Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft
File:                     WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft (raw, json)
Hash identifier:          QQT11JoqUMdHtn+FObKrwuD3kxysK/tcTzpxO39uiu4=
Subject key identifier:   05:83:7B:D7:0B:B0:75:9F:DC:B1:3A:2C:D8:78:39:98:5E:08:DB:7E
Authority key identifier: 59:CA:0E:D6:B9:6B:70:C2:9B:3D:D8:E4:EC:59:8E:A1:2E:0D:C2:E6
Certificate issuer:       /CN=A91C7AB9/serialNumber=59CA0ED6B96B70C29B3DD8E4EC598EA12E0DC2E6
Certificate serial:       0222
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WcoO1rlrcMKbPdjk7FmOoS4NwuY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft
Manifest number:          0214
Signing time:             Wed 23 Sep 2026 02:57:39 +0000
Manifest this update:     Wed 23 Sep 2026 02:57:39 +0000
Manifest next update:     Wed 30 Sep 2026 02:57:39 +0000
Files and hashes:         1: WcoO1rlrcMKbPdjk7FmOoS4NwuY.crl (hash: VOL3OKpuraJv+84bpW2cpf+I4DhBV2EgE1f4JIiU0cM=)
                          2: 5CB841E69B1411EEA456FE83C4F9AE02.roa (hash: vuhGbAXmdFyZHU5zcn6qI6D4hSXtuQyTQbfw33B7PYM=)
                          3: 7CF0A45404DF11F0B877A115C4F9AE02.roa (hash: 3zvmMVyOd3Cbubn7cAeWSSyiDSHBJieehrUFUeq/rLk=)
                          4: 321296E212E711F1ABE68E4F0D3D8C67.roa (hash: fLV89AyiqIKtRsF5UkgoIwTy20rGQz1nx0VUvYpw5g0=)
                          5: EAAE802834B911F1B8589B72BC833773.roa (hash: hYHnbi70DEeeHLUAwomrQxmvt6OsQN+4vZ8kSWKcIq4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.crl
                          rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WcoO1rlrcMKbPdjk7FmOoS4NwuY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 02:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 546 (0x222)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7AB9, serialNumber=59CA0ED6B96B70C29B3DD8E4EC598EA12E0DC2E6
        Validity
            Not Before: Sep 23 02:57:39 2026 GMT
            Not After : Sep 30 02:57:39 2026 GMT
        Subject: CN=6ab34023-8bee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:2e:48:2f:60:1a:9f:42:f0:be:7e:ec:42:b5:
                    42:ab:a0:0d:e0:77:4e:47:8c:79:64:42:58:e5:de:
                    2b:3a:92:a1:e7:90:f0:c1:55:2b:9f:9c:b5:a9:05:
                    ea:86:97:2a:ae:41:69:46:42:4d:7b:cf:60:c5:a8:
                    a6:d9:0a:0b:cb:1d:9a:70:41:93:01:07:6c:5b:89:
                    05:80:6b:46:a0:d0:a4:fc:d4:fc:42:4f:0f:98:ec:
                    73:e4:27:23:19:58:c4:3a:39:ab:66:de:08:dc:0e:
                    c1:38:a3:e2:52:c8:8b:71:15:a5:40:a4:5a:b8:26:
                    10:54:42:4c:cf:de:34:88:94:99:97:e1:66:1c:76:
                    e2:92:e6:5b:63:65:c8:65:82:29:91:bf:75:19:db:
                    4a:d6:96:12:b3:17:f4:28:16:b8:a1:33:61:0c:a6:
                    1d:c2:64:ea:bb:b8:33:cd:67:54:ff:1c:7d:ee:b9:
                    c8:e1:ad:d9:43:0c:ef:9f:ff:42:27:af:c8:b0:df:
                    e9:1e:15:3a:7e:a3:ee:36:63:05:19:b7:60:76:5a:
                    de:63:03:63:57:9a:fb:1c:c7:d8:78:88:1c:b5:a7:
                    10:44:80:7e:6d:1e:b7:b6:75:ca:ce:28:85:22:ea:
                    22:a0:21:70:37:ca:ac:27:9d:2f:19:2b:9c:d9:0a:
                    a0:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:83:7B:D7:0B:B0:75:9F:DC:B1:3A:2C:D8:78:39:98:5E:08:DB:7E
            X509v3 Authority Key Identifier:
                keyid:59:CA:0E:D6:B9:6B:70:C2:9B:3D:D8:E4:EC:59:8E:A1:2E:0D:C2:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WcoO1rlrcMKbPdjk7FmOoS4NwuY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:00:ac:20:12:d6:b3:1d:b6:6a:52:27:ea:24:00:8c:2a:e0:
         d7:57:a0:bb:7b:3c:f3:7e:61:0e:68:ba:5e:24:a5:60:71:51:
         32:92:56:26:75:97:84:2b:b9:cc:a4:e2:01:c5:0a:32:82:3f:
         a7:a5:4a:43:5a:3b:63:ab:9a:81:3a:e0:e0:87:4e:3e:70:a6:
         81:f3:a3:d3:bb:c8:7c:a7:8d:84:b9:ca:af:08:a9:4f:06:02:
         b2:d4:f2:9e:cd:98:e4:ba:d6:8c:f5:53:04:49:e4:48:22:9f:
         6c:f0:5a:1d:7d:40:32:68:46:d1:a2:da:6d:2a:c0:23:e9:ce:
         2b:72:0f:b5:f3:0a:b9:a9:b1:06:1d:1c:c4:00:b0:25:0e:8b:
         26:91:83:fc:46:57:0f:a8:9a:9c:47:92:cd:e5:ce:77:b7:73:
         f6:91:e3:26:47:82:cc:9c:0c:eb:40:38:55:7c:de:8b:b5:6c:
         17:98:8a:80:85:99:90:d0:1a:80:3d:0d:58:db:cb:c9:77:ab:
         be:4a:54:1d:7c:f9:03:17:50:bf:f7:75:ca:5f:8e:85:75:39:
         36:ad:fd:1d:cf:68:a8:b6:7f:e0:33:17:3a:7a:af:b4:f3:6e:
         d7:64:dc:e4:88:e7:36:3a:36:61:e5:6b:cc:7b:a5:49:2a:29:
         81:d9:d6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:49:09 2026 by rpki-client