Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3E8B/FC75386ABE2111F0AFD5B519C4F9AE02/whcUQpGt4TEa-2LQLllQN8jatdw.mft
File:                     whcUQpGt4TEa-2LQLllQN8jatdw.mft (raw, json)
Hash identifier:          i9vnJMw9Wj10TofuFiYlNI06bNJZ7IZ+OWNb4SR577A=
Subject key identifier:   4D:6B:96:43:F4:07:C1:B3:D3:52:28:4E:FE:21:A5:AB:4F:E1:24:4B
Authority key identifier: C2:17:14:42:91:AD:E1:31:1A:FB:62:D0:2E:59:50:37:C8:DA:B5:DC
Certificate issuer:       /CN=A91E3E8B/serialNumber=C217144291ADE1311AFB62D02E595037C8DAB5DC
Certificate serial:       AA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/whcUQpGt4TEa-2LQLllQN8jatdw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3E8B/FC75386ABE2111F0AFD5B519C4F9AE02/whcUQpGt4TEa-2LQLllQN8jatdw.mft
Manifest number:          A7
Signing time:             Wed 23 Sep 2026 06:57:41 +0000
Manifest this update:     Wed 23 Sep 2026 06:57:41 +0000
Manifest next update:     Wed 30 Sep 2026 06:57:41 +0000
Files and hashes:         1: whcUQpGt4TEa-2LQLllQN8jatdw.crl (hash: ZyxbF29aC94TZgNcirB5hR05TsjEcwN/MhY9WzMyzic=)
                          2: 0359510CBE2711F08C3BFC4DC4F9AE02.roa (hash: HOoIxd+PUN0gWyAqB/682N4GNwpPIEGms9drqN+gg/k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3E8B/FC75386ABE2111F0AFD5B519C4F9AE02/whcUQpGt4TEa-2LQLllQN8jatdw.crl
                          rsync://rpki.apnic.net/member_repository/A91E3E8B/FC75386ABE2111F0AFD5B519C4F9AE02/whcUQpGt4TEa-2LQLllQN8jatdw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/whcUQpGt4TEa-2LQLllQN8jatdw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 06:57:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 170 (0xaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3E8B, serialNumber=C217144291ADE1311AFB62D02E595037C8DAB5DC
        Validity
            Not Before: Sep 23 06:57:41 2026 GMT
            Not After : Sep 30 06:57:41 2026 GMT
        Subject: CN=6ab37865-e3fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:14:7f:6e:eb:52:79:ed:a0:97:8e:df:97:48:
                    fc:5d:c2:d3:54:73:92:d8:4e:2d:39:52:25:7a:fb:
                    68:63:3f:4d:22:09:c9:98:86:88:e6:9b:30:6b:27:
                    01:42:aa:83:79:f5:99:59:7b:f2:66:35:f7:d3:33:
                    fe:56:02:8c:3d:e4:6b:cd:43:d3:25:6e:72:96:00:
                    8a:8c:ad:c1:37:46:24:c0:40:4d:13:e4:da:97:8f:
                    cc:6e:74:ad:25:c1:b9:2c:4f:70:32:0d:14:cb:95:
                    65:a3:ca:ec:69:cc:c3:10:4e:6c:2f:4a:ea:d8:db:
                    48:f5:ff:7c:96:d7:ff:a1:60:fa:10:b7:cd:13:db:
                    a9:2b:86:e9:99:c2:fa:33:7f:b0:b2:58:15:76:d8:
                    57:55:28:f1:bf:33:db:51:ca:49:82:88:45:03:f6:
                    c1:27:9b:11:24:f1:66:85:3d:2d:95:27:5c:15:4f:
                    f5:ef:d3:2e:a2:00:d6:fe:91:4b:be:66:25:02:2a:
                    e1:ce:cb:8f:d3:8b:a3:fa:b1:14:cf:59:b3:1a:90:
                    ff:f3:b9:76:1b:76:68:93:66:53:fe:1a:fd:e1:39:
                    26:cd:eb:0d:52:ab:f7:a1:3e:21:7b:13:4e:f6:11:
                    cd:11:7d:28:2a:d2:2c:13:26:7d:6f:06:eb:b8:25:
                    8c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:6B:96:43:F4:07:C1:B3:D3:52:28:4E:FE:21:A5:AB:4F:E1:24:4B
            X509v3 Authority Key Identifier:
                keyid:C2:17:14:42:91:AD:E1:31:1A:FB:62:D0:2E:59:50:37:C8:DA:B5:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3E8B/FC75386ABE2111F0AFD5B519C4F9AE02/whcUQpGt4TEa-2LQLllQN8jatdw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/whcUQpGt4TEa-2LQLllQN8jatdw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E8B/FC75386ABE2111F0AFD5B519C4F9AE02/whcUQpGt4TEa-2LQLllQN8jatdw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:0b:d5:0e:b4:1c:74:a3:32:9c:d0:07:cf:a1:ce:49:2e:7d:
         e1:15:fd:85:ba:b9:90:47:12:be:37:d2:56:d0:57:d6:91:30:
         5e:b0:aa:de:9c:85:1a:f7:d4:8a:27:9b:df:7d:6f:34:e8:a0:
         df:9d:61:56:90:c5:78:48:c1:9e:b4:55:73:03:d6:22:ec:59:
         9f:5c:24:9b:13:5c:e5:ce:2a:22:c8:7e:b9:67:3e:4b:fd:e6:
         8a:6d:69:a4:fe:b3:bf:41:c9:cc:d0:5f:81:86:ca:fc:f7:66:
         d1:2e:49:e3:02:60:ee:11:a2:8b:29:08:f8:c3:64:f1:81:b7:
         8a:61:0c:02:80:47:b9:51:86:95:38:89:d5:93:20:93:c6:3e:
         9a:af:06:33:eb:c8:77:62:fd:53:80:02:27:22:5d:0f:ee:b2:
         ee:c2:db:5f:be:af:e2:cf:d1:bb:f2:14:6d:9f:21:30:e5:94:
         c1:9e:3d:c0:07:df:3f:96:7d:6a:3d:4c:52:ae:1b:2f:d9:09:
         7a:e2:05:44:ef:ae:1f:1f:a6:64:7e:7f:c8:d5:bc:68:da:3b:
         90:ce:47:0c:3f:d1:a8:a9:ae:55:42:8c:be:bd:97:d1:da:69:
         82:f6:63:76:15:93:bd:94:e6:d8:c0:c6:e6:97:32:10:1a:71:
         9f:e4:f0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:45:35 2026 by rpki-client