Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.mft
File:                     1WjiWa6pXRNIxmPjlfyma-wQwwk.mft (raw, json)
Hash identifier:          70Y8zSoxh1A7ksJCE0hAXlzcBMi0JVw/YRijZjqWpQo=
Subject key identifier:   57:CF:09:8F:F4:FE:3D:FB:3F:50:23:F4:4D:9C:EF:6A:14:0F:73:9B
Authority key identifier: D5:68:E2:59:AE:A9:5D:13:48:C6:63:E3:95:FC:A6:6B:EC:10:C3:09
Certificate issuer:       /CN=A914C086/serialNumber=D568E259AEA95D1348C663E395FCA66BEC10C309
Certificate serial:       3581
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WjiWa6pXRNIxmPjlfyma-wQwwk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.mft
Manifest number:          3580
Signing time:             Sat 26 Sep 2026 15:05:53 +0000
Manifest this update:     Sat 26 Sep 2026 15:05:52 +0000
Manifest next update:     Sat 03 Oct 2026 15:05:52 +0000
Files and hashes:         1: 1WjiWa6pXRNIxmPjlfyma-wQwwk.crl (hash: ilbqEFDv6AtvdjjaHa/XCe8F86NYBk+S7vKWOpIkPeY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.crl
                          rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WjiWa6pXRNIxmPjlfyma-wQwwk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 15:05:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13697 (0x3581)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C086, serialNumber=D568E259AEA95D1348C663E395FCA66BEC10C309
        Validity
            Not Before: Sep 26 15:05:52 2026 GMT
            Not After : Oct  3 15:05:52 2026 GMT
        Subject: CN=6ab7df51-7f6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:bf:cc:0c:17:64:b7:f1:2a:d2:99:5f:90:9e:
                    8c:ba:55:86:f6:7c:98:24:c8:42:ad:4a:5b:0b:f0:
                    04:6a:2f:df:eb:1a:d4:c5:cf:3c:00:1b:ac:e4:bc:
                    6c:af:3a:05:29:12:5e:18:d3:a7:bb:81:b0:19:c3:
                    c7:7e:9d:89:e5:7a:29:dd:b6:9f:b7:1f:71:27:e0:
                    ca:a6:1e:57:b6:7e:80:8a:a6:a1:cd:04:46:51:e7:
                    75:34:f7:91:f5:1d:16:3e:dc:6b:d1:5a:d0:85:6f:
                    61:72:4b:71:b7:2b:da:81:39:13:43:0d:49:14:f1:
                    01:86:7a:f5:d1:c1:fa:73:70:c8:89:91:76:bc:1a:
                    28:f5:89:35:32:fb:56:05:f3:db:8f:ad:1f:cf:1c:
                    b0:59:43:93:57:10:e9:3f:32:76:2e:3c:48:a1:f3:
                    da:51:c9:40:b1:29:b4:20:82:de:98:7c:28:3c:fb:
                    96:cf:76:50:64:2a:82:c1:a6:27:36:cb:6f:d5:b7:
                    76:ed:d2:62:d2:6d:b9:b2:08:10:53:e5:ae:69:52:
                    95:37:31:34:ee:c9:ff:ce:44:c9:e5:b4:8a:33:e2:
                    f8:e5:47:66:34:9f:e2:8e:0e:03:3c:72:33:cd:ee:
                    49:16:60:3e:95:a5:97:cc:8a:3f:f2:47:38:b6:fa:
                    1e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:CF:09:8F:F4:FE:3D:FB:3F:50:23:F4:4D:9C:EF:6A:14:0F:73:9B
            X509v3 Authority Key Identifier:
                keyid:D5:68:E2:59:AE:A9:5D:13:48:C6:63:E3:95:FC:A6:6B:EC:10:C3:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WjiWa6pXRNIxmPjlfyma-wQwwk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:fd:1b:28:6e:b7:8b:d7:09:0f:b0:ed:a0:26:87:01:63:6a:
         b7:2a:7e:75:79:b7:af:ed:76:49:c1:f3:22:63:a1:16:36:4a:
         ad:e1:43:42:a2:3d:a1:9f:0a:46:c5:93:4c:6f:a7:42:92:b7:
         f0:60:3e:4a:07:3e:da:83:05:c9:d0:a6:9b:3b:de:4e:38:7f:
         56:2a:ae:84:9c:af:ac:34:c2:9d:8b:c2:10:50:64:a1:b5:c6:
         b1:28:91:76:f6:fd:69:92:8d:15:81:aa:5d:7b:83:44:84:04:
         8b:0f:7c:a4:0b:34:a7:02:48:24:4e:37:ff:9f:72:81:0a:54:
         2e:f5:9d:42:f4:30:a7:ea:70:ef:d6:bc:88:e2:7d:7d:2b:55:
         22:0c:49:56:04:5b:1f:4e:28:09:90:1f:71:bb:89:e0:0f:13:
         c1:d9:46:06:73:bb:cb:85:f9:b4:09:51:07:99:14:e0:30:e0:
         f9:f8:39:c0:12:03:a0:51:8e:6f:51:41:66:9f:bf:03:40:28:
         b5:d5:c0:06:77:13:e7:13:47:88:67:ca:10:2f:58:69:17:f3:
         23:a3:9b:a2:81:91:af:ee:87:23:dc:b0:49:69:7a:22:f4:ba:
         e2:f0:d2:31:15:a7:ba:48:e3:59:28:6f:d3:1b:de:69:40:f8:
         d1:39:3e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:21:31 2026 by rpki-client