Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.mft
File:                     WCInA0DzKvjXCSJhC3CA_DQXes8.mft (raw, json)
Hash identifier:          GxMTY/epDbDvnon4JkRsWt3dnw39wdm9TfpX1Z6+V8I=
Subject key identifier:   41:5A:67:03:CF:FF:CB:67:6A:71:E2:11:74:3B:D7:C0:7A:20:46:F7
Authority key identifier: 58:22:27:03:40:F3:2A:F8:D7:09:22:61:0B:70:80:FC:34:17:7A:CF
Certificate issuer:       /CN=A91F742D/serialNumber=5822270340F32AF8D70922610B7080FC34177ACF
Certificate serial:       068A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCInA0DzKvjXCSJhC3CA_DQXes8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.mft
Manifest number:          0682
Signing time:             Wed 28 Oct 2026 22:44:46 +0000
Manifest this update:     Wed 28 Oct 2026 22:44:45 +0000
Manifest next update:     Wed 04 Nov 2026 22:44:45 +0000
Files and hashes:         1: WCInA0DzKvjXCSJhC3CA_DQXes8.crl (hash: KVGptcsUgn+VnlueN/GoftnYwx5s09j50qys/meL+dQ=)
                          2: 78423A52DE2911EB9B09A334C4F9AE02.roa (hash: MpdLSsMmjHFUWd3HLlJvQtsUmodPuK2kZOOzcTbMZ7M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.crl
                          rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCInA0DzKvjXCSJhC3CA_DQXes8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Nov 2026 22:44:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1674 (0x68a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F742D, serialNumber=5822270340F32AF8D70922610B7080FC34177ACF
        Validity
            Not Before: Oct 28 22:44:45 2026 GMT
            Not After : Nov  4 22:44:45 2026 GMT
        Subject: CN=6ae27ade-f823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:4c:ef:f8:be:67:f5:af:57:2e:96:44:13:54:
                    2d:9f:a5:74:ec:7c:d9:6c:f2:e0:c7:1e:af:9d:44:
                    5f:36:39:a6:9b:cd:1f:9c:41:c0:47:2c:c9:39:81:
                    e0:95:3e:97:3b:a8:1c:11:e7:c2:94:da:e4:0c:47:
                    d0:c2:6e:c1:dc:1e:04:77:b8:0a:7b:55:f0:11:ca:
                    78:56:d1:33:98:10:ee:7f:28:65:5b:ae:b9:fe:91:
                    76:3b:7a:ef:95:aa:8f:58:19:6d:46:0c:f5:4d:1e:
                    e2:fd:e6:80:82:37:b2:a5:5d:9d:5d:bc:a4:86:c3:
                    43:f8:de:56:2d:5f:19:8c:5b:f2:c2:e1:c0:e6:59:
                    7d:73:75:88:38:fb:e4:65:b3:77:a8:83:09:94:86:
                    6e:01:f8:f6:88:ab:2a:03:98:4f:52:67:1b:95:57:
                    83:98:b5:62:7c:26:9c:17:03:ba:be:45:f7:14:f9:
                    da:b4:ed:28:24:ab:0f:4d:9c:aa:3a:01:b9:51:ff:
                    b7:ec:de:c9:5c:86:c7:50:bb:87:0d:9c:46:1a:ae:
                    09:41:e8:12:80:26:ce:1c:dc:9a:a6:dc:d8:73:dd:
                    db:a9:95:c7:3f:8a:c1:4d:c6:d0:31:a4:9c:fd:50:
                    17:f9:10:47:04:68:c2:ea:d5:14:ba:76:16:bd:d0:
                    ae:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:5A:67:03:CF:FF:CB:67:6A:71:E2:11:74:3B:D7:C0:7A:20:46:F7
            X509v3 Authority Key Identifier:
                keyid:58:22:27:03:40:F3:2A:F8:D7:09:22:61:0B:70:80:FC:34:17:7A:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCInA0DzKvjXCSJhC3CA_DQXes8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:25:d0:ee:7c:81:25:3c:7d:64:55:f8:d6:e4:f4:8c:ee:fe:
         d2:05:d0:6f:41:2a:58:a7:6c:73:46:b6:62:ba:a0:46:03:00:
         91:38:a6:76:5d:65:7c:c4:86:cd:d6:4d:44:9b:16:7c:4c:df:
         31:4b:47:d5:97:82:c3:8a:bb:c7:93:45:e6:30:2b:82:f6:18:
         1f:cc:82:f1:dc:c1:b4:1c:e6:44:28:cd:12:0d:4f:d9:63:7b:
         40:b7:20:1f:af:ae:16:60:7a:8d:cf:2c:b3:6d:e9:d0:fb:e2:
         06:04:e2:f3:73:0f:6c:57:ac:ee:4c:0e:f4:e7:8b:cd:0a:ad:
         8c:ce:00:1d:86:93:e3:82:2b:43:da:72:6d:c7:52:52:20:51:
         72:c2:9f:99:f5:1e:3c:7a:8f:99:a4:65:3e:82:bb:21:23:84:
         2c:96:a7:fd:9d:c2:2b:11:9f:04:99:51:dd:01:79:1c:0a:7d:
         29:36:fc:ed:8a:5a:70:55:11:93:3f:2d:cb:2a:69:89:83:1b:
         e9:c6:b4:74:1c:5c:d5:dc:67:b1:8b:54:1a:46:2c:45:44:f5:
         ac:94:f3:cd:ac:37:af:42:41:22:2d:68:80:66:e1:cd:dc:00:
         31:2e:b0:c6:2c:d5:af:15:58:e8:2b:dd:53:9f:e1:50:e1:64:
         b0:cc:f9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 10:20:20 2026 by rpki-client