Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft
File:                     wP8fMmfYrZgSiz45fM_3lzt1CM0.mft (raw, json)
Hash identifier:          /ke4KRl/sLlIf+hfJDP2F44dRpAdKnzHQFLMdXNQgqY=
Subject key identifier:   3B:1E:4E:09:2C:24:B0:CB:A3:5D:AF:F4:9A:C9:7E:9C:E0:A1:1A:C7
Authority key identifier: C0:FF:1F:32:67:D8:AD:98:12:8B:3E:39:7C:CF:F7:97:3B:75:08:CD
Certificate issuer:       /CN=A91653D3/serialNumber=C0FF1F3267D8AD98128B3E397CCFF7973B7508CD
Certificate serial:       01B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wP8fMmfYrZgSiz45fM_3lzt1CM0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft
Manifest number:          01B1
Signing time:             Mon 21 Sep 2026 03:58:41 +0000
Manifest this update:     Mon 21 Sep 2026 03:58:40 +0000
Manifest next update:     Mon 28 Sep 2026 03:58:40 +0000
Files and hashes:         1: wP8fMmfYrZgSiz45fM_3lzt1CM0.crl (hash: OzLJLk8ZEepsBz2I1HOvwQqc0gYm2CMbvPjJNyyNZFs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.crl
                          rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wP8fMmfYrZgSiz45fM_3lzt1CM0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 03:58:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 433 (0x1b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91653D3, serialNumber=C0FF1F3267D8AD98128B3E397CCFF7973B7508CD
        Validity
            Not Before: Sep 21 03:58:40 2026 GMT
            Not After : Sep 28 03:58:40 2026 GMT
        Subject: CN=6ab0ab71-32f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c2:9e:00:ed:d4:36:b7:3e:46:13:80:72:24:
                    3a:fd:0c:e7:3f:f1:d3:ef:e7:21:72:d6:dc:71:60:
                    96:e7:23:44:d5:05:25:bc:4b:29:09:50:1c:34:31:
                    a8:b4:22:24:c9:98:15:ae:4e:6f:3a:81:58:d6:8f:
                    16:26:6a:72:5e:ee:8e:84:f8:ce:e6:1f:d9:0b:db:
                    f9:8f:5d:f2:c8:d0:dd:45:b3:a8:52:5d:67:ba:92:
                    0d:ae:a2:b8:2d:f4:2b:0b:8e:e8:83:3d:e3:37:3e:
                    2d:62:89:83:d4:90:dd:f7:b6:ba:8b:a3:aa:54:80:
                    7b:84:a3:0c:1b:b8:e1:0c:16:13:72:af:f0:35:1a:
                    08:5a:e1:c8:11:4b:25:c0:ee:0a:87:2a:b6:37:85:
                    dc:8f:73:80:31:a0:77:ab:93:04:16:3b:d0:2d:23:
                    66:9c:4b:c9:63:69:8c:e3:7f:b2:54:eb:43:ed:d5:
                    8d:1e:f8:65:23:7c:eb:9c:ea:f8:70:0f:c9:74:23:
                    f5:a8:3a:d8:bf:a6:90:af:4b:60:6a:e6:22:c6:c9:
                    11:7f:bf:ab:f8:be:b6:17:cb:7d:2f:b1:b6:40:7f:
                    7a:56:3c:96:cd:f2:fb:42:0a:28:35:0e:6f:7d:4b:
                    c0:0f:8f:1b:ef:b9:64:03:2c:05:7b:1a:ae:0f:8f:
                    7a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:1E:4E:09:2C:24:B0:CB:A3:5D:AF:F4:9A:C9:7E:9C:E0:A1:1A:C7
            X509v3 Authority Key Identifier:
                keyid:C0:FF:1F:32:67:D8:AD:98:12:8B:3E:39:7C:CF:F7:97:3B:75:08:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wP8fMmfYrZgSiz45fM_3lzt1CM0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:9c:4f:46:b2:c5:dc:0f:1f:64:7e:12:17:53:05:84:a9:53:
         7f:bc:41:c5:0e:bb:3e:b3:33:ae:6e:53:37:f2:75:c9:b4:2a:
         6b:2b:af:b3:51:d3:2a:97:d0:05:27:67:ec:3b:ee:d1:6f:4a:
         fd:df:92:5c:40:14:04:92:2d:e6:23:a6:36:63:cb:21:81:69:
         c7:ec:cb:d5:fa:b5:7e:6e:b2:7d:a3:d8:f9:17:66:7a:02:8e:
         10:01:73:28:73:ed:e5:63:19:a0:17:6c:6b:cd:ac:3f:1a:76:
         b3:fe:1a:72:d1:40:36:02:ce:49:65:67:10:fd:75:7d:47:45:
         70:fa:69:7b:a5:c9:36:16:6b:a1:dd:a1:43:99:e7:11:82:c8:
         3d:6c:8e:db:87:3a:3a:29:ae:fb:c9:df:47:a9:b1:82:82:95:
         67:4c:78:01:79:d2:5b:d3:79:dd:59:70:2a:c1:30:2c:3a:7d:
         59:67:b2:c3:b3:a5:95:4a:fc:b4:a9:3b:6d:8c:18:ec:c5:ec:
         c3:5d:26:84:ef:d1:af:26:1a:7a:4d:3e:0b:be:25:05:0e:cc:
         8b:7c:b9:5d:f9:90:ff:c7:0d:bb:b4:63:bb:a9:fd:2d:63:07:
         95:82:e7:0d:04:65:8e:ac:e6:40:73:8a:d6:d3:4e:6d:ba:ea:
         cd:85:c8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:19:18 2026 by rpki-client