Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.mft
File:                     WBMy9dPriCpcJS_f2YC2Cho3jkE.mft (raw, json)
Hash identifier:          PK54AahO0aVQX6kZBSOxtFN1/QCgNJcQAE2HiXUEvIQ=
Subject key identifier:   E8:1A:06:9A:93:89:13:FA:89:3A:32:D5:D4:45:B3:01:1F:79:C5:A9
Authority key identifier: 58:13:32:F5:D3:EB:88:2A:5C:25:2F:DF:D9:80:B6:0A:1A:37:8E:41
Certificate issuer:       /CN=A913D65B/serialNumber=581332F5D3EB882A5C252FDFD980B60A1A378E41
Certificate serial:       02ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBMy9dPriCpcJS_f2YC2Cho3jkE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.mft
Manifest number:          02D9
Signing time:             Sat 07 Nov 2026 01:46:25 +0000
Manifest this update:     Sat 07 Nov 2026 01:46:24 +0000
Manifest next update:     Sat 14 Nov 2026 01:46:24 +0000
Files and hashes:         1: WBMy9dPriCpcJS_f2YC2Cho3jkE.crl (hash: UXlPbrqfO7nXl/RIt59Ug11RWcQZti85QpTVaxQprdA=)
                          2: A3D8BD72E04511EF8BD5FA0EC4F9AE02.roa (hash: pqdYInv/nDZDiEacJiXZnEMVlHi8rCr80wjDS/GVWDc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.crl
                          rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBMy9dPriCpcJS_f2YC2Cho3jkE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Nov 2026 01:46:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 749 (0x2ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D65B, serialNumber=581332F5D3EB882A5C252FDFD980B60A1A378E41
        Validity
            Not Before: Nov  7 01:46:24 2026 GMT
            Not After : Nov 14 01:46:24 2026 GMT
        Subject: CN=6aee82f1-bcc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2f:31:d3:30:18:f3:a1:a4:de:3d:b5:5c:c5:
                    7a:7e:4f:53:84:ea:f3:43:3c:2a:18:f1:1f:d4:7f:
                    9a:75:dc:90:72:93:8a:ec:dd:43:1e:41:bf:da:bf:
                    b1:21:eb:16:86:af:9d:46:cc:48:b8:ed:c9:00:7b:
                    6d:2a:a7:94:98:b5:f8:55:49:6f:e9:e7:54:d2:98:
                    17:41:3c:86:e4:e6:eb:5d:22:b2:76:1c:8b:d6:76:
                    92:49:3e:f8:9f:64:8a:7e:b7:7e:8c:9d:1e:7a:4f:
                    eb:b5:85:e5:87:63:27:03:ad:09:8f:86:65:3d:a7:
                    f3:34:d9:da:82:e6:46:d3:4f:0f:4b:33:21:97:cb:
                    76:85:f7:ce:63:3c:29:6f:44:35:a9:c6:ff:f5:f1:
                    5b:5c:e0:1a:61:7a:30:8c:e2:43:1a:1a:2f:0c:32:
                    e9:29:a0:e6:6a:2d:11:67:2e:88:53:20:39:33:16:
                    f3:16:b6:4e:61:db:3a:eb:17:79:5f:21:70:c2:0a:
                    e9:21:37:6c:18:b6:f2:9d:42:3b:9c:3d:20:74:c8:
                    ee:c1:b7:cf:61:88:ee:a2:39:37:3d:d4:9f:63:9e:
                    bd:c0:98:ad:3e:53:c5:fe:ca:88:ea:f5:fc:20:82:
                    75:39:d3:9d:d4:47:90:3f:95:61:bd:f6:db:a1:d5:
                    1a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:1A:06:9A:93:89:13:FA:89:3A:32:D5:D4:45:B3:01:1F:79:C5:A9
            X509v3 Authority Key Identifier:
                keyid:58:13:32:F5:D3:EB:88:2A:5C:25:2F:DF:D9:80:B6:0A:1A:37:8E:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBMy9dPriCpcJS_f2YC2Cho3jkE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:49:85:2c:d1:99:01:89:92:9a:2f:2e:5c:d2:f5:42:22:7f:
         40:41:bf:4a:96:35:6a:8b:e4:30:9d:7b:2b:dc:75:74:99:d5:
         29:05:51:17:c3:bf:70:26:ce:74:43:2b:d1:97:65:8b:54:e0:
         5e:75:7c:f1:8b:f6:f5:00:6d:c3:34:80:69:9f:f7:1b:40:6f:
         42:4e:d3:87:a0:fd:b9:2e:5b:47:7e:7a:c5:f6:4b:e0:22:9b:
         80:c8:f9:a0:f7:a8:d7:91:f0:54:a1:43:50:3f:7e:be:ce:d6:
         7f:af:45:0e:45:ed:80:ff:b9:b3:ac:7b:6c:dc:a3:09:39:d9:
         50:9d:5d:37:60:97:d5:d0:58:bc:91:f8:2d:cb:39:fd:02:b5:
         cf:08:07:64:9c:95:c8:aa:60:c4:91:f7:d3:b0:04:19:b9:cd:
         1c:67:f7:26:d4:eb:16:a3:bf:cf:56:b5:33:28:a8:cd:b4:eb:
         83:e0:b1:ba:4f:d6:97:ff:33:e8:89:21:ec:11:67:e4:b9:21:
         07:48:63:d8:ec:d0:87:0f:fb:64:89:d0:55:07:52:c6:ea:69:
         a7:97:df:f6:6e:a8:57:e8:79:78:df:ff:1c:d8:a1:9a:ff:9e:
         91:6c:10:a6:60:88:d7:00:79:c4:a2:10:35:8f:c1:cc:f8:07:
         36:08:af:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 14:15:01 2026 by rpki-client