Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917F9C3/6F288AB64AB711F186F27E3ABA833773/WfcM8WVJPKOohcgfFJYqhNv7-do.mft
File:                     WfcM8WVJPKOohcgfFJYqhNv7-do.mft (raw, json)
Hash identifier:          skKGh4VgD/FPPiC3uFC0q+8d5mWgOvUH3N46Fd2Rbxs=
Subject key identifier:   93:46:24:3C:63:3A:C8:E6:3C:14:1E:90:8A:C3:EF:7B:65:89:D0:B3
Authority key identifier: 59:F7:0C:F1:65:49:3C:A3:A8:85:C8:1F:14:96:2A:84:DB:FB:F9:DA
Certificate issuer:       /CN=A917F9C3/serialNumber=59F70CF165493CA3A885C81F14962A84DBFBF9DA
Certificate serial:       48
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfcM8WVJPKOohcgfFJYqhNv7-do.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F9C3/6F288AB64AB711F186F27E3ABA833773/WfcM8WVJPKOohcgfFJYqhNv7-do.mft
Manifest number:          47
Signing time:             Wed 23 Sep 2026 08:09:40 +0000
Manifest this update:     Wed 23 Sep 2026 08:09:40 +0000
Manifest next update:     Wed 30 Sep 2026 08:09:40 +0000
Files and hashes:         1: WfcM8WVJPKOohcgfFJYqhNv7-do.crl (hash: WO5Ws6y8BgOSGkgUA/SnzwvDwceiOEz7JMzADAiBEG4=)
                          2: 6BD47C4C4AB911F18A4D3DF6BB833773.roa (hash: ebv4da5ihfjLA6qrd11hFHVIha6XG9+Q5KSSUG/SzsI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F9C3/6F288AB64AB711F186F27E3ABA833773/WfcM8WVJPKOohcgfFJYqhNv7-do.crl
                          rsync://rpki.apnic.net/member_repository/A917F9C3/6F288AB64AB711F186F27E3ABA833773/WfcM8WVJPKOohcgfFJYqhNv7-do.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfcM8WVJPKOohcgfFJYqhNv7-do.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 08:09:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F9C3, serialNumber=59F70CF165493CA3A885C81F14962A84DBFBF9DA
        Validity
            Not Before: Sep 23 08:09:40 2026 GMT
            Not After : Sep 30 08:09:40 2026 GMT
        Subject: CN=6ab38944-4db2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e4:8a:b0:a5:ba:d3:e7:f8:e0:a8:8b:9f:44:
                    a0:5b:d8:b1:32:8e:7c:09:04:88:6a:d7:a7:28:04:
                    17:30:7f:e5:de:10:ef:06:53:d5:bd:a0:4b:d6:dd:
                    c1:9b:45:ea:95:91:21:4b:95:6e:48:f6:58:6d:8e:
                    82:01:52:ff:02:d2:6a:a5:3f:57:33:b2:01:90:a0:
                    f5:da:a8:6a:64:c6:cf:89:c8:23:ce:6c:3f:f6:0e:
                    8f:d8:6e:b1:da:77:f4:60:e6:4c:41:bd:29:04:3f:
                    c7:5b:2e:60:59:37:07:92:9c:86:97:d3:f8:7e:24:
                    7c:38:37:d4:17:6a:3a:50:bb:1e:e1:f1:ce:fc:01:
                    64:29:ad:d2:93:fb:ac:f4:24:f8:e8:09:68:64:c8:
                    25:63:90:62:62:01:a7:b1:eb:ed:e4:9b:38:bc:5c:
                    ad:56:22:29:f0:13:1b:3b:b7:97:5c:d4:79:1d:88:
                    e7:d7:99:d1:6f:57:ac:c3:c3:06:61:ad:bf:4f:de:
                    ca:64:11:56:90:c7:7f:04:33:44:2e:73:9e:3e:67:
                    5f:c6:64:99:e9:93:20:b7:e4:d3:85:f7:59:b9:a8:
                    25:54:8f:2e:a7:c1:c1:90:2a:57:e4:f3:1e:51:9a:
                    b9:5c:f8:4c:ac:84:77:1e:02:40:f7:48:70:92:15:
                    9b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:46:24:3C:63:3A:C8:E6:3C:14:1E:90:8A:C3:EF:7B:65:89:D0:B3
            X509v3 Authority Key Identifier:
                keyid:59:F7:0C:F1:65:49:3C:A3:A8:85:C8:1F:14:96:2A:84:DB:FB:F9:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F9C3/6F288AB64AB711F186F27E3ABA833773/WfcM8WVJPKOohcgfFJYqhNv7-do.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfcM8WVJPKOohcgfFJYqhNv7-do.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F9C3/6F288AB64AB711F186F27E3ABA833773/WfcM8WVJPKOohcgfFJYqhNv7-do.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:1e:92:4b:c3:88:fd:c9:91:6c:93:2c:09:50:da:5a:d6:e7:
         11:ef:50:17:0b:01:53:a1:ad:76:62:94:f0:16:4d:e2:ed:e4:
         19:4e:e6:ed:1c:4d:da:68:be:16:2d:2e:0e:3e:9c:d4:fd:65:
         d8:93:9d:69:6d:35:14:7e:ba:a6:84:c5:a4:42:57:aa:16:59:
         ce:ba:0b:e0:dc:9f:7a:3f:07:90:9a:1c:bb:06:b5:ba:1e:bc:
         8c:1b:44:fb:53:1b:c1:a2:68:75:01:78:09:02:e6:b7:19:9d:
         1f:a2:b3:eb:93:37:57:88:f0:ec:86:8b:8e:5e:6b:6e:24:3f:
         58:6f:7e:9e:6d:96:08:b4:c2:25:e9:65:f0:c2:a7:c4:3b:63:
         07:a8:6e:92:21:a4:d0:f4:d7:0b:bc:5a:d7:4b:17:5c:9f:c5:
         86:09:49:91:19:ea:b1:58:df:1c:93:32:dc:8f:8f:4e:31:e0:
         46:25:33:da:bd:60:39:e5:3d:63:57:0e:c5:a7:23:ff:f2:11:
         ae:1a:3e:83:a1:7a:83:37:75:a4:8c:3c:41:95:ea:50:d0:76:
         d1:ea:d2:41:99:5c:91:93:53:35:22:a3:73:b3:42:a0:2f:60:
         50:3c:d4:31:c9:f5:5d:d0:93:68:36:96:58:8d:39:dd:bb:84:
         36:f5:9c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:50:29 2026 by rpki-client