Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft
File:                     WHRSDaeB94Db1xDULIQcE6etF1c.mft (raw, json)
Hash identifier:          QeneF2dieNNzHnpxL9J8eA1rDX+bJWl6J4gtowjP2mM=
Subject key identifier:   5C:86:A4:00:58:14:B4:48:62:DD:07:0A:0B:9F:38:31:10:E2:E7:B9
Authority key identifier: 58:74:52:0D:A7:81:F7:80:DB:D7:10:D4:2C:84:1C:13:A7:AD:17:57
Certificate issuer:       /CN=A91AF2CD/serialNumber=5874520DA781F780DBD710D42C841C13A7AD1757
Certificate serial:       02C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft
Manifest number:          02A7
Signing time:             Wed 23 Sep 2026 01:40:43 +0000
Manifest this update:     Wed 23 Sep 2026 01:40:42 +0000
Manifest next update:     Wed 30 Sep 2026 01:40:42 +0000
Files and hashes:         1: WHRSDaeB94Db1xDULIQcE6etF1c.crl (hash: K/dGd5pTrOFTQYU6l1PgNQZIxXcQoSFgy9lURkmJEtU=)
                          2: CF85B73C74F011F0847A5D0DC4F9AE02.roa (hash: cUxWIw+2+FfPLU6N+/hsAHJj5YAVgVl5pfPZZohiSqE=)
                          3: 81E1EBD44E9A11F1929EC503BD833773.roa (hash: qYTpxudTzffVviQso3oftFlC1BIwZNisWMGuaS7SjgQ=)
                          4: B412DC700EC011EE8C18290AC4F9AE02.roa (hash: 3CMrCqDOXwvVF6x32R2mcswD2RmCJaBSI7Dvz74AhRA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.crl
                          rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 01:40:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 712 (0x2c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF2CD, serialNumber=5874520DA781F780DBD710D42C841C13A7AD1757
        Validity
            Not Before: Sep 23 01:40:42 2026 GMT
            Not After : Sep 30 01:40:42 2026 GMT
        Subject: CN=6ab32e1b-e2c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:56:42:69:a1:5e:56:0c:c3:34:41:81:23:86:
                    70:4e:53:33:f1:5b:30:43:81:64:8e:aa:56:01:4f:
                    e3:fe:c2:6b:b9:13:4e:6f:5d:de:14:8b:79:9c:f3:
                    fb:3a:4e:7a:9c:b2:a4:ae:b9:56:cb:a5:3d:18:fc:
                    3b:ff:5d:d6:66:95:10:89:b2:1a:74:cf:fa:6e:fe:
                    0a:4c:69:e3:21:79:1b:54:9e:be:18:d6:ca:92:82:
                    18:ef:73:ab:16:83:73:ca:b3:24:3f:9d:72:0a:57:
                    04:88:62:35:de:6b:5e:73:3c:6d:2a:54:e5:c2:37:
                    13:6a:97:bf:e2:6e:23:b8:c4:66:a3:d5:14:8d:c5:
                    ab:c3:cf:8c:63:5f:1c:41:7b:ac:a8:0e:34:72:d9:
                    ba:b9:e4:51:cd:31:ea:2d:ba:01:89:3d:ac:d7:b7:
                    0b:ac:de:bd:1f:98:82:fe:ce:cd:7f:7c:fd:12:64:
                    74:91:1d:8d:ac:d1:f3:79:27:ed:28:8a:ab:32:95:
                    eb:70:a8:e4:30:91:93:ee:ff:6e:be:75:1b:6a:76:
                    58:a0:7c:3e:19:70:6c:96:e4:61:9f:cb:d4:f3:ad:
                    9c:58:06:d3:df:b9:dc:ae:cc:25:85:6e:88:ef:60:
                    e5:95:d2:44:24:d7:58:62:40:50:1b:76:53:a1:03:
