Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912ACC3/D4F4B48877F711E7B2D33264C4F9AE02/wapc5S4RUztkHjtoWrMjxGl2pAE.mft
File:                     wapc5S4RUztkHjtoWrMjxGl2pAE.mft (raw, json)
Hash identifier:          xrZN2GtGEmvo6iwGmhPLDdkoVs+kjQzO8MM1l6vTi3c=
Subject key identifier:   38:1D:9C:76:AB:14:DF:29:F9:DA:93:2A:F4:B0:6D:64:2E:1F:58:07
Authority key identifier: C1:AA:5C:E5:2E:11:53:3B:64:1E:3B:68:5A:B3:23:C4:69:76:A4:01
Certificate issuer:       /CN=A912ACC3/serialNumber=C1AA5CE52E11533B641E3B685AB323C46976A401
Certificate serial:       1A79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wapc5S4RUztkHjtoWrMjxGl2pAE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912ACC3/D4F4B48877F711E7B2D33264C4F9AE02/wapc5S4RUztkHjtoWrMjxGl2pAE.mft
Manifest number:          1A64
Signing time:             Sat 14 Nov 2026 16:15:59 +0000
Manifest this update:     Sat 14 Nov 2026 16:15:58 +0000
Manifest next update:     Sat 21 Nov 2026 16:15:58 +0000
Files and hashes:         1: wapc5S4RUztkHjtoWrMjxGl2pAE.crl (hash: 0CFzNmLdVNmHkA5cjTquqHNXchpyjQxME/SNaG0C2mI=)
                          2: 0E01F66437F511EEA737AD17C4F9AE02.roa (hash: 9rFMuIZwnna4Tv6wM8EhAG1kHEaNh9dy2YYC2q9QGkw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912ACC3/D4F4B48877F711E7B2D33264C4F9AE02/wapc5S4RUztkHjtoWrMjxGl2pAE.crl
                          rsync://rpki.apnic.net/member_repository/A912ACC3/D4F4B48877F711E7B2D33264C4F9AE02/wapc5S4RUztkHjtoWrMjxGl2pAE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wapc5S4RUztkHjtoWrMjxGl2pAE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 16:15:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6777 (0x1a79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912ACC3, serialNumber=C1AA5CE52E11533B641E3B685AB323C46976A401
        Validity
            Not Before: Nov 14 16:15:58 2026 GMT
            Not After : Nov 21 16:15:58 2026 GMT
        Subject: CN=6af8893e-bfc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:da:16:93:32:d7:77:1a:42:c3:27:70:30:ab:
                    57:a0:00:39:9b:09:90:4f:1e:2f:5b:3d:02:b3:21:
                    59:c2:60:38:91:54:c4:9c:be:79:dc:4e:74:c6:84:
                    91:33:16:1c:cf:d4:3f:13:bc:13:61:dd:b5:57:cb:
                    bc:16:22:84:1e:84:28:50:37:0b:ef:34:16:b4:87:
                    61:42:72:8f:1f:13:31:2f:0e:65:67:18:d9:28:43:
                    4d:25:71:bd:48:68:1e:1b:86:75:e9:1e:da:4a:03:
                    cb:02:6e:3a:13:1d:f8:f7:78:84:c3:97:15:ab:62:
                    09:09:5e:42:3e:1b:8a:5c:bc:a1:1a:a0:47:95:83:
                    ab:4c:d4:6a:1f:e0:85:6e:8f:8d:ae:ab:c1:53:99:
                    23:75:fd:6a:16:19:d5:9e:08:d4:77:ec:c4:4d:8d:
                    17:5d:87:6d:68:1f:79:bd:4b:84:c6:f0:27:90:61:
                    26:c3:f3:12:c3:78:e4:6f:fa:70:0a:c7:f9:7e:4d:
                    06:a2:25:7e:59:8c:ef:e2:85:c0:e4:2d:b3:65:15:
                    07:6d:51:30:66:01:63:38:fb:f7:03:25:9e:01:7a:
                    f5:a0:4a:9d:43:3a:21:54:e2:5c:42:e8:32:09:ec:
                    0b:7e:74:12:af:09:2b:a8:36:92:2d:58:28:f9:ce:
                    cc:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:1D:9C:76:AB:14:DF:29:F9:DA:93:2A:F4:B0:6D:64:2E:1F:58:07
            X509v3 Authority Key Identifier:
                keyid:C1:AA:5C:E5:2E:11:53:3B:64:1E:3B:68:5A:B3:23:C4:69:76:A4:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912ACC3/D4F4B48877F711E7B2D33264C4F9AE02/wapc5S4RUztkHjtoWrMjxGl2pAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wapc5S4RUztkHjtoWrMjxGl2pAE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912ACC3/D4F4B48877F711E7B2D33264C4F9AE02/wapc5S4RUztkHjtoWrMjxGl2pAE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:02:20:14:e4:08:51:5b:29:e1:ae:eb:f2:39:10:37:d2:25:
         22:c3:42:c6:ef:46:af:f3:70:a4:fe:60:27:ea:96:a6:bf:93:
         bf:34:b4:cc:4f:07:65:49:ca:a0:af:b4:30:00:6c:7c:97:b1:
         1e:18:e4:54:b5:30:42:1d:ca:f1:90:b1:5e:28:e4:c2:33:00:
         d0:c3:16:63:75:03:90:94:a8:23:ae:02:52:43:3d:24:63:bb:
         8a:67:1c:0a:a7:20:08:3c:07:ae:c6:4b:16:3a:3b:8f:97:ba:
         c1:4f:d3:76:20:40:fa:88:5d:94:f8:d6:fa:f3:33:fe:77:02:
         e0:a6:9a:17:af:8c:0c:5d:71:ed:fc:25:c5:84:e7:b9:0b:fd:
         cc:ae:57:e4:d7:a0:71:11:83:e5:e8:67:86:3f:d8:13:c9:b6:
         52:d4:6e:6b:37:e2:f4:00:e7:a5:ab:80:63:a8:94:0a:49:74:
         fd:ee:20:7b:b5:65:a0:7c:c0:c2:bd:f3:57:86:70:9b:72:25:
         0f:cd:27:93:8b:ea:fe:78:ec:7e:1c:ab:fd:45:ed:48:c6:4e:
         cd:d8:1e:6a:cd:51:64:9a:e9:29:2f:be:ad:64:3b:8b:35:11:
         1a:b3:48:d2:07:50:3a:9b:c1:e3:de:13:1c:a5:a7:57:96:f4:
         47:a0:0c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:38:00 2026 by rpki-client