Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.mft
File:                     W_AAFHNK0bVlsQhtEv_KtZDMuLs.mft (raw, json)
Hash identifier:          ZbK64lWccTatnOqyDJ+C8rjlLlqY1SgfU34kX805Gh0=
Subject key identifier:   95:B0:02:F5:5F:A2:18:9D:D0:08:93:D1:3C:49:1A:44:F9:37:59:49
Authority key identifier: 5B:F0:00:14:73:4A:D1:B5:65:B1:08:6D:12:FF:CA:B5:90:CC:B8:BB
Certificate issuer:       /CN=A9131C4B/serialNumber=5BF00014734AD1B565B1086D12FFCAB590CCB8BB
Certificate serial:       C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_AAFHNK0bVlsQhtEv_KtZDMuLs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.mft
Manifest number:          C0
Signing time:             Wed 23 Sep 2026 06:39:01 +0000
Manifest this update:     Wed 23 Sep 2026 06:39:00 +0000
Manifest next update:     Wed 30 Sep 2026 06:39:00 +0000
Files and hashes:         1: W_AAFHNK0bVlsQhtEv_KtZDMuLs.crl (hash: s3bEe5vB9uYW21tv1HLXHmSmsSyMFAmQNvw6wrhKFWc=)
                          2: D65EFE0A91F711F087341C45C4F9AE02.roa (hash: /DGfu5IZwgqK2fcVU/zNOMsbLyKflPYKY+TO1byR3vA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.crl
                          rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_AAFHNK0bVlsQhtEv_KtZDMuLs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 06:39:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 195 (0xc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131C4B, serialNumber=5BF00014734AD1B565B1086D12FFCAB590CCB8BB
        Validity
            Not Before: Sep 23 06:39:00 2026 GMT
            Not After : Sep 30 06:39:00 2026 GMT
        Subject: CN=6ab37405-5b39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:53:0c:90:65:96:5c:b5:e9:5f:6a:b0:f0:e1:
                    b1:f4:04:34:80:70:19:b5:6c:ca:89:f5:78:35:40:
                    ea:6d:76:27:d2:37:d1:21:f4:b0:3f:85:4b:10:95:
                    1b:2c:55:df:23:09:df:19:84:09:58:3e:5d:5a:db:
                    b7:27:01:eb:af:bb:85:3e:a9:1c:47:49:9d:10:8c:
                    df:0d:ed:e1:16:76:cb:f6:f7:45:2d:ab:61:04:80:
                    6c:14:4a:84:82:78:e1:3f:01:35:06:90:2a:13:7a:
                    bd:3d:12:52:dc:a5:47:04:a8:99:0f:f1:b0:98:2e:
                    d5:19:9a:a2:cb:a3:52:c9:e4:8d:ed:13:95:f7:53:
                    7c:f6:3d:4b:b7:fc:b2:d1:3d:57:84:35:cc:db:bb:
                    a5:97:9f:30:32:4d:9c:f7:24:6c:ac:14:25:64:6c:
                    4d:7b:1e:f0:a6:b7:6b:75:13:40:4e:2a:22:a7:64:
                    ed:61:16:75:f8:71:84:5f:17:2f:f8:08:9e:df:b6:
                    b6:ad:bf:ef:73:41:fb:c6:3d:54:49:73:12:0a:de:
                    76:10:1a:db:2b:2d:89:b0:d0:2b:e8:2e:30:7b:d4:
                    39:d7:1d:66:10:cf:c0:28:3a:e9:5d:64:70:fa:cf:
                    18:ad:2a:df:8c:8e:9e:c1:ef:8c:12:58:dc:81:78:
                    0c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B0:02:F5:5F:A2:18:9D:D0:08:93:D1:3C:49:1A:44:F9:37:59:49
            X509v3 Authority Key Identifier:
                keyid:5B:F0:00:14:73:4A:D1:B5:65:B1:08:6D:12:FF:CA:B5:90:CC:B8:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_AAFHNK0bVlsQhtEv_KtZDMuLs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:b7:ca:77:9a:4e:1c:cb:ac:1b:00:e4:86:89:21:f2:6b:69:
         ba:6d:24:21:e0:1f:12:26:da:e6:18:1c:9e:93:2f:99:9e:51:
         bc:a8:94:76:6d:de:35:89:80:2a:b2:fb:7f:4a:0e:9e:a8:ea:
         e1:24:88:28:37:af:9c:01:a4:d8:3a:ac:f7:60:a0:2e:a1:60:
         44:80:b0:d4:48:00:74:6d:11:e3:c4:28:08:80:66:61:2d:94:
         cb:e6:96:f4:68:ea:95:b6:8d:bc:63:b2:49:dd:2d:fc:99:61:
         ac:84:08:44:c9:2f:18:fb:70:45:52:d3:39:05:8c:ed:69:4c:
         3c:67:3b:ac:17:72:90:e6:60:f0:44:32:97:be:4b:a6:f7:fa:
         e8:71:d9:da:b0:66:b1:83:0f:d5:38:14:dc:e4:f1:6d:d6:46:
         4b:53:12:ab:0f:c3:ce:2d:78:ad:9e:f7:d4:b7:b1:ef:f0:b5:
         9a:10:d0:9f:2b:7e:57:8a:f7:e6:77:b9:c2:ef:e5:28:6b:bb:
         b8:b2:bc:d6:00:65:7c:20:7a:d3:68:3d:24:cb:e8:a2:7e:2c:
         0b:a1:2d:0d:cc:5a:12:1f:48:0f:20:15:79:76:0e:f7:26:49:
         07:12:5e:5c:93:9c:ab:03:ac:20:88:2c:d9:25:82:3d:c9:ed:
         7c:05:0c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:43:59 2026 by rpki-client