Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.mft
File:                     wfLqVt--Dy-St0HdaM9WcRWzspI.mft (raw, json)
Hash identifier:          inQjihhpIDSJKnwuNr72NTWXOFyFyeSndjsv9ntQNkE=
Subject key identifier:   36:8F:E4:C8:B3:3C:9B:31:47:CA:1C:56:15:87:38:16:0A:84:E2:91
Authority key identifier: C1:F2:EA:56:DF:BE:0F:2F:92:B7:41:DD:68:CF:56:71:15:B3:B2:92
Certificate issuer:       /CN=A9147150/serialNumber=C1F2EA56DFBE0F2F92B741DD68CF567115B3B292
Certificate serial:       DF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wfLqVt--Dy-St0HdaM9WcRWzspI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.mft
Manifest number:          DC
Signing time:             Mon 21 Sep 2026 06:36:54 +0000
Manifest this update:     Mon 21 Sep 2026 06:36:53 +0000
Manifest next update:     Mon 28 Sep 2026 06:36:53 +0000
Files and hashes:         1: wfLqVt--Dy-St0HdaM9WcRWzspI.crl (hash: ZEL5Ziiy8HteCuKQhxg0PLuph+GTnZrOqJSHPKSPFc4=)
                          2: EB6E0EE8677811F08B1EA154C4F9AE02.roa (hash: UrgCCNXOLmuDFDcXXpTOK2wp7L0sF7p5H0LsmWYVOV4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.crl
                          rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wfLqVt--Dy-St0HdaM9WcRWzspI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 06:36:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 223 (0xdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147150, serialNumber=C1F2EA56DFBE0F2F92B741DD68CF567115B3B292
        Validity
            Not Before: Sep 21 06:36:53 2026 GMT
            Not After : Sep 28 06:36:53 2026 GMT
        Subject: CN=6ab0d085-33c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b1:0b:e4:e5:e0:80:5b:e4:f6:8f:44:13:ad:
                    5a:67:4b:51:e7:2c:4b:0e:96:4c:71:a1:61:0e:99:
                    e3:34:ce:12:84:6b:1f:52:0c:19:51:90:81:1c:e6:
                    f2:34:c8:67:66:10:48:54:1c:84:b9:89:57:ce:57:
                    a5:50:b2:84:9b:e7:8d:e6:b2:f0:4f:21:88:c1:4d:
                    42:ab:36:38:f6:4d:e1:f5:71:f7:05:7a:21:75:3b:
                    20:fd:0c:b2:7b:2f:c5:1e:ec:3b:2b:c5:2e:13:a0:
                    b4:aa:62:42:cd:0c:c4:20:40:d7:f2:1d:bf:39:68:
                    91:3c:72:14:2e:d4:49:3e:4c:f0:13:34:79:e6:d2:
                    0d:92:9e:27:0e:3b:d8:56:6f:c2:e9:e8:e2:b6:39:
                    df:65:14:7b:41:df:03:a9:21:95:f1:71:4d:40:3f:
                    55:c6:40:10:07:25:90:e7:df:d2:a8:be:0b:e9:e1:
                    ef:0e:7d:c5:40:6e:6a:1b:77:0d:7b:c3:97:51:2d:
                    de:10:f5:62:d3:75:94:46:98:c8:51:a5:8e:e7:e9:
                    c9:f7:20:1e:39:a4:58:55:1b:11:72:5f:a6:6c:56:
                    7d:da:1b:77:f4:58:21:a0:81:b1:82:42:7e:cf:4b:
                    16:aa:22:27:b2:36:a8:88:cc:1d:33:48:43:61:b6:
                    a5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:8F:E4:C8:B3:3C:9B:31:47:CA:1C:56:15:87:38:16:0A:84:E2:91
            X509v3 Authority Key Identifier:
                keyid:C1:F2:EA:56:DF:BE:0F:2F:92:B7:41:DD:68:CF:56:71:15:B3:B2:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wfLqVt--Dy-St0HdaM9WcRWzspI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:84:51:7e:16:c9:65:47:ee:e2:ab:c7:7d:c4:b3:f1:9d:20:
         11:31:12:43:a0:cf:47:cb:fb:40:90:0b:74:6c:3a:63:2d:ac:
         6e:5b:7f:ae:d9:e0:35:86:c2:68:3e:32:4c:39:55:8c:6b:19:
         41:d8:9d:0d:34:3a:c6:01:a6:86:b6:64:fc:3a:64:15:5e:65:
         8e:6c:a0:bb:22:0c:18:5e:63:ba:c8:89:c8:7b:9a:aa:74:27:
         a3:ea:62:89:7d:69:7a:56:d4:e5:38:76:3c:2e:bb:02:f3:3b:
         3f:a3:9b:ff:54:f4:e6:4b:cd:62:9f:3f:9c:c9:85:b5:d9:cc:
         22:65:f4:1d:1e:2d:56:b4:e6:d2:62:0e:02:28:af:d3:a9:f6:
         26:ba:b1:d2:2c:a1:bb:c9:a3:d7:ba:bc:dd:9c:d3:77:d7:ba:
         ca:88:a1:dc:de:e5:70:db:ee:3e:f9:c3:52:33:60:ec:85:77:
         d2:87:de:56:10:01:b0:6a:64:40:4c:9b:2e:1a:5f:6b:1e:01:
         b9:c0:4c:b2:64:df:7b:a3:55:cf:56:55:67:e9:79:35:f7:fd:
         4c:f3:e7:19:33:cc:c5:86:f3:02:a8:7b:15:7f:e6:34:d3:11:
         27:49:52:c6:bf:de:0b:0e:1d:26:86:b5:cb:8d:28:14:c7:43:
         5e:9e:5a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:33:31 2026 by rpki-client