Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft
File:                     weInZRraO_vBh3GuyLYAJnI7YK0.mft (raw, json)
Hash identifier:          yssmu0f807YKAIVwg9kqhuaZThdfDTP0rE5rymnLja4=
Subject key identifier:   FF:0A:86:4A:DE:7D:F2:A6:AA:9B:13:3C:58:D7:AD:EB:10:6D:44:B6
Authority key identifier: C1:E2:27:65:1A:DA:3B:FB:C1:87:71:AE:C8:B6:00:26:72:3B:60:AD
Certificate issuer:       /CN=A9112707/serialNumber=C1E227651ADA3BFBC18771AEC8B60026723B60AD
Certificate serial:       2A0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft
Manifest number:          29D0
Signing time:             Sun 20 Sep 2026 15:32:50 +0000
Manifest this update:     Sun 20 Sep 2026 15:32:49 +0000
Manifest next update:     Sun 27 Sep 2026 15:32:49 +0000
Files and hashes:         1: weInZRraO_vBh3GuyLYAJnI7YK0.crl (hash: O39IlmW8OzubfZbDFLo4xkrvjDT+ifJxaPP4cm/CYKk=)
                          2: 39932724578611EA8CC3B124C4F9AE02.roa (hash: 5xVxyBLTVv6TTJwr4d6CRZOAj/oOkKXh9D4XacOHsAU=)
                          3: 3AB3F80E578611EA8CC3B124C4F9AE02.roa (hash: C5FmIwbgprkig61fqNmKWaJWuBinr8tfV+3G1uObZOs=)
                          4: C3876BD8589D11EC9CF19A41C4F9AE02.roa (hash: er4abjooP2pzYLbFn4zXYhItU6fj/FaQ5TH/f8stFqc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.crl
                          rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 15:32:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10764 (0x2a0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112707, serialNumber=C1E227651ADA3BFBC18771AEC8B60026723B60AD
        Validity
            Not Before: Sep 20 15:32:49 2026 GMT
            Not After : Sep 27 15:32:49 2026 GMT
        Subject: CN=6aaffca2-9f31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:26:cc:4d:07:38:93:a3:52:87:7b:7b:a3:49:
                    a2:6c:31:be:a4:3f:e1:62:ce:8c:33:19:a7:46:b9:
                    2f:d4:e5:99:ee:0c:ae:20:cc:b9:e8:75:a7:44:0e:
                    99:1b:9a:ad:5f:ce:75:ef:2a:08:6f:26:06:79:cf:
                    11:c4:da:74:54:52:ee:19:2c:9c:dd:ca:36:54:9d:
                    87:e9:86:58:36:27:c5:5f:8d:f1:b8:17:ba:82:64:
                    de:7e:ce:96:54:d2:2e:68:b8:4a:5c:f4:3f:74:02:
                    15:98:d8:5b:05:af:70:c5:fe:5f:4f:e7:99:27:51:
                    e4:c9:ad:e0:c5:7e:02:7a:98:e0:21:52:16:a4:b2:
                    05:56:ee:79:85:eb:96:4e:fd:18:e1:6f:ac:6d:73:
                    55:d9:1a:fd:ef:a5:4e:d3:cf:1b:31:c0:f0:82:e8:
                    42:13:52:ec:85:44:73:4a:c7:2c:27:b4:48:d4:80:
                    d0:45:8f:e2:17:56:a9:f6:1b:0d:dd:50:bb:0e:fb:
                    35:24:15:3e:27:95:b6:46:0c:cc:ac:ac:06:9b:e0:
                    1a:a1:87:cc:8a:b8:ff:ff:c3:c1:dc:a0:3a:7c:e9:
                    79:78:17:07:f2:0c:02:d1:cd:58:d4:ad:e2:8f:ca:
                    a7:77:0b:51:e3:5c:48:d9:5b:27:f2:45:0c:31:1f:
                    0b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:0A:86:4A:DE:7D:F2:A6:AA:9B:13:3C:58:D7:AD:EB:10:6D:44:B6
            X509v3 Authority Key Identifier:
                keyid:C1:E2:27:65:1A:DA:3B:FB:C1:87:71:AE:C8:B6:00:26:72:3B:60:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:0c:d3:05:8b:ed:8e:b6:2c:95:76:bd:19:3e:9d:43:b6:dd:
         d1:71:13:4e:ed:ba:ad:15:05:2b:84:f5:41:44:0d:84:dc:e4:
         24:77:fb:3e:4a:96:77:db:1d:7b:e6:d7:05:d7:1c:8a:3e:ab:
         7d:ad:35:2f:02:16:e9:ef:94:b7:d8:84:55:c8:21:d2:1c:8d:
         71:cf:34:f0:6d:09:06:5d:4b:c7:b7:6d:48:1a:a2:14:08:c6:
         ba:f0:14:a0:03:8f:bf:81:ea:c3:c4:af:ae:1f:08:cc:05:9f:
         97:1d:62:0b:19:46:6c:53:80:6d:20:f8:f2:be:5c:05:41:3b:
         19:78:92:fd:76:79:4d:21:f8:0f:1b:fb:03:e0:b9:37:2b:2f:
         3a:77:46:95:be:56:65:b2:46:a0:f7:6a:67:34:83:10:06:a2:
         8f:48:5d:ee:b0:30:0a:a6:63:ae:ea:52:6d:40:f0:6e:de:e1:
         92:7b:bc:25:ad:eb:94:5c:4f:ae:e6:05:bc:cf:c9:ba:5c:5e:
         39:a3:aa:d8:30:e4:e0:d8:2e:94:9e:d2:4a:7c:de:e3:20:d2:
         b7:b2:d8:ae:46:5a:dd:90:8d:cf:ac:78:96:20:34:6d:73:c7:
         bf:1a:ea:e2:3e:7b:03:42:0c:8d:f9:f2:da:cf:f7:d6:74:62:
         03:85:c2:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:09:00 2026 by rpki-client