Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft
File:                     WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft (raw, json)
Hash identifier:          M6RIFypOvYo3fTl7ctKvSmg2qT/4vVi7S86MsPXaxsc=
Subject key identifier:   08:6D:EF:EA:57:5C:F4:CB:13:54:D6:48:36:F6:19:61:49:4F:95:93
Authority key identifier: 5A:22:3B:9C:52:4F:AA:ED:87:27:21:A4:2B:3C:30:2D:97:1E:38:04
Certificate issuer:       /CN=A9137843/serialNumber=5A223B9C524FAAED872721A42B3C302D971E3804
Certificate serial:       065A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft
Manifest number:          0652
Signing time:             Sun 20 Sep 2026 22:31:07 +0000
Manifest this update:     Sun 20 Sep 2026 22:31:06 +0000
Manifest next update:     Sun 27 Sep 2026 22:31:06 +0000
Files and hashes:         1: WiI7nFJPqu2HJyGkKzwwLZceOAQ.crl (hash: mgh6u0jFSuDd06ZFvqLjhYM0/XDf8mS+oaBBcHCioY0=)
                          2: F2DDD4EEFB3211EB967B1759C4F9AE02.roa (hash: QnCIfaBwZolfnjhgtwAliuHrR1tHCV7ZzJ1Dz2+uA9o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.crl
                          rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 22:31:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1626 (0x65a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137843, serialNumber=5A223B9C524FAAED872721A42B3C302D971E3804
        Validity
            Not Before: Sep 20 22:31:06 2026 GMT
            Not After : Sep 27 22:31:06 2026 GMT
        Subject: CN=6ab05eaa-61fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:43:23:4e:ca:f4:e2:ac:b1:73:16:9c:12:29:
                    e5:b6:1d:ba:b8:7a:9d:04:a4:27:bd:32:50:78:cf:
                    a6:6b:34:c8:f1:ae:b0:ea:91:83:ff:fa:42:b7:b7:
                    8c:ed:08:be:4b:88:32:b7:a2:5f:02:93:06:e3:63:
                    b3:4d:d0:4b:49:0e:03:56:52:0c:a4:c6:c9:64:02:
                    52:2d:d7:db:85:af:ea:c5:2b:67:9a:52:e4:48:52:
                    e5:50:f6:5e:fb:5c:20:e9:1b:5b:9c:5e:3c:8f:97:
                    a3:00:d6:b9:ce:8a:ab:fa:30:82:25:e4:63:76:bd:
                    99:fc:b2:4d:e6:63:ec:6a:2b:d4:e9:a0:3f:0c:c3:
                    62:d9:6a:2a:35:f9:82:b2:51:b5:cc:93:49:c3:40:
                    7b:79:e3:74:5a:5e:b7:fc:51:7a:04:e3:47:5a:f5:
                    c9:10:f6:7e:6e:6e:48:ba:49:3e:a6:29:80:08:03:
                    1d:95:eb:7f:1f:eb:43:f7:52:c3:8f:d2:fd:27:49:
                    fd:61:4e:00:18:84:96:47:0c:27:bb:59:1a:86:0d:
                    dc:63:e5:00:a8:21:93:a7:8d:ad:5b:2d:59:83:96:
                    59:bd:8a:4e:d8:09:d5:3f:cf:62:aa:52:87:2c:13:
                    7f:6a:d3:45:24:2e:ab:f6:d4:04:7b:e8:9e:25:65:
                    89:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:6D:EF:EA:57:5C:F4:CB:13:54:D6:48:36:F6:19:61:49:4F:95:93
            X509v3 Authority Key Identifier:
                keyid:5A:22:3B:9C:52:4F:AA:ED:87:27:21:A4:2B:3C:30:2D:97:1E:38:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:4d:b3:7a:ff:a8:05:c0:75:5c:1a:8e:87:07:16:16:49:00:
         3e:17:7a:6c:29:e3:b2:34:18:f8:e9:25:c4:8a:be:65:17:2e:
         f7:c2:29:88:da:29:a6:45:07:ed:86:f4:84:37:4a:bb:6a:c0:
         95:e9:25:75:5c:70:f7:21:bd:55:75:fc:65:49:3c:ea:d3:90:
         d6:e8:6d:1a:e3:09:0b:ce:dc:89:3a:e1:a6:f4:cf:12:5c:05:
         58:72:af:f3:eb:7e:0a:38:15:c3:4e:d3:2c:37:73:c3:e5:f9:
         28:c7:15:e3:b6:5e:6a:45:bb:83:d6:65:b3:20:8a:66:5b:be:
         f2:2d:52:02:96:d6:90:9e:0d:9d:72:c5:49:5f:e8:21:a7:38:
         da:90:28:e1:ef:51:3d:c4:71:19:41:96:1a:39:ba:6d:42:57:
         4e:45:4e:8a:d9:f1:64:4c:da:b9:3e:e0:45:7c:07:64:39:03:
         0e:e6:71:3f:41:17:60:d8:a6:d9:6d:dd:ef:46:32:20:30:2d:
         26:cb:71:1d:53:65:18:68:fd:d6:22:ee:eb:32:d7:d1:31:06:
         04:91:a1:9b:54:4c:34:bc:39:dc:d5:a3:9c:27:48:92:66:01:
         fa:e7:cf:ae:50:0b:60:72:68:b5:24:ce:5e:73:6e:40:1a:4b:
         bb:22:64:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:17:39 2026 by rpki-client