Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft
File:                     wg3R4FYYZcBSLH4nS87SSTC78EU.mft (raw, json)
Hash identifier:          h47cG8ufP1YgWj5wgs/V4FE2nj2OzJ8PF2nqRRLCcMU=
Subject key identifier:   4C:1E:7D:9A:8C:D8:8A:EE:DF:5C:BB:A6:5E:90:09:DD:7D:18:11:10
Authority key identifier: C2:0D:D1:E0:56:18:65:C0:52:2C:7E:27:4B:CE:D2:49:30:BB:F0:45
Certificate issuer:       /CN=A91B08F7/serialNumber=C20DD1E0561865C0522C7E274BCED24930BBF045
Certificate serial:       0512
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wg3R4FYYZcBSLH4nS87SSTC78EU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft
Manifest number:          1D63
Signing time:             Tue 22 Sep 2026 16:26:25 +0000
Manifest this update:     Tue 22 Sep 2026 16:26:25 +0000
Manifest next update:     Tue 29 Sep 2026 16:26:25 +0000
Files and hashes:         1: wg3R4FYYZcBSLH4nS87SSTC78EU.crl (hash: xtBzYRulJQQoQ7Xme6BxqPbvmASd6WN58HEnIcOfkqA=)
                          2: 4A7F092A776811EFB6FA747DC4F9AE02.roa (hash: 0daD0etHnbRssiJH6BixSC65d1qVyuhBrEX3CZhYnt8=)
                          3: F9D345C0DE8811F0B0147CB83D6F56BC.roa (hash: CURvflfPDYyPZc2U7wyj4HEbEp22qVhqjBSB4fea7bk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.crl
                          rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wg3R4FYYZcBSLH4nS87SSTC78EU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 16:26:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1298 (0x512)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B08F7, serialNumber=C20DD1E0561865C0522C7E274BCED24930BBF045
        Validity
            Not Before: Sep 22 16:26:25 2026 GMT
            Not After : Sep 29 16:26:25 2026 GMT
        Subject: CN=6ab2ac31-5af8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cb:29:5e:19:45:39:e6:dc:73:a5:49:95:a7:
                    1f:71:7a:6f:62:d5:8c:22:2a:02:47:62:14:29:20:
                    5e:39:c9:2b:9d:5d:76:f5:11:a3:39:47:8f:d4:27:
                    a6:14:6f:ca:ff:32:12:d0:b1:9c:56:0e:45:ec:c9:
                    58:88:fe:5d:c5:ed:18:23:4f:0e:99:ce:38:a2:e8:
                    75:2f:cb:8e:47:c1:30:15:a6:6c:99:b7:eb:ca:d3:
                    d4:6e:31:23:ad:22:8f:fb:98:54:76:d6:61:da:6c:
                    d3:39:f6:1a:b4:29:ff:db:71:ae:c8:00:0b:41:7a:
                    52:cc:16:8e:6b:da:58:59:67:49:65:43:f0:cb:c3:
                    2c:dd:72:c0:0e:1a:39:06:82:97:da:b0:83:e3:9c:
                    69:4a:40:e4:44:70:5c:01:ea:24:ae:68:d4:ff:c4:
                    5c:49:3d:24:b3:1e:50:e5:58:db:4c:b5:07:29:53:
                    c0:45:5a:33:5c:99:1d:75:2c:69:fd:4f:47:3b:1e:
                    e9:36:60:08:a9:e0:8c:bf:3a:de:77:99:09:16:fe:
                    1a:20:14:fa:92:3d:7f:46:93:27:7e:86:e0:e3:01:
                    b2:01:b1:e9:da:da:91:8e:60:d6:4c:2d:d2:fd:3a:
                    c7:b3:1f:a0:c9:55:6a:ca:1f:ef:70:55:59:b9:b1:
                    34:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:1E:7D:9A:8C:D8:8A:EE:DF:5C:BB:A6:5E:90:09:DD:7D:18:11:10
            X509v3 Authority Key Identifier:
                keyid:C2:0D:D1:E0:56:18:65:C0:52:2C:7E:27:4B:CE:D2:49:30:BB:F0:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wg3R4FYYZcBSLH4nS87SSTC78EU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:df:89:fc:74:81:4f:eb:d7:f8:21:b4:bc:00:ed:e1:4d:42:
         f7:b4:0a:6c:7c:f5:e8:39:a4:78:26:d1:5b:df:90:c9:91:1b:
         2f:7f:3b:95:15:7f:24:a9:dc:32:15:bf:01:52:6b:27:8c:27:
         e2:14:4c:97:0b:18:9e:bb:ad:1d:11:14:71:a5:81:e0:f7:23:
         b8:8d:72:48:44:b8:e9:ef:08:85:28:c5:06:bf:53:93:03:d7:
         f2:03:1b:ce:16:2c:44:52:ec:a9:e1:f9:ee:99:67:93:38:9f:
         dc:ca:2f:b8:8e:72:87:49:5c:b2:25:2c:15:dd:e5:a8:e1:fa:
         a4:72:e7:90:1a:b9:7d:1d:6c:98:87:05:39:a0:35:bb:70:95:
         bf:f0:23:bc:4e:8b:a0:ac:e7:41:53:17:9f:77:da:ea:31:b7:
         45:b3:03:a7:91:94:fc:4f:7b:fe:96:29:e6:0c:16:f1:4d:21:
         ea:1a:ca:28:fd:ad:b8:c2:fa:37:ab:d7:04:35:92:75:36:8f:
         2e:5c:be:8c:6d:93:e8:26:6d:02:a6:be:f3:03:63:bc:d3:dc:
         21:d0:f7:75:fd:13:1f:cc:58:f7:cb:4d:f2:8e:ff:fa:d0:01:
         cd:89:f0:ab:d3:fc:e6:2e:05:39:32:4b:1c:9b:57:29:44:b3:
         55:cc:ec:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:44:05 2026 by rpki-client