Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft
File:                     wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft (raw, json)
Hash identifier:          NKSsXCpLxMypFw7YehtzSsihs0P4mmt3dLL1+vV6SHk=
Subject key identifier:   A1:2D:2A:5A:3F:38:FB:AF:6A:22:0F:78:71:56:5D:C6:DC:45:96:25
Authority key identifier: C0:30:56:F6:80:99:64:7A:F7:58:5E:53:F6:A9:8E:CF:F3:D9:88:DF
Certificate issuer:       /CN=A911EB2D/serialNumber=C03056F68099647AF7585E53F6A98ECFF3D988DF
Certificate serial:       09BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDBW9oCZZHr3WF5T9qmOz_PZiN8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft
Manifest number:          0B2A
Signing time:             Wed 14 Oct 2026 20:13:25 +0000
Manifest this update:     Wed 14 Oct 2026 20:13:25 +0000
Manifest next update:     Wed 21 Oct 2026 20:13:25 +0000
Files and hashes:         1: wDBW9oCZZHr3WF5T9qmOz_PZiN8.crl (hash: MDi/EQGNjzCW9jFZhl5AueCG1soQr7fbofX5Uj2ifHA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.crl
                          rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDBW9oCZZHr3WF5T9qmOz_PZiN8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Oct 2026 20:13:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2490 (0x9ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911EB2D, serialNumber=C03056F68099647AF7585E53F6A98ECFF3D988DF
        Validity
            Not Before: Oct 14 20:13:25 2026 GMT
            Not After : Oct 21 20:13:25 2026 GMT
        Subject: CN=6acfe265-ae1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3f:80:bb:b9:d4:b8:47:30:a9:61:ef:65:8a:
                    11:41:a1:56:85:d5:46:da:d5:da:5c:94:4a:36:3b:
                    a4:c5:36:da:a3:c8:82:6a:b3:d3:b6:72:7f:ba:03:
                    89:d0:0d:23:ac:29:d2:e5:c0:5d:e8:20:90:64:78:
                    33:e1:1d:25:50:b2:0b:cd:8c:22:af:47:8d:96:00:
                    83:9e:08:eb:97:6f:8c:e3:15:87:0c:d3:fa:5b:66:
                    b5:3a:1e:89:1c:50:62:2c:db:a9:da:4c:ac:51:d1:
                    09:60:57:2f:0b:48:e8:3e:b2:7b:33:d0:ef:1f:f9:
                    ea:79:19:c4:3c:06:fb:b6:36:b7:9b:d9:8c:94:bc:
                    9d:35:eb:ea:a9:59:e1:bf:b7:b8:f1:c9:33:19:f1:
                    3f:59:ee:f3:f6:7a:be:16:9f:b5:8c:68:86:05:c7:
                    ba:14:a6:df:c6:ac:97:f5:3a:e7:4d:3d:06:31:02:
                    b0:6f:e4:7f:fd:1d:9c:28:02:8a:85:ac:72:8f:2c:
                    6d:8d:b3:88:85:e4:c2:67:3f:05:26:09:a9:fb:ed:
                    29:f0:39:94:1e:c2:d4:57:4a:5d:b2:b1:fb:53:cf:
                    c8:e0:4b:29:28:4d:3b:9d:5f:f5:ca:d8:20:a1:16:
                    3d:9c:4c:59:7f:2c:c6:86:ed:e0:99:c7:a4:1c:f3:
                    12:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:2D:2A:5A:3F:38:FB:AF:6A:22:0F:78:71:56:5D:C6:DC:45:96:25
            X509v3 Authority Key Identifier:
                keyid:C0:30:56:F6:80:99:64:7A:F7:58:5E:53:F6:A9:8E:CF:F3:D9:88:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDBW9oCZZHr3WF5T9qmOz_PZiN8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:c9:e3:5d:54:d7:80:a2:49:f5:00:5e:c6:ac:8b:31:b1:de:
         3f:30:e1:8f:ac:9b:74:fa:e4:91:d5:21:f5:d0:3c:79:89:85:
         da:0b:94:1c:ba:35:c5:77:c6:1c:0f:2f:ab:62:cd:f3:28:a4:
         6b:49:1b:c4:56:ea:df:6a:81:7f:cb:b0:97:20:bd:29:43:52:
         f3:e1:1c:24:4e:01:b6:51:43:35:39:8f:31:73:47:93:ce:4d:
         db:e1:ec:a3:ef:9c:7a:0f:c7:ed:20:10:09:a5:c2:99:d1:e4:
         0e:65:c4:34:7f:60:c6:2e:0d:57:3f:04:05:4a:2c:a6:88:4b:
         dc:d5:8d:ae:e3:e6:2a:d0:3f:b2:13:53:64:d3:b2:26:30:b8:
         fc:6f:35:8d:88:fb:79:1c:39:18:a5:b4:b4:19:8d:d5:68:47:
         66:61:8a:c4:31:99:5f:4a:89:49:77:33:11:ac:3f:42:63:55:
         8e:c4:38:90:5d:22:c7:43:85:d5:5f:17:e8:54:77:6c:8c:99:
         90:6d:4c:18:f1:06:f1:70:19:54:b6:eb:11:fb:be:75:d9:4a:
         4d:0b:d3:07:cb:98:56:bf:1f:b8:56:86:3c:9b:c2:4f:48:c6:
         4a:d4:86:a0:e0:16:a8:d6:f8:77:b7:2b:79:90:ed:08:10:a2:
         18:ac:a9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 13:48:23 2026 by rpki-client