Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft
File:                     WfIhqdcBRydJAka2joLCl2fHDTg.mft (raw, json)
Hash identifier:          bKfwDtzSct4jshfNK94DgqYzcrPj6sNORb4CVeiJRh0=
Subject key identifier:   13:1D:89:E3:10:E9:EA:E3:B3:2D:43:D2:F6:9D:3E:83:3C:FC:21:BF
Authority key identifier: 59:F2:21:A9:D7:01:47:27:49:02:46:B6:8E:82:C2:97:67:C7:0D:38
Certificate issuer:       /CN=A912CE21/serialNumber=59F221A9D7014727490246B68E82C29767C70D38
Certificate serial:       03C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WfIhqdcBRydJAka2joLCl2fHDTg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft
Manifest number:          03B9
Signing time:             Wed 23 Sep 2026 00:12:25 +0000
Manifest this update:     Wed 23 Sep 2026 00:12:24 +0000
Manifest next update:     Wed 30 Sep 2026 00:12:24 +0000
Files and hashes:         1: WfIhqdcBRydJAka2joLCl2fHDTg.crl (hash: gv1TwNIKPjrx1SrRCg0SGiqgxpyifSe+1E5A6FDGEm0=)
                          2: A033FFB4F7F511ECADEAB528C4F9AE02.roa (hash: VMg0FbYsGm4Am7FsMSKTByp4rI7yTLLmWElUqa+g/C4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.crl
                          rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WfIhqdcBRydJAka2joLCl2fHDTg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 00:12:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 960 (0x3c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CE21, serialNumber=59F221A9D7014727490246B68E82C29767C70D38
        Validity
            Not Before: Sep 23 00:12:24 2026 GMT
            Not After : Sep 30 00:12:24 2026 GMT
        Subject: CN=6ab31968-636b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:20:86:aa:61:d5:bc:cc:ac:6a:4e:3a:85:3c:
                    ef:32:6d:b2:4b:0c:c9:df:30:24:69:1f:2b:69:8b:
                    e7:a0:94:5d:4d:7b:d7:25:50:06:70:bc:3f:3f:c4:
                    5c:a1:37:8a:d2:dd:74:42:0b:c2:ba:9d:f9:9e:8b:
                    54:47:48:8c:1f:c9:9d:f1:a5:6f:0e:41:7c:53:a1:
                    a3:55:39:25:96:f9:fe:c9:94:f3:79:1a:27:bd:e2:
                    65:31:b7:df:88:d1:cf:41:f6:2c:b0:7d:6d:72:d4:
                    c3:51:c4:3c:2c:77:ae:9b:9c:50:63:af:eb:1f:25:
                    13:84:e9:b5:65:bc:53:93:39:44:58:d0:43:33:6d:
                    bb:cc:f3:4e:5a:e2:b4:a3:d8:26:ea:c3:58:01:eb:
                    2a:be:fa:71:48:2a:50:3c:dd:52:44:d9:57:b8:aa:
                    b8:aa:62:eb:ab:f4:1b:4a:5d:48:35:21:6c:35:73:
                    27:42:25:b0:8e:10:7c:7d:e6:98:cd:c6:04:bd:bf:
                    b7:ca:2d:db:9e:0a:3d:cc:40:1c:d9:36:4c:28:a4:
                    48:c5:88:14:d7:c2:b7:eb:d5:66:26:f9:5d:cc:78:
                    25:24:b4:b4:b1:07:af:17:c3:1d:1f:cb:a9:c0:01:
                    b8:e8:92:08:69:4c:51:da:2e:b9:ab:30:b8:fe:01:
                    2b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:1D:89:E3:10:E9:EA:E3:B3:2D:43:D2:F6:9D:3E:83:3C:FC:21:BF
            X509v3 Authority Key Identifier:
                keyid:59:F2:21:A9:D7:01:47:27:49:02:46:B6:8E:82:C2:97:67:C7:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WfIhqdcBRydJAka2joLCl2fHDTg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:9e:4a:78:4c:60:13:3f:8a:12:85:a6:83:38:54:31:a0:22:
         d2:d5:db:17:ab:94:b0:7b:5c:5d:0a:49:ca:be:70:21:4a:00:
         37:2e:c8:0c:25:63:6a:42:87:58:d2:9f:25:7b:c6:b0:09:ae:
         8f:0e:88:09:d5:a2:d9:cd:15:3e:66:46:a3:f0:eb:23:cc:54:
         ee:5e:77:6d:0f:52:86:12:20:93:8e:22:ad:68:5b:8c:2a:7d:
         06:a7:76:a6:98:9c:1c:98:da:8c:3d:88:e0:87:53:8e:0c:21:
         10:65:71:82:87:5b:af:50:c2:14:70:8b:a0:df:c7:69:2a:cf:
         a9:82:7f:b1:b2:a0:35:66:76:ee:b2:08:86:ee:ea:18:be:5d:
         ac:0a:cb:e3:f2:81:5f:19:87:07:bf:1c:a7:0e:29:e4:54:de:
         63:26:a8:5f:e6:96:a3:a4:23:86:c8:74:15:23:b7:01:fe:1f:
         68:7c:d1:72:15:07:08:b3:fe:f0:b1:94:74:ac:33:cc:de:19:
         3f:29:56:32:49:97:8a:47:ce:8f:b5:6b:79:79:73:82:00:b2:
         1b:73:98:f9:04:5c:0d:a9:60:b3:47:8e:93:e1:6b:51:60:68:
         6b:1d:8c:77:27:c2:b8:7e:fb:40:4d:0d:74:d5:15:78:2c:76:
         92:01:9a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:54:16 2026 by rpki-client