Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft
File:                     WYxfzqVVrllcyel2HA-y3q6kRR8.mft (raw, json)
Hash identifier:          d2r6Ji+6xcCX1lzu4p3cBOVqiPTE6UNjQofDMHN0zOk=
Subject key identifier:   B8:3C:A5:A7:FE:BE:BE:39:A3:D1:48:9F:FF:9E:A2:44:C4:80:CE:19
Authority key identifier: 59:8C:5F:CE:A5:55:AE:59:5C:C9:E9:76:1C:0F:B2:DE:AE:A4:45:1F
Certificate issuer:       /CN=A91FB880/serialNumber=598C5FCEA555AE595CC9E9761C0FB2DEAEA4451F
Certificate serial:       029A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft
Manifest number:          0294
Signing time:             Sun 27 Sep 2026 02:01:04 +0000
Manifest this update:     Sun 27 Sep 2026 02:01:03 +0000
Manifest next update:     Sun 04 Oct 2026 02:01:03 +0000
Files and hashes:         1: WYxfzqVVrllcyel2HA-y3q6kRR8.crl (hash: CemkDtCwE0x96o9p/2OEPFXTJ+4nI6AqUXTwuNnRiHE=)
                          2: 50A5B1ACC75911EDBFF7200BC4F9AE02.roa (hash: 8F41x2fmLZ5M8u7RlY+aL2kU1d0Mkh7PiR5sgAseHxg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.crl
                          rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 02:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 666 (0x29a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB880, serialNumber=598C5FCEA555AE595CC9E9761C0FB2DEAEA4451F
        Validity
            Not Before: Sep 27 02:01:03 2026 GMT
            Not After : Oct  4 02:01:03 2026 GMT
        Subject: CN=6ab878e0-06ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cc:98:d6:41:b2:50:f0:67:d3:13:ff:e9:58:
                    2b:e2:e4:e6:16:75:f8:8e:d5:ef:3b:9b:c8:03:0b:
                    20:72:d9:e3:b4:a7:16:f6:e0:ca:1c:2a:8d:b6:4d:
                    dc:0b:e4:56:0a:d2:18:0d:c1:a5:94:15:71:27:4a:
                    f8:e5:32:ce:9e:f1:be:72:60:c0:6d:ec:f7:31:49:
                    de:3d:b0:bf:01:f2:36:5a:43:c6:2c:44:dd:ef:6f:
                    0a:49:a0:d7:3d:8e:9f:cf:d8:a3:15:6b:45:05:2d:
                    14:bb:82:e8:cc:dc:6e:f9:a2:6f:ad:00:22:e6:45:
                    29:0a:f5:3b:13:5b:fd:70:0c:b9:1b:67:ff:aa:6b:
                    e0:e5:c2:5e:1e:4e:96:7f:ce:df:2f:0f:56:15:7d:
                    8e:8b:9d:a4:bc:cb:c4:83:1c:db:60:16:52:58:98:
                    f3:95:7f:db:dd:9f:0c:3b:03:a3:88:18:ed:f5:71:
                    5f:4c:40:99:99:b5:7b:c1:2a:98:78:a6:fd:40:27:
                    74:1b:a0:1d:d7:e7:26:63:50:7b:69:43:a1:1e:fd:
                    d0:63:da:83:4f:be:05:ef:dd:17:77:04:eb:19:94:
                    52:d7:20:52:e3:69:23:21:22:c3:87:eb:1d:0b:15:
                    28:48:e6:18:08:f2:c7:1e:b1:6b:67:4c:bc:71:93:
                    81:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:3C:A5:A7:FE:BE:BE:39:A3:D1:48:9F:FF:9E:A2:44:C4:80:CE:19
            X509v3 Authority Key Identifier:
                keyid:59:8C:5F:CE:A5:55:AE:59:5C:C9:E9:76:1C:0F:B2:DE:AE:A4:45:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:c4:f2:2d:f3:a6:ef:3b:db:72:33:4b:29:28:3d:2b:f2:48:
         72:eb:9e:e5:ac:ab:54:06:f2:c5:ae:55:24:b4:de:b2:5b:63:
         84:f8:2a:57:18:c1:b9:6a:47:bf:00:f8:56:0b:29:37:64:22:
         b4:7b:44:18:b8:78:a0:40:c2:82:74:21:c2:c3:80:0c:3d:17:
         80:ee:2a:f6:2b:b0:c0:e8:fc:d1:4b:82:ab:f4:20:bf:16:a5:
         44:b3:28:7a:00:b2:1a:c6:5b:90:99:a9:c9:d5:85:11:6e:e3:
         4a:0c:68:8d:e6:80:57:62:5a:b2:aa:f3:c7:4c:41:f7:cd:e8:
         1f:c1:fb:12:41:ea:bd:0a:85:32:08:f9:82:76:bc:53:5c:bf:
         ac:23:b9:df:a3:9f:dd:ed:48:98:c3:66:7d:0a:63:28:2e:f7:
         a5:41:f5:a2:96:63:a0:9f:bb:94:46:71:70:2f:1b:74:54:40:
         26:2c:8f:62:1f:e1:e2:b5:78:35:e2:3c:11:99:20:3c:89:30:
         54:b0:25:ad:ef:17:5b:8a:db:09:9f:a7:4d:be:51:09:91:fe:
         17:0b:00:25:24:4a:ab:06:88:3d:09:f5:87:5c:34:46:bb:4f:
         de:c6:51:cf:6c:ce:4f:bd:27:48:04:98:9a:3d:63:91:65:e1:
         d0:10:3c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:38:30 2026 by rpki-client