Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/WapOuYXqXAVIVAS0XMNUp9Ghpso.mft
File:                     WapOuYXqXAVIVAS0XMNUp9Ghpso.mft (raw, json)
Hash identifier:          8bwu/4JbZj0h3EOi+d1sIICcdfaKsvtyuWieYnZq43s=
Subject key identifier:   25:E0:92:2C:F8:F1:58:7E:36:CD:42:34:4C:F7:F6:F2:9B:33:56:96
Authority key identifier: 59:AA:4E:B9:85:EA:5C:05:48:54:04:B4:5C:C3:54:A7:D1:A1:A6:CA
Certificate issuer:       /CN=A91689C8/serialNumber=59AA4EB985EA5C05485404B45CC354A7D1A1A6CA
Certificate serial:       02B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WapOuYXqXAVIVAS0XMNUp9Ghpso.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/WapOuYXqXAVIVAS0XMNUp9Ghpso.mft
Manifest number:          03CD
Signing time:             Mon 21 Sep 2026 01:25:57 +0000
Manifest this update:     Mon 21 Sep 2026 01:25:56 +0000
Manifest next update:     Mon 28 Sep 2026 01:25:56 +0000
Files and hashes:         1: WapOuYXqXAVIVAS0XMNUp9Ghpso.crl (hash: Ok5awX2rsFLUJlbqPhQqiydWDP5Jsujr5UrgNGz0wQA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/WapOuYXqXAVIVAS0XMNUp9Ghpso.crl
                          rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/WapOuYXqXAVIVAS0XMNUp9Ghpso.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WapOuYXqXAVIVAS0XMNUp9Ghpso.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 01:25:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 697 (0x2b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91689C8, serialNumber=59AA4EB985EA5C05485404B45CC354A7D1A1A6CA
        Validity
            Not Before: Sep 21 01:25:56 2026 GMT
            Not After : Sep 28 01:25:56 2026 GMT
        Subject: CN=6ab087a4-413c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:db:e8:fb:38:af:8d:15:cb:53:64:97:42:f4:
                    0c:1e:1c:ff:87:f7:e8:58:a3:7d:31:33:20:ed:ab:
                    32:c5:7e:1f:53:89:7e:a9:23:86:be:6d:80:8b:c5:
                    d9:cf:bf:62:16:1d:d2:98:43:f2:ff:9c:7a:7f:6b:
                    39:9c:e0:82:41:b7:b2:c2:f3:ba:a0:1d:ca:12:93:
                    49:d6:f9:af:0e:06:55:28:8f:1d:2b:9b:62:80:85:
                    dc:31:58:81:dc:8f:9e:4b:56:64:6c:8f:c8:2c:7c:
                    c5:3b:f2:a2:8e:f4:43:4f:7b:8b:18:3f:88:c0:46:
                    b8:95:03:b8:a4:ff:bf:94:97:82:a1:62:f4:31:18:
                    a0:cf:15:a2:ad:af:e0:a0:a4:13:6d:8e:65:70:9c:
                    59:26:f7:6e:a1:3e:37:18:c0:d2:e6:06:1f:4b:12:
                    ee:36:de:d0:c6:3b:a1:a5:0a:a0:61:a9:60:92:d2:
                    09:8a:92:1f:6f:16:e1:bc:a7:df:36:8e:81:37:29:
                    44:e2:5c:19:3a:fe:aa:3f:59:0f:ca:3b:d4:c0:ae:
                    50:b1:20:24:8a:a9:e4:60:8f:37:c9:48:06:eb:2e:
                    1a:b8:d3:0b:f5:7e:cb:4b:47:83:a0:df:35:fb:f8:
                    e1:0d:fb:ea:26:67:54:fc:67:ad:79:22:3c:f0:14:
                    04:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E0:92:2C:F8:F1:58:7E:36:CD:42:34:4C:F7:F6:F2:9B:33:56:96
            X509v3 Authority Key Identifier:
                keyid:59:AA:4E:B9:85:EA:5C:05:48:54:04:B4:5C:C3:54:A7:D1:A1:A6:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/WapOuYXqXAVIVAS0XMNUp9Ghpso.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WapOuYXqXAVIVAS0XMNUp9Ghpso.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/WapOuYXqXAVIVAS0XMNUp9Ghpso.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:b7:d3:f5:a4:8f:29:3f:06:cf:12:8c:cf:62:b5:f2:08:58:
         38:8c:6d:47:ac:3e:a5:53:78:30:20:09:48:1d:0d:cf:1e:7f:
         3b:86:b8:47:82:6c:59:34:b7:da:c4:00:92:72:00:9a:42:7b:
         98:cd:db:62:ed:16:2e:e4:9b:a3:bb:3a:86:a2:1d:43:3c:83:
         37:f1:77:a9:51:74:8b:26:51:f8:68:d6:1f:b6:bd:87:a9:68:
         8a:53:e9:fe:29:dc:4e:57:7d:ca:25:b1:ee:c8:3e:99:c3:62:
         6d:60:e8:c0:5c:2f:36:da:31:46:b2:5e:d5:32:8a:83:02:25:
         54:b2:8c:57:23:ed:6b:c5:02:7d:c5:22:8f:18:e8:63:45:3e:
         9b:68:db:0d:87:b7:77:c0:bd:27:33:83:2b:5a:f8:ba:eb:69:
         46:9f:e6:43:af:68:e3:4b:5d:9a:fd:67:3d:c4:49:83:d3:09:
         72:c1:12:59:40:f9:42:13:21:de:12:94:a2:b6:56:62:ba:44:
         7a:9d:ca:7a:a4:f1:44:cf:e9:63:53:38:b7:cd:aa:e5:55:f3:
         04:08:a9:2f:9b:a9:a2:a7:d2:39:7b:cf:9a:5c:24:8f:19:f1:
         07:92:97:fa:4d:48:5e:60:fc:96:70:8b:97:46:c0:a3:bd:7b:
         68:f1:10:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:43:55 2026 by rpki-client