Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft
File:                     WaZHKO4B1q40_newHohZyCCX5X8.mft (raw, json)
Hash identifier:          YD1w4g2pq6F6A+R7/gtCM1vjqCQngYoBQsrkUQRDIyk=
Subject key identifier:   C0:2A:CC:DB:9F:45:DC:2F:70:57:AB:FB:46:55:1A:0F:7D:CC:C2:BD
Authority key identifier: 59:A6:47:28:EE:01:D6:AE:34:FE:77:B0:1E:88:59:C8:20:97:E5:7F
Certificate issuer:       /CN=A91BF27F/serialNumber=59A64728EE01D6AE34FE77B01E8859C82097E57F
Certificate serial:       2266
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft
Manifest number:          2242
Signing time:             Sat 26 Sep 2026 15:54:05 +0000
Manifest this update:     Sat 26 Sep 2026 15:54:04 +0000
Manifest next update:     Sat 03 Oct 2026 15:54:04 +0000
Files and hashes:         1: WaZHKO4B1q40_newHohZyCCX5X8.crl (hash: 8Rc/puFhq5roqZ8/XNdiWc88xDa+cnDRqRx+LsEoqpc=)
                          2: 431D19069E8211EAAD86AC51C4F9AE02.roa (hash: +kDsd0MsrUW9X5xLDAdvHx0LSDWy4PnbmaV19ILgdxk=)
                          3: 1BE0AAE6AE9A11F0B8FE6621C4F9AE02.roa (hash: qtDGFMhOJ0VDlUc12bIr/PPNosh512QuOLF2MOl6QGc=)
                          4: 47D9BDECB09511F19F7126F35A11F970.roa (hash: mZN/3zgpNk+AZ6JAlUUhY+2aqWlwlMcE9iiivGrhDBU=)
                          5: 9B1ABC54486111E8AA9B1B45C4F9AE02.roa (hash: PFFhqDUXgOwHYlXLP448JNGm2ge+CUxQd0U8hOPUQgY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.crl
                          rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 15:54:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8806 (0x2266)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF27F, serialNumber=59A64728EE01D6AE34FE77B01E8859C82097E57F
        Validity
            Not Before: Sep 26 15:54:04 2026 GMT
            Not After : Oct  3 15:54:04 2026 GMT
        Subject: CN=6ab7ea9c-782f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:90:05:e8:8d:8f:60:c8:9e:f8:df:16:48:6c:
                    d4:8c:f9:d7:73:f2:38:7a:31:e9:02:1c:ac:7a:ef:
                    c3:8a:2f:ad:50:f5:3a:ea:54:0c:3f:df:2c:9b:8b:
                    e8:32:64:ff:5a:46:0d:39:b2:3b:e1:d6:97:50:2c:
                    f3:83:96:90:d0:80:d1:fc:e6:79:88:f7:8e:3f:80:
                    2e:cb:27:ba:53:ae:8e:da:0f:31:ac:2f:bd:ad:7a:
                    9a:0b:6d:71:9e:5b:30:c6:90:c9:07:ba:47:48:25:
                    71:64:bd:4a:1b:6f:98:73:41:21:af:c5:13:f4:ce:
                    67:f1:97:c4:47:d7:08:40:4a:26:da:61:39:83:d1:
                    1d:20:fe:dc:5a:8c:54:b2:c0:41:ef:af:12:91:27:
                    3d:4e:18:67:47:11:10:60:a6:5a:00:b7:94:c4:74:
                    77:5a:b5:d3:8c:40:5b:9f:ce:4b:99:10:fd:bd:bb:
                    53:aa:26:3d:00:6c:fd:00:9b:a8:18:7d:c7:57:42:
                    c0:0c:24:9b:fe:77:da:57:bc:e3:f3:2d:18:2a:3a:
                    78:bd:28:1e:c4:0f:ef:b2:39:36:60:b1:d3:ff:e8:
                    01:bb:a9:32:5c:2e:48:ca:03:7e:6d:74:88:41:c0:
                    5e:5e:9b:f1:34:c7:b0:30:25:34:57:d9:a1:85:fe:
                    11:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:2A:CC:DB:9F:45:DC:2F:70:57:AB:FB:46:55:1A:0F:7D:CC:C2:BD
            X509v3 Authority Key Identifier:
                keyid:59:A6:47:28:EE:01:D6:AE:34:FE:77:B0:1E:88:59:C8:20:97:E5:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:f5:6c:35:33:6d:db:c2:29:24:47:a0:10:2d:ab:4c:3b:03:
         16:cf:5e:30:a2:c1:e7:b8:b4:c3:89:a5:62:e3:5d:e1:0c:9d:
         3f:74:39:50:08:64:7d:63:96:45:f1:41:e4:0f:f5:c0:63:72:
         91:f4:20:52:de:99:aa:2b:9b:c9:b4:f4:6c:f1:56:d6:d5:ed:
         92:0a:27:9d:94:50:c4:57:66:f9:fe:eb:e6:41:f4:15:91:36:
         fe:32:b9:e5:05:33:43:71:61:68:6b:28:9a:67:8b:fa:e0:91:
         aa:d9:94:4d:c7:63:63:6e:bf:d3:82:6a:d7:15:57:6f:78:c6:
         0c:41:81:0a:28:c9:9e:7a:f7:72:d5:5b:6d:d7:c0:dd:50:91:
         63:1b:ad:da:57:16:38:45:bd:01:89:65:d9:00:c7:2e:cf:43:
         9f:28:41:27:2b:14:ea:dd:a0:d1:1b:5b:c6:67:49:12:89:5c:
         b5:9f:af:41:f9:61:e0:b0:1b:b6:fa:64:31:aa:72:1c:7e:e3:
         90:d8:cc:70:f0:d1:08:19:f9:6d:d0:0c:f2:01:f0:9e:57:13:
         66:d9:74:27:31:67:25:0c:22:57:90:61:87:63:7e:f5:1f:72:
         4e:50:e8:02:51:41:8c:8e:49:e1:2c:39:91:2a:c4:b6:d0:2f:
         df:26:29:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:47:33 2026 by rpki-client