Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D1BD/A706F8B2A76211F08FDE3413C4F9AE02/w5XQGgjBWiERA86BBh4mgk9Wvdg.mft
File:                     w5XQGgjBWiERA86BBh4mgk9Wvdg.mft (raw, json)
Hash identifier:          7PSX2G49BrNrv1twg5+89wOaUIzkgS5i9H4c7x95UDE=
Subject key identifier:   E2:50:D4:B8:85:7D:D3:30:CD:33:53:19:A4:61:F2:BB:50:AE:98:C4
Authority key identifier: C3:95:D0:1A:08:C1:5A:21:11:03:CE:81:06:1E:26:82:4F:56:BD:D8
Certificate issuer:       /CN=A918D1BD/serialNumber=C395D01A08C15A211103CE81061E26824F56BDD8
Certificate serial:       C2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5XQGgjBWiERA86BBh4mgk9Wvdg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D1BD/A706F8B2A76211F08FDE3413C4F9AE02/w5XQGgjBWiERA86BBh4mgk9Wvdg.mft
Manifest number:          BC
Signing time:             Sun 27 Sep 2026 07:31:59 +0000
Manifest this update:     Sun 27 Sep 2026 07:31:58 +0000
Manifest next update:     Sun 04 Oct 2026 07:31:58 +0000
Files and hashes:         1: w5XQGgjBWiERA86BBh4mgk9Wvdg.crl (hash: +IkURRAzYI0JZFPP93QS6P1fT66z6kIwLN73w4JFAD8=)
                          2: 32995A3A694811F1886272136D47A888.roa (hash: S2SLXPxi8XxKWyzzpI3+4CyywRMYjufpB9D5r3iT1gg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D1BD/A706F8B2A76211F08FDE3413C4F9AE02/w5XQGgjBWiERA86BBh4mgk9Wvdg.crl
                          rsync://rpki.apnic.net/member_repository/A918D1BD/A706F8B2A76211F08FDE3413C4F9AE02/w5XQGgjBWiERA86BBh4mgk9Wvdg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5XQGgjBWiERA86BBh4mgk9Wvdg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 07:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 194 (0xc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D1BD, serialNumber=C395D01A08C15A211103CE81061E26824F56BDD8
        Validity
            Not Before: Sep 27 07:31:58 2026 GMT
            Not After : Oct  4 07:31:58 2026 GMT
        Subject: CN=6ab8c66f-9bfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8b:6b:13:84:28:62:e9:40:bd:f7:af:a9:67:
                    a3:a5:d7:96:df:07:fb:13:a7:c4:76:cb:3c:a4:dc:
                    d6:8c:ff:90:0d:98:2e:e7:a1:c3:c8:ec:d8:63:07:
                    c1:73:1d:9a:07:90:c3:a2:00:c4:6f:18:fd:97:0a:
                    3e:f1:27:66:cc:c3:80:81:c7:47:b3:b7:ae:27:d2:
                    f6:30:48:62:10:25:54:5c:06:6a:20:44:f5:2c:c8:
                    74:74:0b:d1:bf:c7:f6:30:b2:dc:1c:22:3e:07:4a:
                    00:3d:90:2a:f1:9a:1c:53:fc:84:94:b3:b6:f9:32:
                    a5:4c:48:07:57:1f:7e:85:0f:a0:a9:47:44:f5:5d:
                    44:8a:69:5d:f2:82:59:c5:17:c0:8e:15:a2:ac:a6:
                    b5:e8:18:37:c6:63:82:f7:c9:a0:26:c2:14:56:3e:
                    cb:89:33:92:26:3c:5e:56:a3:88:8e:82:8b:fa:1c:
                    08:cb:15:3f:b2:2c:37:00:89:33:bd:a1:6f:1c:96:
                    19:ad:01:d7:d1:0e:6a:81:b9:fa:36:1f:bd:0d:98:
                    64:6d:39:e0:82:b3:d4:95:8a:6f:15:2e:3e:b5:cd:
                    bd:31:d9:6d:b8:9b:06:29:a2:b2:f4:2c:05:3f:8f:
                    fa:28:0b:94:38:8c:5f:ee:aa:4d:8e:3b:b1:bc:f5:
                    ba:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:50:D4:B8:85:7D:D3:30:CD:33:53:19:A4:61:F2:BB:50:AE:98:C4
            X509v3 Authority Key Identifier:
                keyid:C3:95:D0:1A:08:C1:5A:21:11:03:CE:81:06:1E:26:82:4F:56:BD:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D1BD/A706F8B2A76211F08FDE3413C4F9AE02/w5XQGgjBWiERA86BBh4mgk9Wvdg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5XQGgjBWiERA86BBh4mgk9Wvdg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D1BD/A706F8B2A76211F08FDE3413C4F9AE02/w5XQGgjBWiERA86BBh4mgk9Wvdg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:e0:21:ad:cf:5d:53:e6:29:19:cf:c1:05:ed:00:53:e4:2d:
         de:c9:83:76:61:ba:a0:9b:5f:d0:a3:18:22:ea:3b:b3:78:b3:
         c6:76:f3:cf:f4:f3:6f:e9:f9:57:7d:e7:cc:1c:03:b5:a0:96:
         e2:80:ff:c9:3e:c7:a3:fb:ed:a9:97:40:27:6d:83:b9:48:b5:
         20:64:81:14:de:43:51:19:1c:2c:ee:84:54:df:b6:e7:79:cf:
         36:fd:35:ad:61:54:1e:e6:40:a6:c7:13:48:5a:0f:db:09:52:
         a0:57:ca:39:ed:ea:f3:9a:f2:99:2f:11:46:39:04:8c:62:7e:
         60:ad:65:b0:6f:30:7d:06:92:bb:35:14:ef:d9:bc:5c:20:b5:
         92:de:9d:ea:22:d1:e8:1b:75:f9:ef:8a:6d:ee:22:d2:5e:1b:
         a9:4c:e8:66:2d:83:2f:31:51:17:41:69:5b:b5:7f:67:00:9b:
         4e:25:66:11:b6:eb:52:60:e7:9b:ed:38:04:6f:11:d4:66:07:
         ad:46:13:ae:61:16:f5:df:54:13:ff:61:3f:98:4f:15:39:4f:
         42:42:5b:a6:a3:ba:e7:a5:97:7b:f4:de:6c:0e:85:ae:6f:6f:
         e4:e0:6e:2d:8d:51:ce:b7:76:56:1e:b1:9b:d8:5c:0d:49:f6:
         1f:a6:8a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 12:26:08 2026 by rpki-client