Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AC1CF/FA71B1D81DAD11F185E42FBE3D3D8C67/WWtkT4ORAfVZi9Egyt6VSFGgzko.mft
File:                     WWtkT4ORAfVZi9Egyt6VSFGgzko.mft (raw, json)
Hash identifier:          WLF+FEvsABI4aVXjZgLEemL7MBw8+IYk7eoXC0hOOVQ=
Subject key identifier:   D5:3E:20:2A:23:1F:FD:DD:30:0B:7A:0F:BC:FD:81:59:6D:3C:96:D1
Authority key identifier: 59:6B:64:4F:83:91:01:F5:59:8B:D1:20:CA:DE:95:48:51:A0:CE:4A
Certificate issuer:       /CN=A91AC1CF/serialNumber=596B644F839101F5598BD120CADE954851A0CE4A
Certificate serial:       65
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWtkT4ORAfVZi9Egyt6VSFGgzko.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC1CF/FA71B1D81DAD11F185E42FBE3D3D8C67/WWtkT4ORAfVZi9Egyt6VSFGgzko.mft
Manifest number:          64
Signing time:             Mon 21 Sep 2026 08:03:13 +0000
Manifest this update:     Mon 21 Sep 2026 08:03:12 +0000
Manifest next update:     Mon 28 Sep 2026 08:03:12 +0000
Files and hashes:         1: WWtkT4ORAfVZi9Egyt6VSFGgzko.crl (hash: NOERLbmse78kYQCxSEhYP9nGXgkrYXV9xFG2UKMHQ78=)
                          2: 840FB8CC1DAE11F1AA3EBAC03D3D8C67.roa (hash: r5BB+japYC6seEdkVZLK22Dexuxs6mCJDX2FzRf3yv4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC1CF/FA71B1D81DAD11F185E42FBE3D3D8C67/WWtkT4ORAfVZi9Egyt6VSFGgzko.crl
                          rsync://rpki.apnic.net/member_repository/A91AC1CF/FA71B1D81DAD11F185E42FBE3D3D8C67/WWtkT4ORAfVZi9Egyt6VSFGgzko.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWtkT4ORAfVZi9Egyt6VSFGgzko.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 08:03:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC1CF, serialNumber=596B644F839101F5598BD120CADE954851A0CE4A
        Validity
            Not Before: Sep 21 08:03:12 2026 GMT
            Not After : Sep 28 08:03:12 2026 GMT
        Subject: CN=6ab0e4c1-bd67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2f:76:30:4e:d9:57:ca:ff:75:b5:04:c9:38:
                    d2:54:e2:c7:5a:25:77:f0:0d:1d:e9:af:7c:62:ec:
                    24:db:a7:97:2a:03:fe:3a:2e:9c:8a:13:fa:29:a7:
                    73:6d:82:10:ad:ee:84:df:6a:0e:e6:5c:b5:9c:98:
                    e5:60:ac:12:26:b9:5b:5b:7e:53:c3:8e:3b:06:e1:
                    66:5b:6a:29:98:04:2e:85:7a:5f:31:57:5e:0a:16:
                    8a:92:e6:7b:c5:0b:a8:3a:89:7b:96:af:f8:f8:08:
                    ce:7e:37:92:a7:11:d2:24:2c:b8:df:c2:b2:c9:92:
                    ae:41:60:0c:f1:b8:e7:80:0d:92:39:83:15:7e:d1:
                    ed:90:5b:7b:04:54:c4:26:7d:53:ae:cb:3c:09:1e:
                    39:79:81:1d:98:72:5a:ac:34:5d:11:b1:6c:5d:b9:
                    62:ca:30:94:a1:6c:c1:d1:f8:68:65:28:5c:68:0f:
                    37:39:88:15:26:4f:81:2b:57:c5:68:cc:0c:13:ca:
                    42:bf:66:ab:26:1c:7f:f5:2d:4d:22:ac:96:9d:c3:
                    f9:ef:ee:c1:0a:5f:3a:9a:e4:8c:60:fe:73:b2:e0:
                    7f:5a:64:e4:49:fa:76:2b:3f:45:12:cc:31:cd:09:
                    f2:e1:dd:4c:b4:13:d9:70:50:12:10:03:b4:e7:20:
                    36:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:3E:20:2A:23:1F:FD:DD:30:0B:7A:0F:BC:FD:81:59:6D:3C:96:D1
            X509v3 Authority Key Identifier:
                keyid:59:6B:64:4F:83:91:01:F5:59:8B:D1:20:CA:DE:95:48:51:A0:CE:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC1CF/FA71B1D81DAD11F185E42FBE3D3D8C67/WWtkT4ORAfVZi9Egyt6VSFGgzko.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWtkT4ORAfVZi9Egyt6VSFGgzko.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC1CF/FA71B1D81DAD11F185E42FBE3D3D8C67/WWtkT4ORAfVZi9Egyt6VSFGgzko.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:43:e4:69:c4:67:22:d5:df:54:27:d8:a9:95:3a:9b:16:d6:
         fa:32:b4:c3:a2:77:97:1f:2a:e2:61:5b:7b:4d:a9:3d:ae:6a:
         c7:e3:00:99:f2:3b:16:b2:2b:d2:cb:10:35:ef:3a:08:1a:77:
         43:ff:57:31:26:fa:e9:cb:ff:72:de:42:cd:88:10:03:bf:70:
         31:55:4e:81:33:b7:1c:67:a9:d6:6e:34:f7:df:e1:92:e1:94:
         aa:ce:ea:42:68:b8:dd:ea:56:56:fc:fe:c4:75:1a:53:16:51:
         27:85:ad:a3:2d:5e:48:c7:33:80:c2:72:d6:bb:ff:bf:bb:b2:
         5d:a5:b2:19:c7:1b:a0:b1:49:c2:ce:77:f7:bb:7b:b9:40:e6:
         ef:b5:2e:e4:89:44:90:5b:c5:4c:9c:88:95:16:62:fa:6d:77:
         95:ab:11:f4:39:25:47:9d:4a:00:c4:76:98:04:e2:bb:d4:72:
         05:56:a2:af:a8:91:41:a9:6d:0a:46:91:57:2c:b5:7a:3a:85:
         06:94:03:03:8d:3d:6b:ff:77:e7:22:11:4c:26:99:e8:b7:12:
         02:ae:d3:fc:4d:47:74:67:ed:0c:7b:3b:fb:38:22:33:70:7e:
         a3:f6:f7:1e:9b:c9:d1:e6:87:b8:a1:de:8a:dd:f3:ba:b9:10:
         31:33:79:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:34:34 2026 by rpki-client