Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
File:                     wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft (raw, json)
Hash identifier:          +1DFPIhRr76jCg9AK5Zk79bM/QPZcNO2aoMGPeU+eFY=
Subject key identifier:   C3:2E:F8:29:BE:3D:FA:39:27:04:8E:79:D3:89:49:6C:00:88:12:5A
Authority key identifier: C1:48:53:D9:BD:3F:78:F6:48:0C:63:35:20:76:94:3B:C7:9B:9F:C2
Certificate issuer:       /CN=A91478E2/serialNumber=C14853D9BD3F78F6480C63352076943BC79B9FC2
Certificate serial:       1896
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
Manifest number:          1859
Signing time:             Fri 02 Oct 2026 16:39:12 +0000
Manifest this update:     Fri 02 Oct 2026 16:39:11 +0000
Manifest next update:     Fri 09 Oct 2026 16:39:11 +0000
Files and hashes:         1: wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl (hash: XL0XR5D0dV2aWJ687ghUoUzN9JaFNK0+UCxUoDJwEWQ=)
                          2: 51635E7E32B011EE89DFF774C4F9AE02.roa (hash: n1u9iSyb9bdQc1QOK/WYlhLEbmOoYxOlffVDVXq1fW4=)
                          3: 507A39A632B011EE89DFF774C4F9AE02.roa (hash: t9gfSRrRBhg5aKee6bLsa2HCvO/wXMYsjYUGDi3D7i0=)
                          4: 047C0BCC373211F1887E264A90833773.roa (hash: LWhnCQp9VfJYhsJdhzflBR7RBHFtlmggsyH3Tj4cj0M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl
                          rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 16:39:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6294 (0x1896)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91478E2, serialNumber=C14853D9BD3F78F6480C63352076943BC79B9FC2
        Validity
            Not Before: Oct  2 16:39:11 2026 GMT
            Not After : Oct  9 16:39:11 2026 GMT
        Subject: CN=6abfde30-4801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a4:4a:16:87:69:55:cb:c1:2f:ba:07:d9:d3:
                    52:de:2e:f4:c4:21:2f:7c:2a:c3:2f:55:b0:01:fc:
                    25:ad:9e:99:be:91:7e:5d:c1:60:00:8b:f5:70:ac:
                    85:01:c6:1a:c1:88:49:e2:ba:ad:70:cb:37:e9:c9:
                    40:cb:d7:33:a0:26:32:0d:e4:3b:26:22:cb:80:76:
                    d5:26:6e:66:a1:58:90:d0:d1:0b:e8:ef:89:1f:0a:
                    f3:53:62:1a:c4:e4:a3:55:87:41:b0:08:d3:c7:d8:
                    df:31:7f:d4:6d:a7:67:75:a7:63:df:c2:82:72:d2:
                    15:50:0a:17:66:25:fe:c1:dd:83:5e:ad:f2:2a:54:
                    70:2f:00:8a:f9:85:37:15:d5:53:3f:ca:6f:5d:00:
                    78:85:a0:b4:56:51:97:c2:64:78:de:89:ba:43:56:
                    9c:95:3c:ba:56:39:76:56:73:0d:81:77:d9:b7:51:
                    a0:b8:6e:3e:70:4a:6b:9a:30:da:e0:63:2a:e3:e1:
                    f4:ec:57:6c:03:aa:fc:a6:a4:b4:c6:e9:79:bc:2a:
                    53:3c:f0:a4:df:ac:ed:df:16:23:e2:58:46:9f:c6:
                    8d:a1:2e:5c:73:23:89:65:01:cf:83:b8:7a:11:6e:
