Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft
File:                     WZsF7zwJOSLemJvcc5k_RtYldUk.mft (raw, json)
Hash identifier:          Mo1NPrem1Y6ZkvWMtJveqLXLKV4bTMx04EzdWI4NmLw=
Subject key identifier:   82:84:D0:5D:43:17:FC:D8:05:08:43:C0:36:5C:8B:8D:1B:41:3A:2E
Authority key identifier: 59:9B:05:EF:3C:09:39:22:DE:98:9B:DC:73:99:3F:46:D6:25:75:49
Certificate issuer:       /CN=A91308CE/serialNumber=599B05EF3C093922DE989BDC73993F46D6257549
Certificate serial:       357D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft
Manifest number:          357D
Signing time:             Tue 22 Sep 2026 14:52:25 +0000
Manifest this update:     Tue 22 Sep 2026 14:52:24 +0000
Manifest next update:     Tue 29 Sep 2026 14:52:24 +0000
Files and hashes:         1: WZsF7zwJOSLemJvcc5k_RtYldUk.crl (hash: CNmSCnwOvTNYpjU6fBl74ta96hxwJQcVhOUskAnFM5A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.crl
                          rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 14:52:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13693 (0x357d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91308CE, serialNumber=599B05EF3C093922DE989BDC73993F46D6257549
        Validity
            Not Before: Sep 22 14:52:24 2026 GMT
            Not After : Sep 29 14:52:24 2026 GMT
        Subject: CN=6ab29629-d13f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:83:67:b1:18:8c:04:f7:29:a4:f8:e5:c5:08:
                    6f:18:c3:65:6a:0e:2d:30:eb:9c:f9:7f:1b:b5:93:
                    02:69:53:33:d6:bc:89:0e:fb:ef:04:66:59:f2:3c:
                    c9:04:71:de:29:4d:b2:ad:c9:b4:30:f8:17:eb:2f:
                    07:4f:4e:ee:c2:a2:84:c8:c0:8c:26:2a:cf:66:7f:
                    73:d7:77:0c:77:94:f4:8f:b8:42:03:15:e6:be:57:
                    b5:bb:f7:ef:53:b0:38:65:ee:ef:cc:6d:1a:b3:cb:
                    6b:ec:72:52:55:51:da:24:55:a7:7d:24:11:f9:b5:
                    65:3f:3e:0c:54:46:f7:d9:2a:b3:03:46:e3:99:a4:
                    77:43:0e:9e:96:7f:32:76:06:d9:f0:ec:61:08:ca:
                    2d:11:c7:f5:2f:87:5c:d8:b5:32:e8:2c:63:1b:21:
                    d6:e7:49:17:40:b4:3b:43:6e:fe:93:32:50:51:1b:
                    18:e0:e6:58:f5:5a:32:68:1f:aa:5e:7d:61:e5:9c:
                    e4:ca:3a:55:59:a6:95:6e:2f:c6:ce:84:86:8a:6f:
                    80:da:97:f9:3c:9a:24:b6:b1:79:ac:e1:c3:ec:80:
                    f1:6f:b8:d3:96:61:91:7c:58:a2:3e:05:26:6b:14:
                    91:bc:42:45:d2:36:3a:94:c1:01:23:39:f6:8a:80:
                    6f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:84:D0:5D:43:17:FC:D8:05:08:43:C0:36:5C:8B:8D:1B:41:3A:2E
            X509v3 Authority Key Identifier:
                keyid:59:9B:05:EF:3C:09:39:22:DE:98:9B:DC:73:99:3F:46:D6:25:75:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:94:26:46:c9:28:da:74:a9:87:b3:85:15:c3:5d:6b:03:fd:
         ce:60:af:a2:81:36:6a:ee:5e:c5:7e:61:97:01:f3:88:53:d0:
         1f:98:f5:b8:0b:35:2a:1f:67:07:72:33:cb:cf:0c:65:c2:88:
         f3:8d:dc:8e:a2:84:f4:84:a4:e4:3d:7a:d7:57:1b:1f:47:1c:
         8f:b7:cb:f5:c8:06:a8:2b:e3:87:27:9c:a2:64:aa:d5:f1:2f:
         7d:aa:0f:5b:cd:43:10:8e:ef:95:25:27:24:dd:f1:4a:06:2f:
         a5:03:d9:c3:39:13:d1:1a:b1:19:15:29:7f:53:55:82:2e:1c:
         7f:d4:78:fe:52:a0:e8:ea:9b:11:f3:75:9f:4b:f8:a0:6e:09:
         52:3b:8a:00:9a:96:3e:63:a0:05:55:0a:db:4f:96:ff:15:10:
         df:8d:b5:06:b1:55:ad:1d:7c:76:89:f2:8a:f2:8c:d0:bf:10:
         9b:f9:45:52:9a:08:ba:6d:dd:b8:8b:6c:fc:20:60:bb:79:03:
         ab:e4:8d:a4:68:c3:f5:18:b4:54:23:21:74:1c:3c:ed:97:c8:
         95:3b:a1:3e:25:e0:ea:3e:b4:83:22:8a:f7:77:9f:d2:a0:a6:
         0a:17:00:84:5e:1b:51:c1:81:ea:d3:9f:b1:f7:95:bc:16:0d:
         04:32:c7:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:57:21 2026 by rpki-client