Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft
File:                     WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft (raw, json)
Hash identifier:          /GcN49k7YI93BsmfX7sTcUqCuJvjQcEjSKlVC7IZpNs=
Subject key identifier:   FA:28:F7:07:E2:19:C7:AB:5C:5D:40:6A:0C:09:A7:B1:02:01:3C:53
Authority key identifier: 5B:3B:8B:FB:2C:9F:2C:E8:83:51:5F:A3:DC:F9:D1:C0:CF:AD:07:A4
Certificate issuer:       /CN=A9188D0C/serialNumber=5B3B8BFB2C9F2CE883515FA3DCF9D1C0CFAD07A4
Certificate serial:       03EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft
Manifest number:          03E6
Signing time:             Fri 09 Oct 2026 00:38:46 +0000
Manifest this update:     Fri 09 Oct 2026 00:38:45 +0000
Manifest next update:     Fri 16 Oct 2026 00:38:45 +0000
Files and hashes:         1: WzuL-yyfLOiDUV-j3PnRwM-tB6Q.crl (hash: twMhWtiktbZtdDBZs5WFzWrxbDce6umQuL4vjdpP6is=)
                          2: 42CD71AEE33511EC9EDB371BC4F9AE02.roa (hash: BmkDfGNwDvTFPWcc2oNSmzFiujBl/Zzlp/ccZkQmaXc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.crl
                          rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 00:38:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1006 (0x3ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188D0C, serialNumber=5B3B8BFB2C9F2CE883515FA3DCF9D1C0CFAD07A4
        Validity
            Not Before: Oct  9 00:38:45 2026 GMT
            Not After : Oct 16 00:38:45 2026 GMT
        Subject: CN=6ac83796-367f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:73:9c:fe:9d:c0:ba:6a:7f:c8:91:ea:14:7d:
                    a5:84:5b:89:0f:c3:1f:bd:aa:09:c8:6c:6d:98:1c:
                    64:f6:8f:00:f6:5e:af:54:c1:03:3b:d2:43:7f:c0:
                    c6:b3:1f:88:89:fe:11:46:9c:75:4c:4f:a9:91:99:
                    86:d3:25:4a:84:37:86:b9:7c:c2:5f:15:0e:10:21:
                    89:fd:26:a6:2f:1d:2e:f2:db:a3:80:ae:5a:ba:ef:
                    e9:47:df:e0:50:66:b0:6b:92:06:f4:60:75:c9:26:
                    7a:31:ec:73:52:5f:e2:2d:a8:58:54:49:27:10:c8:
                    91:75:79:5b:ae:af:5a:9b:88:3c:60:b7:e2:74:b6:
                    79:a6:de:5c:29:8d:e4:8b:4d:77:42:a8:5c:d1:16:
                    9e:b9:d3:04:7e:38:05:11:20:85:5c:2a:06:ea:7f:
                    ab:f3:de:26:2c:52:be:e8:96:4f:d3:48:4b:b5:0e:
                    b4:8c:15:c0:19:41:b6:d6:38:ec:da:b0:7b:12:33:
                    56:79:a4:25:26:28:fb:f1:ea:1c:55:ea:19:7e:1a:
                    84:0a:00:d9:0a:e2:d3:ba:8e:db:82:c6:a6:4b:11:
                    49:91:5c:45:eb:29:f0:89:7b:02:f1:b3:7f:ec:9e:
                    db:c0:e9:c4:56:ec:b0:60:34:de:ca:70:f3:ad:ab:
                    eb:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:28:F7:07:E2:19:C7:AB:5C:5D:40:6A:0C:09:A7:B1:02:01:3C:53
            X509v3 Authority Key Identifier:
                keyid:5B:3B:8B:FB:2C:9F:2C:E8:83:51:5F:A3:DC:F9:D1:C0:CF:AD:07:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:d5:a6:c4:61:be:2d:31:8b:94:0a:9d:ce:5f:06:0b:ad:4c:
         e8:3e:f1:76:d4:25:75:18:73:8c:a7:16:c7:c8:26:45:2e:98:
         bb:c2:9e:d2:9e:74:2a:b2:93:1f:c7:5b:a4:41:5c:4f:73:6e:
         92:67:f9:b6:b9:23:26:0c:98:ac:0b:3d:c8:ec:26:60:13:61:
         48:14:d5:b8:a9:5a:68:9c:a5:c3:2f:ed:63:44:bd:1d:57:cf:
         67:55:a1:6b:9a:7b:44:89:f8:38:a9:73:d1:a7:e4:45:60:65:
         00:50:8f:82:b3:62:48:de:58:b7:6c:b9:93:cc:c4:bb:3b:c9:
         84:3e:16:61:92:c5:7f:81:30:89:21:a3:7f:4c:96:f5:bb:6e:
         fa:47:34:09:ac:2a:b7:98:01:1d:be:6b:4c:d7:69:c3:7d:98:
         eb:e8:cc:31:18:9a:a2:d3:33:6d:55:f2:60:95:ed:43:c0:3c:
         aa:22:e6:83:82:59:98:9f:85:f1:97:02:a9:89:f8:97:46:9a:
         b6:d6:99:9a:d5:f6:4b:db:e4:ce:54:de:e9:ff:45:e0:ff:61:
         1a:0b:a7:c7:f2:da:7b:f6:e9:04:b7:41:6f:49:8e:f3:97:89:
         42:87:ac:17:38:8e:42:05:8d:d6:3a:07:c0:35:f1:14:32:b6:
         e2:79:c2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 22:45:18 2026 by rpki-client