Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft
File:                     W1n8tlNB_TN4m_uvqWN98M5ATas.mft (raw, json)
Hash identifier:          SvcKbSBfZl4sG4ra8Tlu5MBr4Ap9HF6llzQA0UC0oVY=
Subject key identifier:   AD:C3:D0:93:8D:E4:8A:86:14:A3:A4:5A:D7:13:49:18:FC:AA:B3:5F
Authority key identifier: 5B:59:FC:B6:53:41:FD:33:78:9B:FB:AF:A9:63:7D:F0:CE:40:4D:AB
Certificate issuer:       /CN=A91FA5A2/serialNumber=5B59FCB65341FD33789BFBAFA9637DF0CE404DAB
Certificate serial:       0224
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1n8tlNB_TN4m_uvqWN98M5ATas.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft
Manifest number:          0219
Signing time:             Fri 25 Sep 2026 03:08:13 +0000
Manifest this update:     Fri 25 Sep 2026 03:08:12 +0000
Manifest next update:     Fri 02 Oct 2026 03:08:12 +0000
Files and hashes:         1: W1n8tlNB_TN4m_uvqWN98M5ATas.crl (hash: uIgI6xWuhdlqaRfF70AXNd4oi+aNFVC2S8/in6KwDPU=)
                          2: D61299F2D8C011EFB41E1319C4F9AE02.roa (hash: I8tswjuoYQFOiqyz6Kcs03FRJHU5DGwueNL9D41SX9s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.crl
                          rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1n8tlNB_TN4m_uvqWN98M5ATas.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 03:08:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 548 (0x224)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA5A2, serialNumber=5B59FCB65341FD33789BFBAFA9637DF0CE404DAB
        Validity
            Not Before: Sep 25 03:08:12 2026 GMT
            Not After : Oct  2 03:08:12 2026 GMT
        Subject: CN=6ab5e59c-de8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e5:f2:69:ce:f3:a8:d9:34:16:a6:a6:5c:4c:
                    b2:89:54:79:f2:4d:27:d5:2b:12:f9:b3:eb:aa:3e:
                    51:a7:38:e0:a5:94:54:38:14:13:f1:59:f6:33:89:
                    b2:1f:72:28:4d:ec:14:a7:85:5f:9e:9d:a4:7a:21:
                    a9:64:14:8e:4b:9e:4f:46:be:52:fc:6c:11:84:fd:
                    7c:f5:3a:73:da:5c:9c:cf:2a:27:ea:ab:ba:02:9d:
                    a3:a8:99:af:26:4e:e4:b1:ee:01:bc:f2:e7:23:d7:
                    2a:a5:ef:8a:ec:96:09:32:5b:27:54:69:1c:6a:78:
                    f4:57:33:1a:e1:db:50:f5:4f:52:16:2f:1b:35:4e:
                    f5:78:cf:05:d6:13:a4:1f:e6:6f:68:a4:0f:ca:cd:
                    fb:d4:82:12:fe:53:9e:03:10:7d:39:eb:ab:c2:2c:
                    bf:7d:20:69:7d:c5:ba:9c:fa:3c:f5:af:ac:7b:14:
                    8c:9a:a7:c0:d5:7a:df:55:96:aa:d3:a0:6d:4f:bf:
                    0a:b0:c4:80:e1:7d:12:25:e9:56:94:8d:37:0f:9f:
                    01:bf:31:6a:de:ce:39:71:14:f5:04:00:c6:d0:a6:
                    9a:8f:cd:8a:b9:81:53:8b:0c:ce:93:92:5b:16:85:
                    89:f1:da:20:73:48:d8:40:e1:df:de:07:45:d7:64:
                    dd:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C3:D0:93:8D:E4:8A:86:14:A3:A4:5A:D7:13:49:18:FC:AA:B3:5F
            X509v3 Authority Key Identifier:
                keyid:5B:59:FC:B6:53:41:FD:33:78:9B:FB:AF:A9:63:7D:F0:CE:40:4D:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1n8tlNB_TN4m_uvqWN98M5ATas.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:34:18:94:c5:de:b8:ef:76:74:0b:d5:8c:30:25:88:0e:6a:
         6c:1d:22:3a:1a:a7:04:1e:aa:49:38:ba:e0:c4:39:c5:d4:b0:
         a4:78:b5:1d:8e:de:1e:a4:00:50:c8:42:87:ab:a1:6f:90:5d:
         e2:79:76:92:39:81:a8:9f:9a:e3:79:25:7b:be:af:21:1d:41:
         24:d9:6e:42:59:15:ab:c4:fc:87:4f:ae:34:dc:40:a3:1a:87:
         3b:14:08:07:b8:94:77:0c:30:fe:0e:5b:af:d3:69:8f:03:4d:
         4e:4b:cd:12:87:c2:b0:08:85:93:a8:bc:c7:78:6d:c2:c1:95:
         66:c6:d4:da:1d:b7:7e:94:a4:d0:79:82:1f:eb:5f:34:4e:fe:
         7d:4b:02:84:e3:6a:f6:88:46:a8:60:41:3a:09:42:43:ba:b6:
         31:fd:23:c6:e5:60:43:2b:9a:1b:a4:e3:25:d2:ef:34:85:cc:
         6d:fe:5c:9e:90:08:25:e6:ae:01:a7:50:23:4f:2e:40:b0:89:
         5d:9e:3c:44:03:06:44:eb:be:36:8b:da:77:82:c1:1f:b5:fc:
         e0:36:e5:cc:fb:49:d4:da:6a:c3:dc:b5:a1:7b:d6:56:a6:bd:
         91:e9:61:ef:63:28:b8:ce:7d:cc:3b:6f:e8:10:e8:fc:92:c4:
         bd:b2:4d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:09:13 2026 by rpki-client