                    27:26:b7:4d:6b:91:2a:fb:c9:ed:bc:ca:11:1a:e9:
                    1f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:2E:F8:29:BE:3D:FA:39:27:04:8E:79:D3:89:49:6C:00:88:12:5A
            X509v3 Authority Key Identifier:
                keyid:C1:48:53:D9:BD:3F:78:F6:48:0C:63:35:20:76:94:3B:C7:9B:9F:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:9c:1e:aa:8f:df:a7:b5:c8:49:c8:ee:6f:4b:29:5f:2f:f8:
         f5:e1:b4:11:cb:58:87:0a:bd:b0:2c:2a:a1:02:55:49:21:36:
         af:97:7c:06:58:f6:bb:17:b2:21:7c:0c:9c:08:2e:6b:2d:79:
         bd:d4:6e:46:85:b3:2e:ba:54:0a:a1:09:09:7b:78:58:55:da:
         fb:5b:1c:a8:0a:d7:c8:67:90:f3:db:42:69:82:d4:5f:d5:4a:
         f1:a8:1b:b3:f9:88:4b:6b:a1:98:ac:21:b6:e5:e0:f7:9e:28:
         95:11:e2:dc:98:ec:fa:72:44:1b:54:6f:25:13:dc:d9:01:c8:
         48:5f:0f:e4:43:96:c1:f5:51:0b:d1:9f:ed:3c:cf:18:bf:fe:
         97:09:8a:9d:a1:6a:1a:55:fa:0b:20:d1:71:28:e4:f2:ff:7e:
         c9:b0:ea:5e:e8:18:82:72:10:58:81:99:05:55:ad:05:71:9c:
         74:ea:1c:03:d0:7b:bc:e3:10:73:63:8a:4a:32:c4:14:37:7f:
         1d:f9:a7:90:e6:43:7c:80:46:95:3e:92:6e:23:e6:32:46:5d:
         d5:e2:62:90:0c:f5:7b:1a:24:99:dd:f0:d5:fa:b3:b6:60:f2:
         2d:9f:ea:d5:00:39:14:bf:67:70:c8:fd:b7:9c:eb:40:7d:f7:
         77:e1:4a:d1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDc4RTIxMTAvBgNVBAUTKEMxNDg1M0Q5QkQzRjc4RjY0ODBDNjMzNTIwNzY5NDNC
Qzc5QjlGQzIwHhcNMjYxMDAyMTYzOTExWhcNMjYxMDA5MTYzOTExWjAYMRYwFAYD
VQQDEw02YWJmZGUzMC00ODAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx6RKFodpVcvBL7oH2dNS3i70xCEvfCrDL1WwAfwlrZ6ZvpF+XcFgAIv1cKyF
AcYawYhJ4rqtcMs36clAy9czoCYyDeQ7JiLLgHbVJm5moViQ0NEL6O+JHwrzU2Ia
xOSjVYdBsAjTx9jfMX/Ubadndadj38KCctIVUAoXZiX+wd2DXq3yKlRwLwCK+YU3
FdVTP8pvXQB4haC0VlGXwmR43om6Q1aclTy6Vjl2VnMNgXfZt1GguG4+cEprmjDa
4GMq4+H07FdsA6r8pqS0xul5vCpTPPCk36zt3xYj4lhGn8aNoS5ccyOJZQHPg7h6
EW4nJrdNa5Eq+8ntvMoRGukfEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMMu+Cm+
Pfo5JwSOedOJSWwAiBJaMB8GA1UdIwQYMBaAFMFIU9m9P3j2SAxjNSB2lDvHm5/C
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzhFMi80QzkwOEEyMkUw
QjYxMUU3QjJEMEZEODBDNEY5QUUwMi93VWhUMmIwX2VQWklER00xSUhhVU84ZWJu
OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dVaFQyYjBfZVBaSURHTTFJSGFVTzhlYm44SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NzhFMi80QzkwOEEyMkUwQjYxMUU3QjJEMEZEODBDNEY5QUUwMi93VWhUMmIwX2VQ
WklER00xSUhhVU84ZWJuOEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIZweqo/fp7XIScjub0spXy/49eG0EctYhwq9sCwqoQJVSSE2r5d8Blj2uxey
IXwMnAguay15vdRuRoWzLrpUCqEJCXt4WFXa+1scqArXyGeQ89tCaYLUX9VK8agb
s/mIS2uhmKwhtuXg954olRHi3Jjs+nJEG1RvJRPc2QHISF8P5EOWwfVRC9Gf7TzP
GL/+lwmKnaFqGlX6CyDRcSjk8v9+ybDqXugYgnIQWIGZBVWtBXGcdOocA9B7vOMQ
c2OKSjLEFDd/HfmnkOZDfIBGlT6SbiPmMkZd1eJikAz1exokmd3w1fqztmDyLZ/q
1QA5FL9ncMj9t5zrQH33d+FK0Q==
-----END CERTIFICATE-----
Generated at Sun Oct 4 02:39:55 2026 by rpki-client