Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.mft
File:                     wsFz12JIhbwL1vwZPvvO6VQ_okM.mft (raw, json)
Hash identifier:          EsHeBnt0CLshEjdscshBWD1kFWdpH2SeSZoq3fb7NH0=
Subject key identifier:   32:81:D0:9A:73:3F:58:79:BF:B6:98:E5:4D:2D:7A:6B:87:36:5A:95
Authority key identifier: C2:C1:73:D7:62:48:85:BC:0B:D6:FC:19:3E:FB:CE:E9:54:3F:A2:43
Certificate issuer:       /CN=A91C8DF1/serialNumber=C2C173D7624885BC0BD6FC193EFBCEE9543FA243
Certificate serial:       B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsFz12JIhbwL1vwZPvvO6VQ_okM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.mft
Manifest number:          B4
Signing time:             Fri 25 Sep 2026 07:56:52 +0000
Manifest this update:     Fri 25 Sep 2026 07:56:51 +0000
Manifest next update:     Fri 02 Oct 2026 07:56:51 +0000
Files and hashes:         1: wsFz12JIhbwL1vwZPvvO6VQ_okM.crl (hash: LmcTOk4ohLCIPQ28Xey7w0NsZ3l1IEB3BZFvEPyUroc=)
                          2: BD37307CAAD011F0ACA9F95DC4F9AE02.roa (hash: HaxUN7r4AyaePSzuDt2/4Dt2IifBKM121wU+Ww/9xJU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.crl
                          rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsFz12JIhbwL1vwZPvvO6VQ_okM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 07:56:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 185 (0xb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8DF1, serialNumber=C2C173D7624885BC0BD6FC193EFBCEE9543FA243
        Validity
            Not Before: Sep 25 07:56:51 2026 GMT
            Not After : Oct  2 07:56:51 2026 GMT
        Subject: CN=6ab62944-34c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c2:db:e3:07:46:1e:18:fa:c7:0c:c0:e7:dc:
                    b0:84:44:4c:d5:1d:62:66:c6:c0:de:2f:37:9e:78:
                    5d:6d:1c:06:08:ac:6f:a2:56:94:b6:a4:7e:28:71:
                    bd:e0:cf:36:6d:31:86:4c:52:94:10:16:c8:48:b0:
                    54:10:21:05:2f:7c:ff:2e:2a:38:39:e8:47:ac:65:
                    df:b2:6e:8e:0d:93:f0:49:05:cf:23:4f:c1:19:80:
                    98:5a:e3:28:aa:d9:2d:b5:64:c0:ca:dd:69:ef:d5:
                    36:ee:a7:66:96:1d:11:c8:8f:e5:72:01:b3:42:55:
                    d2:43:2a:b2:7c:47:80:6e:94:cd:aa:ee:d7:4e:4a:
                    c8:ae:60:fd:89:0c:d6:4d:08:fe:a3:a4:13:35:8f:
                    8c:59:97:fb:ae:3b:e8:41:17:e0:a0:fc:b7:96:cf:
                    76:c3:e0:d0:19:29:9d:f1:54:3e:c8:14:4d:e8:1a:
                    98:df:c2:c7:ac:ab:38:94:fb:40:c8:81:54:b5:89:
                    5f:4c:9b:a2:ac:84:17:38:05:04:3c:c8:be:ba:70:
                    6c:c0:77:e6:df:87:62:9c:3a:3c:a4:99:9f:1a:d2:
                    96:42:61:85:7e:e0:af:ce:0d:99:92:3c:a1:dc:54:
                    c2:2d:9d:dc:ac:95:cb:f9:45:c0:46:d5:07:6e:ed:
                    d4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:81:D0:9A:73:3F:58:79:BF:B6:98:E5:4D:2D:7A:6B:87:36:5A:95
            X509v3 Authority Key Identifier:
                keyid:C2:C1:73:D7:62:48:85:BC:0B:D6:FC:19:3E:FB:CE:E9:54:3F:A2:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsFz12JIhbwL1vwZPvvO6VQ_okM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:d8:e9:e8:83:72:81:68:8e:ff:c9:b1:10:d6:32:da:45:47:
         b1:97:82:21:39:a6:6c:3d:34:cf:d7:9e:b1:da:0b:dd:e0:0a:
         d1:d5:b1:fb:65:a6:f8:a4:fe:41:a9:e2:73:64:6e:2a:c5:ef:
         0d:b7:c7:0d:40:4d:13:ca:ec:bd:c9:bd:fd:e1:ed:cb:2c:71:
         46:2c:3a:44:ca:f1:ed:a8:8e:13:ea:22:06:a5:6d:28:59:99:
         fb:db:d0:5b:28:de:32:60:06:6e:85:1e:24:06:c3:0f:f4:65:
         af:fa:c2:50:c4:01:da:a9:c8:29:06:11:2b:a0:f6:fb:cb:65:
         86:40:e9:03:61:b0:21:15:29:bc:3b:ef:b0:ef:24:3c:5a:9b:
         f1:1a:41:5f:1e:5d:c9:1a:0e:25:6a:0b:cd:22:ae:f4:aa:fb:
         36:0e:99:2a:66:ce:a6:0b:4b:74:b1:cd:72:32:eb:a0:c0:66:
         3f:4e:c8:07:7b:19:ec:17:96:a6:9f:25:e0:5f:8f:6e:91:17:
         33:ef:e1:bd:4f:cc:8a:66:59:e9:3b:51:0d:22:15:0a:34:e0:
         a2:23:be:e3:57:ef:83:7b:21:4c:59:6f:00:9c:5c:32:11:dc:
         3b:d0:0f:ca:4d:9a:b2:cb:b5:a4:4f:2c:32:e2:b7:0d:28:ec:
         58:04:0d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:34:28 2026 by rpki-client