Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft
File:                     Wsl8kSmaL6nIztiqxnD_78e2mhs.mft (raw, json)
Hash identifier:          r04BWkPrJgVPqDP6orlzDmCy4xVN7upjXvhmdKhVS50=
Subject key identifier:   59:58:1A:E4:0B:68:CA:18:AE:D8:AA:A1:34:73:86:4F:05:B8:8A:A0
Authority key identifier: 5A:C9:7C:91:29:9A:2F:A9:C8:CE:D8:AA:C6:70:FF:EF:C7:B6:9A:1B
Certificate issuer:       /CN=A91F3260/serialNumber=5AC97C91299A2FA9C8CED8AAC670FFEFC7B69A1B
Certificate serial:       07AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft
Manifest number:          0791
Signing time:             Wed 30 Sep 2026 21:50:37 +0000
Manifest this update:     Wed 30 Sep 2026 21:50:37 +0000
Manifest next update:     Wed 07 Oct 2026 21:50:37 +0000
Files and hashes:         1: Wsl8kSmaL6nIztiqxnD_78e2mhs.crl (hash: wZqfKEorCFewOHIZ2VOnnHWj6QJkUL7FJ4K0Tw0dYUM=)
                          2: C5058712A3B911EC9709462AC4F9AE02.roa (hash: yx2p2PBTAERpIOrfxFJs3MPy6vQtoVGeRsQusdNiOVg=)
                          3: 36F318D0890A11EE9F4C014DC4F9AE02.roa (hash: oNMygU+05mZdGnTqLCXPja1WWRqVF46B9vJ4+SJsuVc=)
                          4: 8B75957671A811EB8698AD67C4F9AE02.roa (hash: U228KfC2lw3SZ0Fufn6GHyMp3tAKp2GFwZiqfbkH2F0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.crl
                          rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 Oct 2026 21:50:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1963 (0x7ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3260, serialNumber=5AC97C91299A2FA9C8CED8AAC670FFEFC7B69A1B
        Validity
            Not Before: Sep 30 21:50:37 2026 GMT
            Not After : Oct  7 21:50:37 2026 GMT
        Subject: CN=6abd842d-9c59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:07:6b:c4:08:09:61:b6:2d:7b:5e:48:ff:f5:
                    2f:ac:ff:b5:54:1a:48:53:a9:21:f7:12:ce:e2:4f:
                    b4:d3:37:d5:f7:5f:24:0b:7a:90:3a:ee:a8:76:e5:
                    9f:56:fa:dc:ed:0f:54:b0:d1:5d:60:24:42:9a:05:
                    27:2c:38:2f:e3:82:52:30:7f:59:1e:98:02:37:1b:
                    0a:f3:4b:ae:6c:1f:39:08:2a:af:9f:88:ad:bd:64:
                    a7:49:87:8e:cf:4f:db:3f:e1:77:0c:dd:f7:bb:ab:
                    c0:fe:b9:f9:39:f7:f8:19:2e:a0:00:70:d2:73:bc:
                    cb:08:cb:a0:2d:29:6f:ef:64:01:8d:be:85:bb:40:
                    5a:5c:c3:ca:6d:3b:c2:cb:eb:b5:cf:99:03:0b:a9:
                    da:b3:02:91:14:24:cc:e1:67:15:a3:c7:ff:76:3f:
                    97:7a:fa:7c:84:a2:06:a6:6f:69:df:d0:41:fe:0d:
                    5d:be:84:af:36:4c:93:fc:97:85:cd:d1:34:a2:eb:
                    4e:0d:9f:15:30:36:f1:e4:0b:70:b2:24:83:fb:73:
                    39:09:86:07:b8:28:32:8d:ce:c6:0e:17:37:cc:a6:
                    3e:55:76:bf:c8:7b:ef:d3:3b:89:c8:d6:1f:66:9e:
                    95:18:6e:6a:a6:c0:6e:e4:f2:19:9a:92:3b:d4:cf:
                    3a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:58:1A:E4:0B:68:CA:18:AE:D8:AA:A1:34:73:86:4F:05:B8:8A:A0
            X509v3 Authority Key Identifier:
                keyid:5A:C9:7C:91:29:9A:2F:A9:C8:CE:D8:AA:C6:70:FF:EF:C7:B6:9A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:01:4b:b9:99:31:5c:59:a3:99:57:09:ae:ff:9d:72:3d:c6:
         90:9d:e0:60:26:67:16:f8:75:be:cd:14:89:ed:f3:c3:d9:ae:
         41:d9:8a:89:be:94:02:92:f5:63:54:4b:ab:97:ac:bf:34:70:
         90:13:03:71:98:18:93:40:50:b8:2c:88:5c:e6:1b:28:43:c8:
         72:07:1d:db:71:71:f6:04:3d:e3:7d:2f:d3:da:d2:75:00:63:
         e1:19:1b:bb:33:11:b2:c2:86:a0:81:5d:31:b1:fd:30:4b:37:
         c0:71:a2:38:c0:3e:8b:e4:98:57:d0:a8:bf:22:62:e8:4b:93:
         f0:65:5f:c7:0f:ef:a7:a4:fc:3a:4b:54:dc:2c:10:f9:5d:ad:
         47:0d:8b:30:8d:15:b1:d7:1c:e4:55:be:c9:6a:48:f4:bf:0d:
         48:53:47:e9:d6:58:81:db:fa:4a:5b:16:d0:f6:0c:4f:da:d7:
         d0:e8:36:af:54:b5:08:bd:a1:74:d1:92:01:d7:de:b6:c6:91:
         bb:da:57:64:53:18:5d:1a:78:af:c2:54:be:55:f1:29:fe:98:
         b5:0b:e8:23:70:9e:25:a8:e1:65:49:4a:f4:65:b4:1f:03:01:
         ed:cb:65:ec:b4:a1:98:5b:bb:49:48:ec:52:c4:0b:e4:af:95:
         1d:fe:d8:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 18:40:29 2026 by rpki-client