:12:c8:98:63:b5:5f:f9:3b:a0:55:f0:0e:ad:3d:
                    50:cb:08:ab:74:7c:e0:79:24:15:85:e7:8e:39:28:
                    e5:80:be:ce:69:75:d7:65:cc:7b:b6:e6:bb:f5:c6:
                    8d:d2:06:8c:d0:68:2d:d6:ce:5f:f7:f0:cc:c2:10:
                    56:65:00:96:6c:74:b5:84:96:d4:f9:ad:f6:8f:e2:
                    26:3d:01:9f:a4:0b:36:c9:8e:56:91:d5:03:b4:e3:
                    d7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:2F:5B:21:79:E9:D5:04:F0:D9:E7:C8:93:1A:93:99:ED:13:F5:60
            X509v3 Authority Key Identifier:
                keyid:58:A0:DD:D0:25:55:C8:37:48:6D:55:43:51:86:DC:C5:76:A1:28:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:72:84:98:ef:1d:0e:c0:00:f3:41:b1:44:76:0d:e0:79:95:
         e2:20:ea:9b:1b:38:dd:2b:24:99:61:88:03:e6:ea:44:61:19:
         a7:a8:92:85:38:eb:d7:29:34:84:3d:22:0c:06:ba:e0:12:07:
         ad:ac:93:d1:2c:20:2e:b1:e8:bb:1f:82:9b:69:fd:6d:dd:71:
         26:7a:cf:4e:bb:ff:88:a3:80:fa:69:3b:08:04:1e:e4:8d:be:
         1c:39:4f:c8:17:8f:ad:32:73:58:a8:9e:df:2d:cf:d0:cf:40:
         ab:9c:1f:71:a6:a5:b2:5f:9e:9f:0c:65:17:b7:c5:f5:a6:95:
         a8:9d:7e:af:cb:53:91:66:03:d8:7d:79:d6:b2:0f:0e:73:f6:
         f4:e9:99:92:48:29:fb:54:9e:c5:23:44:a5:18:bf:0f:00:ab:
         cf:bb:25:37:fb:c4:e0:1f:79:e2:c0:d6:35:19:c6:2d:ea:7a:
         f4:22:e3:a7:c9:b1:3f:e9:6d:24:fe:6b:d6:3a:b6:61:4a:7a:
         7a:3e:9c:c3:66:73:8e:78:a2:98:f7:94:d5:0e:99:06:42:10:
         4a:e5:67:81:7b:a5:0f:67:19:b3:6c:f5:02:ec:13:02:53:31:
         71:85:11:56:2e:fb:03:df:70:92:e6:d9:ca:63:06:70:d2:24:
         d8:7e:f4:2e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAsswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTRDMzAxMTAvBgNVBAUTKDU4QTBEREQwMjU1NUM4Mzc0ODZENTU0MzUxODZEQ0M1
NzZBMTI4M0UwHhcNMjYwOTExMDEzMzM3WhcNMjYwOTE4MDEzMzM3WjAYMRYwFAYD
VQQDEw02YWEzNWE3MS0xZDUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv2G5+dBg1cs+SoHmGjrdJycxmbxTZzlVp1Ap2hS9Qhcwi2GJl0slbk2w0KxB
CR1CBBwnhiukukYfGFeuqofd3VBrDz1qt4V2xjoSDTH+mEvWvuThA/HUkQTzQh6R
fjQOnajXWkpBthGKXyjRH2MaPZz5O3AGGjdDPdKhOv5QaeNW9mebUeQRNLyBQmzT
nncs7M0urnFZdJzmBDXgEeD3nm/t/R2+EsiYY7Vf+TugVfAOrT1QywirdHzgeSQV
heeOOSjlgL7OaXXXZcx7tua79caN0gaM0Ggt1s5f9/DMwhBWZQCWbHS1hJbU+a32
j+ImPQGfpAs2yY5WkdUDtOPXfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDcvWyF5
6dUE8NnnyJMak5ntE/VgMB8GA1UdIwQYMBaAFFig3dAlVcg3SG1VQ1GG3MV2oSg+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEMzMC8wRjFGN0NFODk2
NDExMUVEQkE5RENDNEZDNEY5QUUwMi9XS0RkMENWVnlEZEliVlZEVVliY3hYYWhL
RDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dLRGQwQ1ZWeURkSWJWVkRVWWJjeFhhaEtENC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NEMzMC8wRjFGN0NFODk2NDExMUVEQkE5RENDNEZDNEY5QUUwMi9XS0RkMENWVnlE
ZEliVlZEVVliY3hYYWhLRDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArXKEmO8dDsAA80GxRHYN4HmV4iDqmxs43SskmWGIA+bqRGEZp6iShTjr1yk0
hD0iDAa64BIHrayT0SwgLrHoux+Cm2n9bd1xJnrPTrv/iKOA+mk7CAQe5I2+HDlP
yBePrTJzWKie3y3P0M9Aq5wfcaalsl+enwxlF7fF9aaVqJ1+r8tTkWYD2H151rIP
DnP29OmZkkgp+1SexSNEpRi/DwCrz7slN/vE4B954sDWNRnGLep69CLjp8mxP+lt
JP5r1jq2YUp6ej6cw2ZzjniimPeU1Q6ZBkIQSuVngXulD2cZs2z1AuwTAlMxcYUR
Vi77A99wkubZymMGcNIk2H70Lg==
-----END CERTIFICATE-----
Generated at Fri Sep 11 09:24:59 2026 by rpki-client