                    2c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:86:A4:00:58:14:B4:48:62:DD:07:0A:0B:9F:38:31:10:E2:E7:B9
            X509v3 Authority Key Identifier:
                keyid:58:74:52:0D:A7:81:F7:80:DB:D7:10:D4:2C:84:1C:13:A7:AD:17:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:61:ea:8e:05:80:8d:62:4e:05:fa:1d:5c:4d:3f:e1:a6:89:
         67:cd:d0:0a:de:12:c5:2c:ac:3e:c0:df:58:7a:0d:71:1a:04:
         26:0b:04:cf:7f:d5:6f:de:19:53:7a:7b:ce:42:da:83:bf:d9:
         51:21:14:2f:a9:76:64:9d:4e:8f:88:ea:bd:57:b7:f6:e7:6d:
         b2:da:32:32:e5:32:57:0e:f7:ec:3a:2a:15:c0:6d:a9:a8:9d:
         0b:d9:ca:ba:a9:e9:85:44:02:dd:a8:70:63:c0:6a:cd:6d:7e:
         87:19:74:01:5a:24:a0:76:b4:5b:e6:a3:76:e5:1e:91:49:55:
         48:5b:14:b0:41:96:eb:b0:d1:26:99:3f:99:38:41:1b:9c:3f:
         d9:ee:b1:ad:dc:74:64:b0:e7:59:6c:f4:c8:f3:3a:6e:14:37:
         c3:83:7e:57:c4:f0:b8:39:d2:a8:a5:d5:dd:d4:5b:de:05:ce:
         f9:cc:be:2b:62:48:28:f6:23:cc:84:3b:b5:03:e7:fa:2d:06:
         75:dd:a1:1a:15:13:4e:23:f3:31:ac:aa:60:65:14:2a:f8:d9:
         6e:7a:3c:82:59:38:a1:7d:4d:95:b5:e8:1d:da:27:f4:6a:84:
         f3:08:4b:49:6c:6f:de:5f:b8:da:ad:9d:19:89:13:a0:af:e8:
         c1:70:8d:3c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUYyQ0QxMTAvBgNVBAUTKDU4NzQ1MjBEQTc4MUY3ODBEQkQ3MTBENDJDODQxQzEz
QTdBRDE3NTcwHhcNMjYwOTIzMDE0MDQyWhcNMjYwOTMwMDE0MDQyWjAYMRYwFAYD
VQQDEw02YWIzMmUxYi1lMmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx1ZCaaFeVgzDNEGBI4ZwTlMz8VswQ4FkjqpWAU/j/sJruRNOb13eFIt5nPP7
Ok56nLKkrrlWy6U9GPw7/13WZpUQibIadM/6bv4KTGnjIXkbVJ6+GNbKkoIY73Or
FoNzyrMkP51yClcEiGI13mteczxtKlTlwjcTape/4m4juMRmo9UUjcWrw8+MY18c
QXusqA40ctm6ueRRzTHqLboBiT2s17cLrN69H5iC/s7Nf3z9EmR0kR2NrNHzeSft
KIqrMpXrcKjkMJGT7v9uvnUbanZYoHw+GXBsluRhn8vU862cWAbT37ncrswlhW6I
72DlldJEJNdYYkBQG3ZToQMsHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFyGpABY
FLRIYt0HCgufODEQ4ue5MB8GA1UdIwQYMBaAFFh0Ug2ngfeA29cQ1CyEHBOnrRdX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjJDRC80RkNCQUMwMEQ0
NEMxMUVEODYyNzE1ODJDNEY5QUUwMi9XSFJTRGFlQjk0RGIxeERVTElRY0U2ZXRG
MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dIUlNEYWVCOTREYjF4RFVMSVFjRTZldEYxYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RjJDRC80RkNCQUMwMEQ0NEMxMUVEODYyNzE1ODJDNEY5QUUwMi9XSFJTRGFlQjk0
RGIxeERVTElRY0U2ZXRGMWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAxGHqjgWAjWJOBfodXE0/4aaJZ83QCt4SxSysPsDfWHoNcRoEJgsEz3/Vb94Z
U3p7zkLag7/ZUSEUL6l2ZJ1Oj4jqvVe39udtstoyMuUyVw737DoqFcBtqaidC9nK
uqnphUQC3ahwY8BqzW1+hxl0AVokoHa0W+ajduUekUlVSFsUsEGW67DRJpk/mThB
G5w/2e6xrdx0ZLDnWWz0yPM6bhQ3w4N+V8TwuDnSqKXV3dRb3gXO+cy+K2JIKPYj
zIQ7tQPn+i0Gdd2hGhUTTiPzMayqYGUUKvjZbno8glk4oX1NlbXoHdon9GqE8whL
SWxv3l+42q2dGYkToK/owXCNPA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 07:17:48 2026 by rpki-client