Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.mft
File:                     WKqOb2Cb9VgUA20moSpeKyUViTo.mft (raw, json)
Hash identifier:          N4i4zlh97+mtvVXNx+UuAZA4SzYe7m3PvktJs/HyKAs=
Subject key identifier:   76:9A:80:DD:A6:FE:83:11:B3:FD:F4:42:3B:44:25:6D:E8:92:DA:1A
Authority key identifier: 58:AA:8E:6F:60:9B:F5:58:14:03:6D:26:A1:2A:5E:2B:25:15:89:3A
Certificate issuer:       /CN=A914EBB2/serialNumber=58AA8E6F609BF55814036D26A12A5E2B2515893A
Certificate serial:       9A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKqOb2Cb9VgUA20moSpeKyUViTo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.mft
Manifest number:          93
Signing time:             Sat 03 Oct 2026 04:43:07 +0000
Manifest this update:     Sat 03 Oct 2026 04:43:06 +0000
Manifest next update:     Sat 10 Oct 2026 04:43:06 +0000
Files and hashes:         1: WKqOb2Cb9VgUA20moSpeKyUViTo.crl (hash: SPK8IM8QIg2rkW++p/UGe3R1Z2HUiGBYWULTMwVF3ck=)
                          2: D23FC546011111F1B3598E67446F56BC.roa (hash: vcrWn/T7PWva5wilhUJF83D5sEdB2Zxd5D/0CZVE3OU=)
                          3: 651B78142DD711F187F45729B3833773.roa (hash: orGvvH8EtrQFqpfDS8Xvz4vEWTgyCI2f9BcO9d6cJBw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.crl
                          rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKqOb2Cb9VgUA20moSpeKyUViTo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 04:43:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154 (0x9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EBB2, serialNumber=58AA8E6F609BF55814036D26A12A5E2B2515893A
        Validity
            Not Before: Oct  3 04:43:06 2026 GMT
            Not After : Oct 10 04:43:06 2026 GMT
        Subject: CN=6ac087db-00b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:dd:a8:38:94:1d:eb:82:73:50:6d:1b:c0:7d:
                    a4:13:db:b9:3b:e5:bf:5c:32:77:65:6a:cb:6d:f6:
                    da:74:04:43:3b:70:5e:8d:ca:be:f9:3b:b4:d7:6d:
                    8a:4a:1d:a9:4b:a8:23:d4:e2:24:b7:47:f5:6c:05:
                    65:b3:73:94:f6:c8:98:e6:71:c3:77:e8:d3:24:b1:
                    2b:c6:f2:07:cb:a7:44:86:80:64:de:d1:6e:75:4b:
                    70:3d:e1:1b:3d:6d:80:d9:0a:29:56:4b:ac:35:9e:
                    0a:ed:96:5b:b2:40:ae:ed:67:7d:fe:31:af:a3:40:
                    42:8c:80:14:9a:c2:9d:3a:9f:0d:83:b5:b6:14:13:
                    06:38:88:e1:b9:a0:cf:0e:bf:7a:64:5c:d9:4f:f5:
                    23:ae:24:52:8b:bb:b6:c5:a1:1c:d1:6a:12:fa:0d:
                    2c:06:e0:07:56:bd:97:3f:22:d0:33:e7:23:37:44:
                    0c:e6:4c:73:43:67:31:e1:76:7b:da:d2:c4:95:09:
                    5f:e8:78:b3:15:37:fb:77:a2:8e:61:4c:19:a4:18:
                    af:4c:1e:28:00:c0:73:0d:92:9d:0a:87:3b:7a:c7:
                    2f:c2:35:3e:bc:c8:5a:73:35:e0:eb:7a:94:ed:3a:
                    f1:b8:54:52:be:52:ca:0b:e0:5b:97:8b:3c:63:52:
                    f6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:9A:80:DD:A6:FE:83:11:B3:FD:F4:42:3B:44:25:6D:E8:92:DA:1A
            X509v3 Authority Key Identifier:
                keyid:58:AA:8E:6F:60:9B:F5:58:14:03:6D:26:A1:2A:5E:2B:25:15:89:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKqOb2Cb9VgUA20moSpeKyUViTo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:a6:6a:56:14:3f:4f:6b:14:56:c3:86:91:0e:41:3d:39:d5:
         65:69:aa:71:a0:94:30:8f:75:7b:1d:e1:e5:0f:a8:48:d1:64:
         dd:8b:73:51:f4:4d:21:e9:04:e2:b0:21:41:88:0f:31:e1:b6:
         d2:da:3b:59:fd:58:9d:cf:65:3e:7d:bd:fc:f0:df:95:aa:a5:
         d2:ab:fe:d2:5c:b6:88:19:90:ae:d8:58:29:92:e2:c6:b6:5b:
         f4:67:91:a9:a3:3d:76:2c:f4:8e:49:5c:c8:a2:f4:86:01:9c:
         a2:3f:b1:e7:ee:02:53:f4:da:70:ca:83:88:9b:a1:78:71:be:
         f5:b6:a0:42:10:56:14:bf:82:cd:78:6a:66:11:ab:f2:ed:be:
         70:e5:8a:2d:29:47:e2:a8:43:f7:1a:11:f5:d4:5a:4e:2d:46:
         5c:d1:ee:90:3d:d2:1e:ce:99:19:ce:e5:e1:d9:f3:6c:e8:30:
         6f:cb:48:c2:d9:aa:34:f0:2a:80:0c:8b:e2:fa:8d:8b:db:b9:
         51:79:2d:1c:fc:b8:6a:21:7b:da:0a:99:ed:51:5f:51:47:10:
         5f:27:cc:fd:12:73:a7:3e:83:31:4d:6c:b4:d2:f7:22:3f:ab:
         3d:71:e3:d0:15:1c:e7:44:03:df:0d:ea:b4:03:06:22:3d:f2:
         7c:63:90:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 12:56:17 2026 by rpki-client