Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft
File:                     WF3cT9n54xQAXzcZj9HiLmgknes.mft (raw, json)
Hash identifier:          04V8oWcJcQEN9teq6TA7pLVPtwV6kJTAX9AkJyKL5eY=
Subject key identifier:   D4:74:72:58:E4:2C:5A:71:D9:0D:9E:B3:96:1C:60:5C:CD:8E:6F:B6
Authority key identifier: 58:5D:DC:4F:D9:F9:E3:14:00:5F:37:19:8F:D1:E2:2E:68:24:9D:EB
Certificate issuer:       /CN=A912871A/serialNumber=585DDC4FD9F9E314005F37198FD1E22E68249DEB
Certificate serial:       0559
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WF3cT9n54xQAXzcZj9HiLmgknes.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft
Manifest number:          0552
Signing time:             Sat 26 Sep 2026 23:28:46 +0000
Manifest this update:     Sat 26 Sep 2026 23:28:46 +0000
Manifest next update:     Sat 03 Oct 2026 23:28:46 +0000
Files and hashes:         1: WF3cT9n54xQAXzcZj9HiLmgknes.crl (hash: 7qhiN2c2e9CZEeAmZCbPGmnYiWIfUvJW/DpSxRLbdsA=)
                          2: 5431D022524211ECA52D990FC4F9AE02.roa (hash: OxBZXjM5WU3mTzBTkJpk2hM02aP7JRhZY0bot56cYO4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.crl
                          rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WF3cT9n54xQAXzcZj9HiLmgknes.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 23:28:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1369 (0x559)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912871A, serialNumber=585DDC4FD9F9E314005F37198FD1E22E68249DEB
        Validity
            Not Before: Sep 26 23:28:46 2026 GMT
            Not After : Oct  3 23:28:46 2026 GMT
        Subject: CN=6ab8552e-f76c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:54:21:66:3b:4a:36:de:34:8d:0f:92:83:8d:
                    bf:23:33:52:16:2f:cf:44:9b:fd:fb:7a:af:44:99:
                    d2:1d:40:bb:29:b6:8a:e8:1f:14:9a:4d:c5:2e:ef:
                    82:55:29:36:3a:2a:5a:3f:88:20:41:22:c2:5d:14:
                    af:e8:2b:f5:4d:21:ec:96:f6:54:ed:4f:76:39:f7:
                    11:60:05:c2:ec:aa:ff:80:5b:d4:d7:0a:1e:8e:9d:
                    ab:86:2b:66:85:8f:b8:31:db:f4:81:35:c2:3c:8f:
                    0a:a3:7b:80:32:f7:7b:94:3d:09:4a:07:2c:2c:ea:
                    c2:48:55:50:71:04:c4:0b:49:de:65:c8:4e:61:2c:
                    c6:d7:ef:d3:14:0a:bf:d4:71:92:3d:56:a7:e4:bc:
                    4f:38:91:10:dc:8b:07:2b:8d:0a:5c:6f:8c:e5:19:
                    6e:dc:e8:3a:b3:3d:d5:73:4b:de:8f:f4:91:31:10:
                    66:c0:b0:9e:d8:4d:42:38:a7:95:54:e8:6d:d9:e9:
                    87:79:f9:74:75:3e:2e:ad:d2:0c:3a:3e:4b:9c:5a:
                    dd:a8:b4:03:69:cb:6f:5b:69:f3:a2:64:79:89:d8:
                    89:89:31:de:b8:01:60:61:cb:9b:22:6c:f2:37:dc:
                    58:e6:9e:de:07:37:0e:20:41:d1:df:22:90:17:47:
                    b5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:74:72:58:E4:2C:5A:71:D9:0D:9E:B3:96:1C:60:5C:CD:8E:6F:B6
            X509v3 Authority Key Identifier:
                keyid:58:5D:DC:4F:D9:F9:E3:14:00:5F:37:19:8F:D1:E2:2E:68:24:9D:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WF3cT9n54xQAXzcZj9HiLmgknes.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:9c:1e:9a:ed:e8:33:63:fb:fd:9c:ef:c3:bc:ef:88:b1:3c:
         de:68:17:c4:2b:cf:dc:be:0c:3f:0d:02:00:96:cc:85:b2:ad:
         ef:1a:4a:87:75:f1:da:ab:1b:8e:dc:32:dd:1d:ae:f7:53:0a:
         de:66:bc:dc:79:79:f6:4f:50:df:38:e0:32:fa:59:bc:02:0b:
         de:f8:2d:a7:7b:15:19:e5:31:a3:6d:c0:8c:d8:2c:a2:bb:ca:
         fd:4f:a4:78:7f:af:19:04:7a:97:a6:7c:1d:b6:4e:e3:c9:72:
         b5:c7:82:6e:fb:60:17:31:fe:cf:b5:d7:63:7b:a2:34:82:fc:
         21:f0:77:54:2a:0d:06:f7:13:b1:b7:50:f7:8e:c3:96:5f:c4:
         4f:d0:bc:66:e1:30:cd:17:bd:8e:43:67:fc:18:eb:1f:5f:6b:
         3e:9e:df:78:ad:41:5e:d7:0d:c6:4b:3e:51:13:46:f7:3d:fd:
         95:e1:70:ea:7f:96:c0:45:48:4b:40:0a:2c:e6:a3:1c:8d:70:
         81:d1:68:16:07:ed:3f:76:97:9d:b4:2a:a8:dd:f6:7e:34:34:
         d9:14:36:18:85:cf:59:e5:08:a3:60:98:31:49:2e:9a:a1:7f:
         80:ec:eb:0c:82:24:0f:49:59:c5:1b:19:64:49:63:f8:c5:51:
         dd:0e:ee:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:11:52 2026 by rpki-client