Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.mft
File:                     WQ0nhfMG6JFKHf6bJ9V8a4n82pM.mft (raw, json)
Hash identifier:          WWxb2t3R8YestRfSR3jRQ068bhL/EA46fkWblkrWITk=
Subject key identifier:   1B:10:DF:D1:93:C5:58:19:E2:4A:AB:0B:69:79:50:BE:66:F7:F8:79
Authority key identifier: 59:0D:27:85:F3:06:E8:91:4A:1D:FE:9B:27:D5:7C:6B:89:FC:DA:93
Certificate issuer:       /CN=A91376D4/serialNumber=590D2785F306E8914A1DFE9B27D57C6B89FCDA93
Certificate serial:       07F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.mft
Manifest number:          07E8
Signing time:             Mon 28 Sep 2026 21:28:03 +0000
Manifest this update:     Mon 28 Sep 2026 21:28:02 +0000
Manifest next update:     Mon 05 Oct 2026 21:28:02 +0000
Files and hashes:         1: WQ0nhfMG6JFKHf6bJ9V8a4n82pM.crl (hash: ZRkau8YARacTWkepmrqO1c+jgEu+92tLZgc+tDcziXI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.crl
                          rsync://rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 21:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2036 (0x7f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91376D4, serialNumber=590D2785F306E8914A1DFE9B27D57C6B89FCDA93
        Validity
            Not Before: Sep 28 21:28:02 2026 GMT
            Not After : Oct  5 21:28:02 2026 GMT
        Subject: CN=6abadbe3-3814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:51:bf:39:bd:8c:5d:23:c1:d8:d7:cd:24:1d:
                    ff:ca:e6:f6:2d:5f:7b:3b:47:a9:20:df:d6:b7:49:
                    5b:d6:e0:86:cb:5d:ed:0a:23:6e:03:9c:99:a7:bf:
                    b8:1d:5a:60:fb:83:ec:d0:23:76:43:ce:ff:77:30:
                    e8:f5:25:5d:aa:1e:c2:47:86:e7:2c:65:a2:49:c6:
                    61:39:9e:30:64:d3:e8:01:16:55:d2:87:34:98:f4:
                    13:86:a4:e4:b5:f2:38:e1:a3:b9:7d:38:a6:ce:7b:
                    b2:c2:31:a1:5c:38:34:6c:59:bf:7b:04:2b:88:81:
                    e9:36:e8:5b:0f:38:c7:cb:ad:a8:bd:cb:ff:49:e0:
                    6e:89:00:1b:cc:a7:14:cc:06:17:5f:e0:b2:96:8f:
                    34:1d:3a:4e:d6:cb:54:31:01:75:b6:f5:f9:dd:12:
                    bc:9d:85:a3:3c:2c:c4:37:f3:58:5b:73:2b:85:7c:
                    d5:fd:b7:ee:57:ff:c0:20:8e:ec:34:41:ae:a5:ec:
                    96:d2:de:76:f5:3b:82:50:14:3b:15:39:4e:7a:9e:
                    d1:2e:6d:4d:6d:cc:31:16:81:bd:51:31:ac:a5:ed:
                    99:fb:1a:20:2f:56:2c:a6:b1:b4:25:17:15:d2:12:
                    9f:1d:92:e9:06:ff:37:02:2a:54:bb:99:5f:05:e4:
                    42:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:10:DF:D1:93:C5:58:19:E2:4A:AB:0B:69:79:50:BE:66:F7:F8:79
            X509v3 Authority Key Identifier:
                keyid:59:0D:27:85:F3:06:E8:91:4A:1D:FE:9B:27:D5:7C:6B:89:FC:DA:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:de:24:8f:2c:fb:e8:91:0c:e9:fa:b5:56:fc:2d:79:53:c7:
         a3:10:b4:c5:43:96:0c:2f:a0:45:1d:9f:1f:c0:53:44:23:4d:
         6d:4a:0d:e6:7b:c6:71:86:4e:fd:12:64:76:dc:70:d7:df:f3:
         01:00:fa:a3:1f:1e:6a:82:33:a7:f4:b1:b2:f4:8f:83:ec:7e:
         0a:8a:b8:26:39:bb:95:5e:ad:d5:b7:c3:60:5c:96:8c:0c:0d:
         0d:c2:c5:2f:41:fc:23:4c:90:a8:e9:f5:f3:cb:82:c8:5a:bc:
         ba:fe:69:db:69:65:01:f5:41:8c:4e:d8:33:c1:57:ef:c5:8e:
         5e:f9:c6:c2:d3:bb:65:5e:f6:ec:41:66:93:57:36:02:6e:f5:
         1f:1b:d9:5a:1f:5c:35:d3:a8:f4:bc:1a:d1:4f:18:3d:a2:c3:
         68:dd:3a:c0:7c:c5:ce:dc:63:78:b7:a0:6d:ed:be:1f:cb:0a:
         5e:ca:b8:73:72:4b:56:44:eb:21:11:ce:75:5a:cd:aa:15:db:
         77:8f:8a:1a:f0:4a:54:6c:19:6b:bb:61:91:95:40:87:f0:a5:
         62:1d:6a:d5:f5:bb:37:1e:d2:6f:7f:25:d7:84:99:a7:b8:42:
         55:20:4f:aa:e6:a2:c6:6d:52:c3:99:f9:d2:71:fa:cd:f1:6d:
         96:0e:2f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:46:11 2026 by rpki-client