Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft
File:                     WF3cT9n54xQAXzcZj9HiLmgknes.mft (raw, json)
Hash identifier:          bLx//gt9/pEP4gNULhu7/edQIM6HOFSTokUckuvzbZc=
Subject key identifier:   41:E8:7F:91:2B:46:D0:A0:C8:F7:72:4B:13:4A:6A:1C:83:A2:F7:E9
Authority key identifier: 58:5D:DC:4F:D9:F9:E3:14:00:5F:37:19:8F:D1:E2:2E:68:24:9D:EB
Certificate issuer:       /CN=A912871A/serialNumber=585DDC4FD9F9E314005F37198FD1E22E68249DEB
Certificate serial:       055C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WF3cT9n54xQAXzcZj9HiLmgknes.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft
Manifest number:          0555
Signing time:             Fri 02 Oct 2026 23:42:45 +0000
Manifest this update:     Fri 02 Oct 2026 23:42:45 +0000
Manifest next update:     Fri 09 Oct 2026 23:42:45 +0000
Files and hashes:         1: WF3cT9n54xQAXzcZj9HiLmgknes.crl (hash: GlGIKGJgulW8EiAnPuPspwszrfWvwbqCfiX3ILxLOr4=)
                          2: 5431D022524211ECA52D990FC4F9AE02.roa (hash: OxBZXjM5WU3mTzBTkJpk2hM02aP7JRhZY0bot56cYO4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.crl
                          rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WF3cT9n54xQAXzcZj9HiLmgknes.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 23:42:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1372 (0x55c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912871A, serialNumber=585DDC4FD9F9E314005F37198FD1E22E68249DEB
        Validity
            Not Before: Oct  2 23:42:45 2026 GMT
            Not After : Oct  9 23:42:45 2026 GMT
        Subject: CN=6ac04175-8117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:13:d3:c6:ce:db:83:01:98:dc:c2:54:df:ce:
                    22:c4:7b:33:18:ee:75:43:60:9b:62:68:17:0b:e6:
                    a8:a9:a3:be:2a:1c:b4:18:f0:1b:aa:13:62:de:af:
                    23:d1:06:01:4f:5c:05:ab:8b:21:a9:b6:99:a1:a0:
                    fe:78:13:a6:1a:73:76:bd:e6:46:2c:32:03:f8:46:
                    f4:95:e2:93:01:ef:48:fb:35:8c:5d:d3:04:52:2c:
                    ae:d8:fc:96:2f:2d:42:86:f7:07:cd:c1:99:4d:5e:
                    ba:47:85:2f:23:46:59:b6:ff:c6:fd:7e:31:d4:36:
                    38:fb:c2:e6:e7:97:6f:de:ec:8e:a2:4e:f1:cd:30:
                    3f:6f:a2:a5:5f:40:d3:1a:80:08:16:9f:eb:5e:ad:
                    e8:c3:d5:54:98:48:9b:1b:3a:56:d9:a3:82:8f:27:
                    38:23:67:9e:60:d2:2d:18:11:90:5b:6e:66:24:fd:
                    6a:ec:73:fb:55:7c:e0:5c:5d:19:bd:97:bd:7c:81:
                    53:ba:59:5a:e8:8a:63:c4:ad:de:91:a8:00:cf:89:
                    75:01:8c:b0:d1:68:2e:1f:aa:52:98:a9:5f:cb:77:
                    0d:72:7f:c9:cc:11:1f:67:b9:12:b5:61:d5:b8:b2:
                    07:d1:1a:3c:03:f6:ed:4e:d8:65:79:1f:57:67:bb:
                    f9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E8:7F:91:2B:46:D0:A0:C8:F7:72:4B:13:4A:6A:1C:83:A2:F7:E9
            X509v3 Authority Key Identifier:
                keyid:58:5D:DC:4F:D9:F9:E3:14:00:5F:37:19:8F:D1:E2:2E:68:24:9D:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WF3cT9n54xQAXzcZj9HiLmgknes.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:9c:c2:7c:a0:27:22:4f:f3:6e:02:c1:89:f4:85:7b:44:60:
         28:60:a8:d5:58:71:47:48:10:be:bf:5b:90:a4:0a:31:ee:c4:
         f4:31:b9:9d:da:ef:11:90:0e:2f:21:88:66:c1:9b:da:cb:c4:
         1f:a9:08:a5:f1:ed:60:f8:dd:b0:27:e3:16:65:5c:ab:67:fa:
         fc:f6:f9:48:8a:ef:6d:88:f7:87:56:2d:33:41:3b:9f:f9:ae:
         19:c3:83:da:3c:2d:50:53:c0:ac:84:d0:24:19:f1:af:99:78:
         28:2e:d8:e8:e2:87:ed:8a:6d:c7:dc:70:3f:4c:6c:0f:fd:e1:
         b5:82:02:e3:2a:34:c7:3a:ad:90:f0:42:85:8b:e4:cc:d6:d6:
         6a:33:b9:38:f9:2e:f4:06:46:c3:6b:0b:78:66:9f:d0:49:45:
         0d:87:12:a4:8b:b4:bf:ff:8a:51:b3:d5:e8:2d:b1:0f:5d:2d:
         8e:52:56:07:1f:15:f2:a8:64:e5:3e:74:56:6c:cd:0c:89:74:
         0f:6f:99:84:4a:39:c7:de:ab:14:e4:8d:0a:f6:7e:c4:78:e3:
         3f:2d:1c:c0:c2:2e:3c:ab:b0:5e:42:46:e1:0d:77:30:dc:75:
         64:00:58:84:cd:e0:a9:2c:0a:1b:55:c4:11:ac:42:74:9f:23:
         ec:85:0e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 11:35:33 2026 by rpki-client