Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft
File:                     WDy8e8lmFFeQyfbyI2iK2v5a07g.mft (raw, json)
Hash identifier:          lKFh6ov19lEHpGKs8jfgRvL5nFlMhdkG5yll4LTLfoM=
Subject key identifier:   A6:A9:C1:40:0C:85:07:BE:BB:A9:56:70:0A:7C:7B:56:FD:BB:DE:EA
Authority key identifier: 58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8
Certificate issuer:       /CN=A91CFF62/serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8
Certificate serial:       024F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft
Manifest number:          0236
Signing time:             Wed 23 Sep 2026 02:32:14 +0000
Manifest this update:     Wed 23 Sep 2026 02:32:13 +0000
Manifest next update:     Wed 30 Sep 2026 02:32:13 +0000
Files and hashes:         1: WDy8e8lmFFeQyfbyI2iK2v5a07g.crl (hash: 4BIq6BMKiOzAaPItN73BOpJw+6Wn2lIzE2u9QIx0zRg=)
                          2: A6F6E9E43C6E11F19CBF2AC991833773.roa (hash: 46x0HcGyg5ZqbRk9Z/I39DBeqCVUcYGSuLiYKPf2rpo=)
                          3: 34F912AAF49D11EFBD8ACC0EC4F9AE02.roa (hash: j8XwNmKzHtxOYC1qN4eC3Mdd11Pr7Jsabm08Gp7iA9o=)
                          4: 35941A5CF49D11EFBD8ACC0EC4F9AE02.roa (hash: lnol3FDE+TIgmDpE8Hb5zoS0uAhkzs2Kf9xTWAAdaZg=)
                          5: 09820DBA626411EEB46F7861C4F9AE02.roa (hash: ZCeCkuNAMK9rwX4/TECTij2fUOVdG//HOrl/aGbqzoQ=)
                          6: 9AD1EA98626311EE8EE2D260C4F9AE02.roa (hash: TRYBWoWB1+O1h6++uHuCXlTu4HpKrVeUUMhvWRHclCc=)
                          7: 34509C1AF49D11EFBD8ACC0EC4F9AE02.roa (hash: A4JCozIWp8wr/poP9Jp6dNkVfMHGLYtzZMkqHhGl4c8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl
                          rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 02:32:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 591 (0x24f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFF62, serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8
        Validity
            Not Before: Sep 23 02:32:13 2026 GMT
            Not After : Sep 30 02:32:13 2026 GMT
        Subject: CN=6ab33a2d-f28e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e5:88:fc:e5:c0:fb:8e:01:8c:83:70:5c:ba:
                    b5:cd:88:c2:5e:9d:bf:c9:22:05:88:44:f4:e0:25:
                    23:a0:82:05:96:3a:d6:d2:c5:20:45:33:cb:93:35:
                    ef:b5:a8:4d:12:a9:12:44:5f:d6:96:61:47:81:2c:
                    68:f2:7c:60:76:e5:6b:75:bb:c0:d4:31:b9:2c:c1:
                    72:39:98:91:5d:c2:19:43:e7:fd:d5:2e:e0:c4:66:
                    9d:25:1e:88:34:e4:68:02:b2:5a:da:94:55:fc:be:
                    88:d2:68:df:a5:6f:dd:7c:67:7b:c9:63:16:65:2a:
                    65:6a:43:82:db:1d:64:42:8e:c9:a2:de:0a:0d:73:
                    f2:e1:65:8c:6d:7f:27:67:80:24:59:ce:dd:ed:58:
                    ac:9b:83:4a:a4:f5:2c:a0:4c:00:82:09:7d:9a:cb:
                    fb:b4:05:39:d4:32:8d:3b:52:ab:22:3a:c7:8b:16:
                    02:01:03:73:56:d0:ae:0b:0b:c4:cd:38:b5:5e:2a:
                    75:24:c1:b7:b4:5b:66:80:03:2d:f4:9e:f5:78:56:
                    4b:c7:b5:3f:a0:e9:34:f1:3e:37:58:70:d8:b9:30:
                    e0:e7:2e:76:59:0e:a6:cd:02:60:e6:1e:f9:86:0c:
                    69:22:df:75:a9:27:20:4f:bb:89:70:36:21:7a:c7:
                    cb:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A9:C1:40:0C:85:07:BE:BB:A9:56:70:0A:7C:7B:56:FD:BB:DE:EA
            X509v3 Authority Key Identifier:
                keyid:58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:09:2f:ef:a2:3a:8d:b2:69:44:0b:0e:11:dd:c4:4f:a5:b0:
         01:8d:0d:dc:98:70:9d:5f:28:eb:91:2b:b1:a1:09:b9:82:cf:
         b4:04:bc:2c:d9:f3:66:5d:59:41:35:45:60:04:d3:46:43:67:
         b3:db:31:fd:e5:85:5a:ab:01:a2:66:6c:c2:73:50:07:27:79:
         7c:ce:f9:5f:c9:48:7d:e0:5b:ab:c2:ad:76:55:89:cb:c1:35:
         1d:f8:56:ed:62:eb:62:be:b7:5e:f7:ff:98:de:4c:c8:86:c2:
         c0:22:71:53:82:32:41:c3:a8:91:49:e8:3b:ed:e0:59:94:7e:
         f0:76:d9:05:d4:94:d2:a6:8e:3a:27:70:e8:de:e9:05:e4:80:
         a6:4a:6f:ec:0b:af:e3:4d:f0:f8:c2:82:5e:2c:1a:7b:49:1f:
         71:41:54:02:ad:e8:26:ed:6f:c3:49:8d:a9:34:df:a8:c5:85:
         90:ab:0f:a1:bf:0a:ee:94:be:5f:3b:87:89:09:f9:42:0a:0d:
         f1:a3:8b:c9:5b:cc:aa:c7:48:a3:85:ae:31:c6:c9:c9:14:00:
         02:d8:fe:48:f5:b6:66:a3:f3:de:19:03:ff:36:9d:d9:a7:b8:
         1d:1a:01:af:35:16:49:e2:db:1f:ca:10:6f:87:88:50:82:0d:
         ce:00:4f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:11:26 2026 by rpki-client