Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.mft
File:                     CWjN62Rstqq8D0IyziOx3OVMrSA.mft (raw, json)
Hash identifier:          TnzIaqjYrYoBH+4HmBhLIIgI0AQlu2wvpMXyXJGfALw=
Subject key identifier:   56:CC:73:13:3F:1D:59:1C:60:97:27:A9:64:3C:2D:31:0F:F2:2A:4F
Authority key identifier: 09:68:CD:EB:64:6C:B6:AA:BC:0F:42:32:CE:23:B1:DC:E5:4C:AD:20
Certificate issuer:       /CN=A9187CB1/serialNumber=0968CDEB646CB6AABC0F4232CE23B1DCE54CAD20
Certificate serial:       B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CWjN62Rstqq8D0IyziOx3OVMrSA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.mft
Manifest number:          B6
Signing time:             Sun 27 Sep 2026 07:31:39 +0000
Manifest this update:     Sun 27 Sep 2026 07:31:38 +0000
Manifest next update:     Sun 04 Oct 2026 07:31:38 +0000
Files and hashes:         1: CWjN62Rstqq8D0IyziOx3OVMrSA.crl (hash: erMQAHm4YFKce7yfqhP+mp4yhUIvstMbBCOG3TTcREY=)
                          2: C4FE3638A4D711F0A8D1DB3CC4F9AE02.roa (hash: bPau6Z6P+AYKpvnSxKbqaqw77/l2J2Yx/cJ0pxXB/hA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.crl
                          rsync://rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CWjN62Rstqq8D0IyziOx3OVMrSA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 07:26:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184 (0xb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187CB1, serialNumber=0968CDEB646CB6AABC0F4232CE23B1DCE54CAD20
        Validity
            Not Before: Sep 27 07:31:38 2026 GMT
            Not After : Oct  4 07:31:38 2026 GMT
        Subject: CN=6ab8c65b-319d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0d:45:fa:8d:7a:3c:7e:3d:d0:5f:bc:89:7a:
                    bf:11:5b:79:7a:b2:a8:e4:ff:e6:75:0f:53:d6:31:
                    74:17:e4:91:76:ce:86:74:4e:6c:3b:04:c7:66:22:
                    3b:5c:08:cd:c5:80:b8:8f:07:99:eb:73:20:ea:b0:
                    49:79:74:83:d8:6f:46:87:fe:d1:ca:f2:4e:b7:04:
                    14:cc:dd:25:c7:37:1e:99:28:de:5e:db:25:67:0d:
                    55:a7:11:80:52:5e:31:ce:d9:7f:aa:8f:6b:20:72:
                    16:29:70:68:3c:5f:bc:95:6a:24:2a:a7:de:b0:c5:
                    34:59:6e:95:bf:f9:68:25:04:12:05:55:dc:d3:dc:
                    62:21:98:63:29:8d:e4:96:b5:37:09:d0:e1:f7:b7:
                    eb:03:8b:d4:60:4d:d8:be:94:b6:90:2b:92:f6:a0:
                    47:7c:57:c3:f2:50:d6:56:97:30:eb:76:4f:0c:be:
                    f4:15:fb:76:a7:55:aa:5f:d3:4b:65:50:1c:5a:79:
                    84:48:e8:3e:e7:9d:87:b4:2c:e1:6b:6d:9a:91:dd:
                    05:06:d4:30:fb:92:d3:c6:dc:8b:53:60:36:0d:e2:
                    ff:0a:44:09:c9:a6:06:7c:e6:27:76:e8:0c:d3:17:
                    5b:80:43:6a:93:d6:e0:4a:65:f8:4e:81:f7:7d:8b:
                    38:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:CC:73:13:3F:1D:59:1C:60:97:27:A9:64:3C:2D:31:0F:F2:2A:4F
            X509v3 Authority Key Identifier:
                keyid:09:68:CD:EB:64:6C:B6:AA:BC:0F:42:32:CE:23:B1:DC:E5:4C:AD:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CWjN62Rstqq8D0IyziOx3OVMrSA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:cd:3b:14:f9:d9:72:44:5f:2d:b2:ed:64:d9:26:c8:af:60:
         7e:29:95:2e:be:25:37:24:c1:42:4b:10:53:6b:79:1c:60:1c:
         73:ac:5e:72:10:ad:c3:5f:9c:6c:56:86:b5:12:9f:0c:97:3e:
         0a:b0:0a:52:bf:ba:f8:08:4a:39:20:3a:d6:c1:ca:42:aa:a2:
         f1:ac:20:51:44:72:3e:71:a2:25:ea:6c:d8:40:e5:eb:d7:4c:
         c0:fb:6f:60:9e:8a:cf:b2:ba:86:aa:1c:a4:c8:2d:47:c9:7b:
         15:10:25:79:37:e2:47:b1:ae:48:d3:c6:5f:81:3d:84:9e:d7:
         6e:01:69:a6:03:5e:04:9e:ba:e2:f3:a3:52:cc:4f:01:9d:73:
         dd:59:c9:70:78:5d:cb:f3:9b:02:65:d3:6f:2c:0d:b9:b7:d5:
         8c:be:63:78:ca:7f:0a:f8:72:e6:a3:59:32:15:6f:b9:90:52:
         ae:b4:11:14:81:21:97:96:e4:d1:3b:ed:48:72:0d:21:d8:da:
         36:21:10:c9:5c:36:31:e7:fa:af:bf:84:a2:53:91:2a:0f:91:
         ec:09:8e:4d:02:7c:99:fd:81:bc:21:5f:b4:08:5d:6d:dc:ba:
         47:e3:67:e5:97:37:b5:a5:4b:ad:f4:83:2a:d5:ac:3e:c6:72:
         92:16:00:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:58:43 2026 by rpki-client