Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft
File:                     wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft (raw, json)
Hash identifier:          vRmiFyA5lo0aBbwtgs1eJMm+ucsyAL6GZDkiG20MsEQ=
Subject key identifier:   36:FB:71:8E:61:AE:58:C2:9E:B7:4D:A5:A2:04:27:34:92:8A:21:90
Authority key identifier: C2:A2:EB:4C:F9:10:27:78:A4:2E:15:CC:D2:0A:58:4E:DC:ED:C2:72
Certificate issuer:       /CN=A91365B9/serialNumber=C2A2EB4CF9102778A42E15CCD20A584EDCEDC272
Certificate serial:       0491
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqLrTPkQJ3ikLhXM0gpYTtztwnI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft
Manifest number:          048A
Signing time:             Tue 22 Sep 2026 23:38:37 +0000
Manifest this update:     Tue 22 Sep 2026 23:38:37 +0000
Manifest next update:     Tue 29 Sep 2026 23:38:37 +0000
Files and hashes:         1: wqLrTPkQJ3ikLhXM0gpYTtztwnI.crl (hash: sx4pcNQqYUj6d9TY33gxt8+0jqA/9sMgLDTHwqIGhRg=)
                          2: AFF4E1F89EB711EC8210607DC4F9AE02.roa (hash: r355JtbsChvpKdcC5nW7ewoVZ03Rj0iVIbKKdmTNzQU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.crl
                          rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqLrTPkQJ3ikLhXM0gpYTtztwnI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 23:38:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1169 (0x491)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91365B9, serialNumber=C2A2EB4CF9102778A42E15CCD20A584EDCEDC272
        Validity
            Not Before: Sep 22 23:38:37 2026 GMT
            Not After : Sep 29 23:38:37 2026 GMT
        Subject: CN=6ab3117d-ec8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f1:3d:6b:3a:f3:c2:85:90:0c:df:5c:9d:54:
                    2e:7a:af:ec:45:bc:87:d5:e2:9c:88:7f:b4:99:49:
                    08:e0:74:12:d0:cf:84:ea:4b:7f:8e:43:28:59:8c:
                    d6:e7:f3:e0:e0:b3:68:85:f2:6b:1c:d5:81:af:82:
                    48:03:89:85:eb:77:e9:d6:d7:6a:ff:02:6b:c3:69:
                    8c:0b:a4:c6:e8:a5:f3:27:fc:aa:d4:48:0d:cb:30:
                    ba:4a:1a:cf:71:ac:dc:f5:f9:75:0f:eb:dd:2b:1d:
                    1f:1f:c2:ee:6c:1b:63:67:94:0e:eb:35:e9:82:3c:
                    01:c9:41:13:83:0c:fc:51:70:ed:58:f2:c3:8e:98:
                    08:4e:1d:dc:e4:a2:68:74:09:91:fa:a3:f9:5d:23:
                    3e:40:e7:5e:78:60:b4:3e:ef:3e:5c:e4:db:84:82:
                    d4:87:3a:8c:8f:0b:90:59:16:5a:67:7f:5f:9f:96:
                    4c:fb:1b:18:fc:d4:e7:13:52:84:27:e6:6e:5a:9f:
                    47:c1:d8:4d:07:db:32:e4:f9:0c:f2:a9:91:30:49:
                    45:1b:23:47:dd:44:89:2b:d2:9b:59:ea:40:78:37:
                    57:a0:a1:0c:9d:5f:db:01:36:b4:b3:81:64:c9:82:
                    5e:05:d3:8c:10:96:67:4b:4b:09:8d:a3:a0:05:d8:
                    27:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:FB:71:8E:61:AE:58:C2:9E:B7:4D:A5:A2:04:27:34:92:8A:21:90
            X509v3 Authority Key Identifier:
                keyid:C2:A2:EB:4C:F9:10:27:78:A4:2E:15:CC:D2:0A:58:4E:DC:ED:C2:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqLrTPkQJ3ikLhXM0gpYTtztwnI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:6e:ee:8e:5f:a6:9a:23:d2:69:ea:20:4c:12:3b:09:ee:db:
         95:42:90:08:e4:2f:fe:e5:98:da:1b:ec:6c:9d:de:08:1a:3f:
         5c:63:c9:82:71:6b:cd:f3:f3:33:69:0b:5c:bc:1e:71:11:39:
         bf:7b:29:f2:67:35:ad:ab:34:33:b8:f6:f9:de:44:6c:79:2f:
         fc:cb:2c:9f:bc:e2:46:7e:99:45:8f:a9:4c:0e:a7:1f:28:48:
         f2:63:71:50:98:9c:78:ab:45:4b:26:55:79:20:2c:0f:21:03:
         9d:53:53:b3:ca:54:05:d9:ad:62:65:4b:a6:18:d3:df:f2:82:
         07:83:2f:76:72:04:77:6f:1f:64:5c:99:c4:4b:67:9a:40:99:
         dd:5a:33:8a:a3:5e:af:ef:60:8b:c5:0f:35:53:a6:8c:58:a6:
         09:ff:0e:f4:c0:24:ee:5e:40:6b:7c:18:01:a0:7b:67:a2:f0:
         24:ff:60:f8:cc:52:b3:5b:68:f8:ef:34:94:16:b8:fa:40:3a:
         82:9a:b2:3f:18:7a:ca:e6:b0:10:47:4e:a7:f3:e9:89:5d:71:
         6d:b9:8f:87:8f:09:01:3b:6f:4b:cf:1c:97:6a:25:aa:94:da:
         80:8f:57:77:65:1a:9b:7d:f5:2b:48:c6:9a:2c:6f:19:cc:b6:
         08:cb:95:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:04:25 2026 by rpki-client