Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.mft
File:                     4WPw_lTxea9MbAlwmP774tQ4Wxk.mft (raw, json)
Hash identifier:          1DEeH1njc11KXPcB+lnQu/KNhckZOZCvqVdVm5fOD/Y=
Subject key identifier:   EB:99:A4:CA:E1:74:E7:0C:27:21:DD:62:33:76:7F:59:18:4A:34:19
Authority key identifier: E1:63:F0:FE:54:F1:79:AF:4C:6C:09:70:98:FE:FB:E2:D4:38:5B:19
Certificate issuer:       /CN=A91F54CD/serialNumber=E163F0FE54F179AF4C6C097098FEFBE2D4385B19
Certificate serial:       012D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WPw_lTxea9MbAlwmP774tQ4Wxk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.mft
Manifest number:          0129
Signing time:             Mon 05 Oct 2026 06:08:19 +0000
Manifest this update:     Mon 05 Oct 2026 06:08:19 +0000
Manifest next update:     Mon 12 Oct 2026 06:08:19 +0000
Files and hashes:         1: 4WPw_lTxea9MbAlwmP774tQ4Wxk.crl (hash: t6OwBLr0GKsMg17bkzy0UP+voVGarIA5yEWw3Xh+2BQ=)
                          2: 2CA96408FD8811EF9404CD48C4F9AE02.roa (hash: 1TDI2R5MKcilPYMjg8q2DIOpJANk9e/u2LmbUXePKOw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.crl
                          rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WPw_lTxea9MbAlwmP774tQ4Wxk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 06:08:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 301 (0x12d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F54CD, serialNumber=E163F0FE54F179AF4C6C097098FEFBE2D4385B19
        Validity
            Not Before: Oct  5 06:08:19 2026 GMT
            Not After : Oct 12 06:08:19 2026 GMT
        Subject: CN=6ac33ed3-d968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c9:6c:81:76:7b:42:0f:79:bc:ae:bb:7a:56:
                    2f:46:79:15:c5:da:40:1c:f2:7b:bc:0c:b2:64:f5:
                    a2:e5:ff:3d:1e:92:98:fa:82:53:e4:15:64:28:6d:
                    c2:f0:a6:7b:ab:1a:7c:bf:c3:96:6a:14:81:17:f1:
                    7e:d3:8b:24:02:8f:e9:a9:88:e0:f2:a8:3c:83:51:
                    82:67:c1:c7:fe:2b:b4:51:4f:b9:fd:80:96:65:c0:
                    d2:e5:1e:e0:2e:10:1a:3a:9c:6b:9d:60:f0:db:c3:
                    31:e9:d5:46:cc:69:1f:3b:7e:ff:c2:38:28:3b:5e:
                    fa:ef:21:5a:79:af:8e:03:cd:7c:6c:85:64:71:d4:
                    ff:06:08:d2:c5:a9:0c:73:fb:4b:76:cf:53:99:33:
                    21:57:93:11:00:9a:77:27:75:b7:2a:b2:5c:cb:9e:
                    5c:7d:89:7d:e4:43:51:3f:df:1b:b8:30:41:ae:6b:
                    12:fa:8a:fc:e9:25:45:8f:e6:2d:e5:52:93:49:bb:
                    2c:e2:c1:56:92:ea:0d:4e:a4:42:57:0b:83:d1:e4:
                    8a:84:3b:09:39:d0:c8:c5:6e:8b:b3:94:9c:57:65:
                    cb:17:56:87:8f:77:6b:e8:f9:6c:d7:da:70:d3:3f:
                    5e:0f:62:a9:2d:f8:e7:d3:e9:fb:a3:4d:08:a6:0e:
                    3a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:99:A4:CA:E1:74:E7:0C:27:21:DD:62:33:76:7F:59:18:4A:34:19
            X509v3 Authority Key Identifier:
                keyid:E1:63:F0:FE:54:F1:79:AF:4C:6C:09:70:98:FE:FB:E2:D4:38:5B:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WPw_lTxea9MbAlwmP774tQ4Wxk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:2b:f4:1d:2e:b3:8c:5b:01:f7:12:17:3f:78:e5:3d:83:1b:
         72:5b:f6:39:37:8c:7c:36:d9:d6:b2:c3:0b:09:f9:f1:c4:a4:
         00:7d:ef:41:43:71:ee:ef:e4:57:ce:46:23:0a:8d:0e:77:a1:
         76:00:e5:b7:3a:f9:a0:1d:aa:b4:1a:de:53:5f:48:f3:95:3c:
         b1:ef:db:aa:8d:49:7f:44:e6:dc:47:8c:fe:04:9d:0f:fe:e3:
         0f:02:15:73:87:c0:df:ee:53:4f:ee:78:5e:0f:60:37:03:44:
         e4:14:79:2a:d1:92:de:71:7b:58:f2:1d:ad:d3:f0:71:ef:05:
         25:ea:cd:3a:5c:5d:b5:77:1f:21:94:58:b8:53:30:a1:6b:d4:
         b5:5a:0a:5c:35:96:43:69:93:09:75:27:b7:d7:ba:96:a6:08:
         3f:d5:dc:04:b4:33:9f:59:8d:3c:96:bd:9e:24:31:de:b8:68:
         0b:b6:2e:0f:f1:8d:17:01:f1:c8:4b:85:f3:98:62:71:3d:81:
         06:29:40:90:36:dc:7b:d7:40:52:16:ef:e1:13:bb:cf:29:67:
         9e:bc:1c:8d:e7:aa:f0:f6:92:52:80:99:cf:92:1a:86:cf:5d:
         d1:f9:d8:46:82:d7:c2:47:26:22:23:dd:06:54:fc:45:56:dc:
         56:0a:67:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:55:04 2026 by rpki-client