Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.mft
File:                     wTdkoKY6d2fzpHXXqBro3xiv4I0.mft (raw, json)
Hash identifier:          0iu9wq3cS41M7beTFH322WmuH87nUan+9U5e5fKxj9g=
Subject key identifier:   3D:24:91:0F:43:A5:58:3E:51:C0:27:86:E5:03:94:8D:87:E5:31:2F
Authority key identifier: C1:37:64:A0:A6:3A:77:67:F3:A4:75:D7:A8:1A:E8:DF:18:AF:E0:8D
Certificate issuer:       /CN=A919941E/serialNumber=C13764A0A63A7767F3A475D7A81AE8DF18AFE08D
Certificate serial:       02C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTdkoKY6d2fzpHXXqBro3xiv4I0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.mft
Manifest number:          02BA
Signing time:             Wed 23 Sep 2026 01:19:27 +0000
Manifest this update:     Wed 23 Sep 2026 01:19:26 +0000
Manifest next update:     Wed 30 Sep 2026 01:19:26 +0000
Files and hashes:         1: wTdkoKY6d2fzpHXXqBro3xiv4I0.crl (hash: uaxDerEEF1kfGhByN1XMI2IbB+WcvBcF8YEmQHc2a5Y=)
                          2: 8A7D7EA2426B11F0B0160739C4F9AE02.roa (hash: y6sr7tbJEN2rlUZBa3aIr3fhInWoQ8HE4shLL1FfQsw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.crl
                          rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTdkoKY6d2fzpHXXqBro3xiv4I0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 01:19:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 710 (0x2c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919941E, serialNumber=C13764A0A63A7767F3A475D7A81AE8DF18AFE08D
        Validity
            Not Before: Sep 23 01:19:26 2026 GMT
            Not After : Sep 30 01:19:26 2026 GMT
        Subject: CN=6ab3291f-3eb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5d:ce:93:83:77:1b:2b:e5:31:ef:4b:f4:05:
                    5a:3d:e6:69:c4:e4:21:a9:68:11:da:c8:ff:70:eb:
                    a6:2d:10:5f:01:20:a1:b0:2f:09:59:5c:2e:f1:c9:
                    96:e3:4b:dc:41:9f:cc:8c:69:4e:c0:fc:04:80:66:
                    1a:b9:ef:96:04:81:17:61:ea:99:a4:dc:01:bc:2c:
                    37:a6:74:4c:f3:9b:93:ae:09:a6:f2:0d:1a:af:86:
                    2e:df:cd:3a:d5:32:ce:1d:03:55:fa:58:b4:a1:8f:
                    5d:1a:6b:96:8f:46:6f:45:64:a0:33:3e:c0:b8:ff:
                    fa:79:2b:ff:00:4c:93:e3:47:27:2e:a1:b1:3d:d0:
                    bf:38:fa:a0:a7:bd:d5:75:18:f2:d5:3b:93:d9:b4:
                    12:e6:20:be:ab:9b:90:c9:1a:b2:d4:c9:80:05:ab:
                    f5:11:2c:38:61:9f:47:44:e0:65:f0:b6:55:84:8c:
                    9b:44:c2:d5:a9:80:a3:d5:0d:4b:10:af:5f:d2:a7:
                    d9:5d:fb:b4:f2:a4:6d:72:7a:99:c9:87:94:5c:08:
                    8c:db:95:e2:ba:b3:5c:5c:6c:c0:2f:dd:5f:ba:cc:
                    d8:60:38:0e:c7:f4:f5:11:66:83:ec:fa:22:23:7c:
                    cb:04:ed:f7:a3:9f:64:c2:69:8b:26:8d:05:9d:68:
                    d9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:24:91:0F:43:A5:58:3E:51:C0:27:86:E5:03:94:8D:87:E5:31:2F
            X509v3 Authority Key Identifier:
                keyid:C1:37:64:A0:A6:3A:77:67:F3:A4:75:D7:A8:1A:E8:DF:18:AF:E0:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTdkoKY6d2fzpHXXqBro3xiv4I0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:43:54:80:eb:c2:78:8c:16:aa:07:fa:f5:92:57:72:89:6f:
         88:b7:a9:04:37:d1:e3:b1:72:de:94:a2:a8:be:96:a2:a7:00:
         6b:ba:4a:d8:3b:bb:eb:c3:7d:8c:7d:9a:5e:9d:65:72:6a:d3:
         7f:52:d3:2b:c1:c8:a0:ac:20:5d:09:d1:1c:60:b9:48:03:7d:
         9d:64:a3:4c:c7:a7:f9:3f:fa:50:29:30:6e:eb:f8:55:d4:a9:
         33:24:4e:0e:c7:75:0f:cc:cc:d8:ed:3d:73:5a:49:48:2d:74:
         85:48:98:9a:28:a7:ae:08:c0:85:5d:17:31:ac:3f:2b:cf:70:
         40:a0:2c:a2:49:51:49:64:71:7b:ef:8f:f8:8b:d1:fb:f2:d1:
         ea:75:f6:14:c7:63:69:f0:f8:43:50:db:7c:57:26:61:42:f2:
         55:cc:78:1f:9b:52:78:e8:62:85:70:5d:81:93:e3:19:67:ad:
         f4:83:28:c1:52:f9:88:3d:95:5d:e2:9b:69:b7:0a:bc:03:19:
         6b:33:42:a4:70:45:57:6b:4d:c3:3e:3b:a8:42:52:aa:f3:b2:
         72:23:44:9c:f1:e5:73:22:e5:25:d4:7a:52:ff:f5:3b:69:be:
         88:53:c0:1c:00:a0:1b:1c:41:d3:69:54:62:37:84:87:04:69:
         91:91:05:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:03:14 2026 by rpki-client