Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft
File:                     wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft (raw, json)
Hash identifier:          GmSxbXumFkwqHoIk9YVGhCALPHDwIznN9lM0KK6sBgU=
Subject key identifier:   4F:43:4B:E0:92:2D:0A:F8:62:32:63:A5:E2:88:6E:59:E8:39:38:7D
Authority key identifier: C2:4D:8E:A7:6B:CA:64:98:3F:53:2A:4C:DB:B2:CC:F1:9B:06:25:0D
Certificate issuer:       /CN=A91EF24F/serialNumber=C24D8EA76BCA64983F532A4CDBB2CCF19B06250D
Certificate serial:       08B4
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/wk2Op2vKZJg_UypM27LM8ZsGJQ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft
Manifest number:          08AA
Signing time:             Fri 02 Oct 2026 20:53:33 +0000
Manifest this update:     Fri 02 Oct 2026 20:53:33 +0000
Manifest next update:     Fri 09 Oct 2026 20:53:33 +0000
Files and hashes:         1: wk2Op2vKZJg_UypM27LM8ZsGJQ0.crl (hash: jBEOzUCxeKiHZOoAkOybRnFaY+BWrjeFk/mmteQaaUw=)
                          2: 47D255C8572811ECBE150619C4F9AE02.roa (hash: ysPTzuecmOrIk8+p95uPxMnppSd6LlombdCaaqun/Bo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.crl
                          rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/wk2Op2vKZJg_UypM27LM8ZsGJQ0.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 20:53:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2228 (0x8b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF24F, serialNumber=C24D8EA76BCA64983F532A4CDBB2CCF19B06250D
        Validity
            Not Before: Oct  2 20:53:33 2026 GMT
            Not After : Oct  9 20:53:33 2026 GMT
        Subject: CN=6ac019cd-2460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:34:6b:8b:fd:75:ef:6c:50:4b:3b:e2:90:5f:
                    6f:47:d0:5c:00:a5:06:d1:73:de:a9:d4:58:3a:79:
                    66:5f:dc:de:1b:31:19:53:6e:65:ba:a5:a1:e2:6f:
                    f2:91:72:66:a0:98:1a:ce:29:fb:aa:0f:48:d8:84:
                    ec:e1:24:ca:9c:5d:19:3d:44:af:67:e5:af:61:07:
                    92:b1:ec:2d:d1:93:d9:e7:6f:67:25:e9:2b:5e:db:
                    62:f8:26:86:ae:44:9d:e8:33:50:5b:13:3d:52:b6:
                    e8:56:12:f5:e0:35:27:3a:d1:c8:9b:c8:2f:df:9a:
                    13:25:ce:43:46:20:8f:61:2f:44:fb:29:21:43:d1:
                    78:b5:97:64:2a:a9:f4:7d:57:f3:0c:36:5b:4a:4b:
                    80:41:b3:b6:6f:f6:9f:65:94:cc:cf:56:d4:f6:23:
                    09:0f:77:96:dc:19:b9:fc:11:a7:27:b2:d1:d6:94:
                    db:94:65:81:f4:41:4e:07:8c:91:f6:63:0c:0e:9b:
                    e3:eb:51:10:2e:3a:e9:ee:57:0a:37:5c:61:c5:72:
                    63:d8:0e:37:97:0f:28:a7:df:24:90:b8:88:3b:24:
                    74:57:88:95:ad:43:7a:87:f8:a5:1c:1d:83:c5:4a:
                    ea:91:6c:ec:36:a0:4c:63:18:31:28:ee:48:e6:bf:
                    a2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:43:4B:E0:92:2D:0A:F8:62:32:63:A5:E2:88:6E:59:E8:39:38:7D
            X509v3 Authority Key Identifier:
                keyid:C2:4D:8E:A7:6B:CA:64:98:3F:53:2A:4C:DB:B2:CC:F1:9B:06:25:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/wk2Op2vKZJg_UypM27LM8ZsGJQ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:e6:c5:c8:a1:c2:bb:97:31:43:a5:ac:16:3d:a3:43:35:fd:
         57:fe:7d:1f:d1:df:f3:6b:45:69:83:56:60:35:16:54:ac:a0:
         b5:54:b1:48:59:c7:7c:2c:7a:20:98:5d:79:de:d8:93:0f:e8:
         cd:ac:a5:25:70:9c:35:8b:8b:a3:fe:79:40:30:70:0f:17:e5:
         e6:f7:7f:77:a4:e1:f3:5d:5a:f9:e1:ae:f3:8d:2a:3f:ab:0e:
         4a:39:ac:b2:3c:7c:2a:c0:06:8d:fd:11:f8:af:2e:66:5e:cf:
         24:0c:0e:39:38:f7:09:07:c7:fc:42:6e:14:df:d4:ac:7e:28:
         59:da:64:08:1f:d4:80:21:37:a2:59:7d:f3:20:37:92:e3:0b:
         b5:93:45:96:f5:70:56:0a:58:3c:3e:92:d5:4f:62:b2:63:f3:
         4f:4b:81:03:c9:72:a8:22:2a:1c:1b:7d:13:d9:22:19:bb:e5:
         6d:03:0d:b4:b4:73:46:81:91:7f:2a:99:d2:77:e4:22:1e:ce:
         c6:93:ad:66:89:24:53:67:06:87:99:8d:0b:4b:a0:02:b6:2b:
         1d:df:53:7c:27:50:e2:6c:c6:36:ce:cf:1f:44:ac:ef:8e:b7:
         41:39:38:b7:6e:b6:17:a1:21:83:93:22:2f:06:36:89:98:0d:
         d3:e0:53:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:20:03 2026 by rpki-client