Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
File:                     WpbU7D01JJTZI51SrzWsEE2hL50.mft (raw, json)
Hash identifier:          +m5YYaB6j++AECu+nXMOtuYKZN+aQBVjPVvmY78ivBQ=
Subject key identifier:   77:E6:BC:1D:D4:53:F0:96:4F:C6:98:BE:24:8A:5D:70:D4:9C:B7:8F
Authority key identifier: 5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D
Certificate issuer:       /CN=A9129E3A/serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D
Certificate serial:       3640
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
Manifest number:          35C8
Signing time:             Sat 14 Nov 2026 14:26:25 +0000
Manifest this update:     Sat 14 Nov 2026 14:26:25 +0000
Manifest next update:     Sat 21 Nov 2026 14:26:25 +0000
Files and hashes:         1: WpbU7D01JJTZI51SrzWsEE2hL50.crl (hash: nXR76UL7EVbqt3Wos0BIErppkSt2fU+plYtxL+f65kE=)
                          2: 5E2DEF009C5C11E99CCA9656C4F9AE02.roa (hash: 5ZpkIo1n4Gv5uwa7NImU9M0kb+w/Ii5LkQHA44vK79I=)
                          3: 78F6DFE8CB6411F0A28C973CC4F9AE02.roa (hash: gvi8hWhSZEyhI/MZ6vtRb0JcAY+iSRYiYJZi1gBmvRI=)
                          4: 967D3674CB7911F0B5816B84C4F9AE02.roa (hash: 0KMQ/55D5rrZWDAZvQGMwOpEu4hRv1HBS+IR1ld3fas=)
                          5: B9AB0CB475DE11E8B55A1C47C4F9AE02.roa (hash: jgvloA4p8jwDkndKROuj2KaJOu+0VnyQm1S7vb4/ARo=)
                          6: C8E115CEA6A711EA8A48CD2BC4F9AE02.roa (hash: rPUnL7lHYdjtoOgbW/NTPA75gMTNRBPXaMY8wYcuEDk=)
                          7: 57BD12E2CA1411ED9F6F423BC4F9AE02.roa (hash: nh33iXL7qlto9SPY3eGtRzqM7MNK4E7ZZsv8bnTGP0E=)
                          8: ED54502AAFCF11EA926A5C48C4F9AE02.roa (hash: Ac7ar5e+1Wqv3lV5cwQxtXQSoDcys5+NNyVEldaHACw=)
                          9: 3E9F53C0A57711EAB2F52B2CC4F9AE02.roa (hash: Vd536Yo/UmC9YisTI800kHevdHaCEUXlwObFTopHde0=)
                          10: C6A9394ADEA211ED88586378C4F9AE02.roa (hash: hP7biJkDS354Ac1lKBliVsjrL4sBRs39Al7da/cRPrg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl
                          rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 14:26:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13888 (0x3640)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129E3A, serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D
        Validity
            Not Before: Nov 14 14:26:25 2026 GMT
            Not After : Nov 21 14:26:25 2026 GMT
        Subject: CN=6af86f91-17f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:09:e0:35:ee:73:fc:8c:9c:7a:f0:d4:9e:cb:
                    6c:ed:96:ab:e1:4d:9a:6d:18:d2:3f:f7:1b:db:4c:
                    8d:81:70:43:6e:ac:6a:2e:5b:a4:67:fd:2d:b6:1e:
                    c1:85:a9:0b:ef:06:54:dc:73:2e:aa:20:63:66:ba:
                    e0:dd:2b:36:31:52:af:6e:b7:24:d4:f2:30:f5:73:
                    31:93:ab:16:4b:eb:79:9c:c8:52:32:88:b2:0e:69:
                    fa:99:67:a1:4a:06:26:f4:4b:9f:0e:4b:1a:b8:44:
                    a8:ea:98:58:41:1b:34:b5:db:53:c9:e9:c7:b2:b5:
                    ef:66:b3:84:80:23:46:df:8a:f6:0e:65:01:50:28:
                    a8:22:eb:1d:16:ad:cc:20:d2:d9:dd:ae:c4:65:d8:
                    d9:49:37:e9:f7:aa:d3:f1:b0:7b:43:a6:fa:8c:5f:
                    c9:8c:f4:5a:9c:1f:17:47:8a:28:8c:61:10:47:6b:
                    21:da:e3:1e:70:75:9e:6c:24:85:0b:90:df:36:00:
                    0d:8c:66:81:17:57:97:c5:4e:c8:14:26:ab:a1:aa:
                    5f:5f:d5:3b:72:33:3d:4c:f7:08:6c:3c:b8:ec:b8:
                    ce:76:0d:f2:a9:54:10:af:ba:ee:16:3e:e5:0c:60:
                    9a:8a:ef:d5:43:4e:7c:f1:19:d1:49:9a:ce:b2:5f:
                    d8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E6:BC:1D:D4:53:F0:96:4F:C6:98:BE:24:8A:5D:70:D4:9C:B7:8F
            X509v3 Authority Key Identifier:
                keyid:5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:54:58:9d:10:3a:b9:6d:86:b7:66:72:8c:64:31:25:25:c5:
         52:f1:53:83:ef:45:cf:e6:fd:76:ee:a8:87:8f:b4:7b:12:1c:
         0e:e3:cd:ff:54:7e:ee:4e:89:1d:17:88:37:e2:9d:e7:02:a4:
         1f:84:d9:8e:1c:dc:21:e1:c7:bc:67:80:b9:c2:8a:59:6d:5d:
         f5:2b:9d:6d:ea:b4:a8:c8:15:f7:1b:36:11:01:06:94:f1:d7:
         57:04:89:e2:16:61:39:6f:99:09:77:31:88:8a:91:9f:59:4a:
         e8:5f:72:a4:25:b0:85:74:05:3c:4d:3c:1f:1c:f2:cf:c9:fb:
         44:44:0f:eb:76:68:95:fb:4f:d2:5d:c6:78:6a:8b:f9:b7:51:
         ce:5e:ba:1f:89:56:aa:72:d9:f3:a9:ef:6f:0f:8c:94:66:17:
         01:78:8c:a6:7f:9e:94:65:b1:d1:fc:14:4f:24:27:70:fc:ae:
         98:0a:14:3a:29:97:8d:65:8d:23:46:80:18:ed:ec:26:13:db:
         04:98:7d:55:b2:a0:b2:12:ca:42:e0:14:c4:0b:9a:20:c1:6d:
         fb:7e:ef:fb:15:37:21:b5:2b:ea:85:00:fd:f5:d4:0e:ee:aa:
         d1:8d:fa:6f:82:17:82:7f:64:07:35:93:78:79:fb:0f:26:12:
         8b:e1:68:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:53:47 2026 by rpki-client