Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B5585/039D237AA03811F186C056843711F970/W6SGmWHpqwlISdLVUA9VJiY5Ck0.mft
File:                     W6SGmWHpqwlISdLVUA9VJiY5Ck0.mft (raw, json)
Hash identifier:          HhaF+fHn2CoZQHoUWm1KK89DD2gpCxmMLNd6sv/9PEg=
Subject key identifier:   58:8F:96:59:61:38:DC:2C:98:CE:2D:0B:26:AC:7F:7E:79:22:E5:FA
Authority key identifier: 5B:A4:86:99:61:E9:AB:09:48:49:D2:D5:50:0F:55:26:26:39:0A:4D
Certificate issuer:       /CN=A91B5585/serialNumber=5BA4869961E9AB094849D2D5500F552626390A4D
Certificate serial:       1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6SGmWHpqwlISdLVUA9VJiY5Ck0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5585/039D237AA03811F186C056843711F970/W6SGmWHpqwlISdLVUA9VJiY5Ck0.mft
Manifest number:          19
Signing time:             Fri 09 Oct 2026 09:47:45 +0000
Manifest this update:     Fri 09 Oct 2026 09:47:44 +0000
Manifest next update:     Fri 16 Oct 2026 09:47:44 +0000
Files and hashes:         1: W6SGmWHpqwlISdLVUA9VJiY5Ck0.crl (hash: BOW2KRGL62GVTjvs4prGdKnse4YuYbOOUl98yVvU6AE=)
                          2: 8B48B9BAA03811F198EE418E3711F970.roa (hash: HMebga2Cee+mkPgXMYSD7ugJvRB7D8pLJ5U8lhm9Gjc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5585/039D237AA03811F186C056843711F970/W6SGmWHpqwlISdLVUA9VJiY5Ck0.crl
                          rsync://rpki.apnic.net/member_repository/A91B5585/039D237AA03811F186C056843711F970/W6SGmWHpqwlISdLVUA9VJiY5Ck0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6SGmWHpqwlISdLVUA9VJiY5Ck0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 09:47:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5585, serialNumber=5BA4869961E9AB094849D2D5500F552626390A4D
        Validity
            Not Before: Oct  9 09:47:44 2026 GMT
            Not After : Oct 16 09:47:44 2026 GMT
        Subject: CN=6ac8b841-3106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:49:85:83:26:7a:dd:bf:30:21:e4:ea:04:b3:
                    36:26:7e:eb:3d:ef:58:35:89:06:ee:50:47:5a:f9:
                    b9:2d:88:8f:e6:2c:92:b3:e6:d5:1c:61:8c:af:0f:
                    95:47:ef:fc:b0:e4:e2:c5:13:c8:78:be:81:c4:43:
                    06:a3:77:d7:05:a1:4d:91:26:8b:07:5f:b1:ca:9b:
                    e1:70:00:9e:f5:d1:99:53:26:d5:8e:5b:50:d9:a1:
                    cf:5a:a6:03:93:96:d0:dd:d2:fd:4f:e3:e2:b9:51:
                    55:9f:2d:64:86:55:97:ca:0b:2e:23:af:a5:78:71:
                    bf:46:1a:68:37:34:69:e5:60:24:85:e9:76:3e:e7:
                    12:46:d5:e0:75:c7:59:a3:64:aa:d6:e3:36:c0:3e:
                    57:cd:96:3f:1e:61:5f:2e:f3:80:49:a2:0c:5f:b3:
                    d8:ba:04:4e:32:37:ee:e5:4f:95:b1:1b:5e:81:5d:
                    5b:3a:5f:49:f1:84:52:51:45:dd:a6:dc:f4:c8:05:
                    48:c9:a9:bb:38:9f:d9:d0:b1:27:34:73:2f:10:68:
                    b5:b2:0e:b0:f9:4e:34:0a:2d:65:d6:a9:7f:dd:de:
                    28:ed:63:99:a3:e8:75:4f:ad:34:d8:c8:15:3a:da:
                    03:64:38:98:fc:5a:b2:85:49:98:cc:e8:ea:42:96:
                    64:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:8F:96:59:61:38:DC:2C:98:CE:2D:0B:26:AC:7F:7E:79:22:E5:FA
            X509v3 Authority Key Identifier:
                keyid:5B:A4:86:99:61:E9:AB:09:48:49:D2:D5:50:0F:55:26:26:39:0A:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5585/039D237AA03811F186C056843711F970/W6SGmWHpqwlISdLVUA9VJiY5Ck0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6SGmWHpqwlISdLVUA9VJiY5Ck0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5585/039D237AA03811F186C056843711F970/W6SGmWHpqwlISdLVUA9VJiY5Ck0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:8f:00:28:b9:c2:26:7f:e4:f1:ac:7d:a8:0a:98:24:64:f3:
         2a:fd:07:56:1c:69:ec:b5:69:88:9f:06:fe:d3:46:a4:17:46:
         af:23:9f:ed:a7:69:2c:c3:dc:e3:54:2c:47:63:2a:56:9e:80:
         84:1e:f1:f1:9c:36:f1:ba:be:99:64:30:c0:79:b0:7e:b6:52:
         ad:20:4e:2a:4f:11:cb:29:ac:2a:82:b0:53:f3:b0:a5:18:ae:
         3e:08:3f:fd:a5:d9:d4:4a:a9:35:90:97:1d:70:62:48:f5:e9:
         50:53:92:4c:fc:1f:17:b1:75:59:36:2a:95:cc:d8:4a:98:81:
         93:da:28:7d:59:c9:45:67:9f:10:0a:b2:39:cc:d0:7f:1a:9d:
         4a:a7:ea:1c:9c:48:f2:63:22:3d:63:88:24:82:b2:c1:3e:6f:
         e7:58:90:81:a0:e5:b9:6e:02:72:89:0d:f5:a9:cb:06:a4:81:
         eb:36:28:cf:d0:72:2a:1d:2f:60:87:c6:a0:83:9d:a6:1e:86:
         d1:0c:b9:8f:b4:01:fb:78:da:e4:9d:23:12:e2:9c:a0:37:58:
         ab:0d:c6:8c:b1:47:74:08:29:a1:f1:04:3b:77:a4:40:48:02:
         28:d0:79:fb:b2:7c:9c:e1:11:ad:f6:84:bb:77:2e:b8:1e:b7:
         77:09:df:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:24:27 2026 by rpki-client