Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft
File:                     WdWIElpxZphzjR0enm2KaNdAmyc.mft (raw, json)
Hash identifier:          eCihDqIzTb2G+T+QZwc8yjj70vc+wJ9PIgdrXB1olvs=
Subject key identifier:   12:E1:7F:E8:EA:FF:FE:4A:B4:82:8F:97:0F:54:BF:15:ED:9F:1D:04
Authority key identifier: 59:D5:88:12:5A:71:66:98:73:8D:1D:1E:9E:6D:8A:68:D7:40:9B:27
Certificate issuer:       /CN=A91A27AB/serialNumber=59D588125A716698738D1D1E9E6D8A68D7409B27
Certificate serial:       028D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft
Manifest number:          026D
Signing time:             Mon 21 Sep 2026 02:23:14 +0000
Manifest this update:     Mon 21 Sep 2026 02:23:14 +0000
Manifest next update:     Mon 28 Sep 2026 02:23:14 +0000
Files and hashes:         1: WdWIElpxZphzjR0enm2KaNdAmyc.crl (hash: 96Y6+MQbI4pKySRiEivp4nLeFYERX9etvaU0Sq0ZB8o=)
                          2: E7AA3C5A37D911F1B36666D1C4833773.roa (hash: siCvmhGtqnY35C3NOh4YSIg2JyFDveLmbf9cMd4ZK0U=)
                          3: 74444F50490E11EFA7EAAA70C4F9AE02.roa (hash: NMrm1g9FM9NJPr1lYfQZFfpW90lnT17RE5GP7Fw1OY4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.crl
                          rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 02:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 653 (0x28d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A27AB, serialNumber=59D588125A716698738D1D1E9E6D8A68D7409B27
        Validity
            Not Before: Sep 21 02:23:14 2026 GMT
            Not After : Sep 28 02:23:14 2026 GMT
        Subject: CN=6ab09512-85f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ce:a9:6d:af:72:27:e6:d8:f9:03:f2:33:77:
                    3e:74:79:22:ab:6b:46:6a:a8:93:dc:7a:49:6f:d2:
                    75:86:dc:b8:34:28:bc:9c:18:5c:bd:91:72:2f:52:
                    cb:4b:8f:f4:53:cc:84:63:01:7e:29:76:fb:6d:08:
                    58:00:8d:0e:44:0e:24:eb:a4:8f:5f:cd:e2:ac:b2:
                    ee:f5:ca:61:6e:3b:10:f2:8b:61:37:a5:1c:d8:4a:
                    b5:24:aa:55:5d:3a:47:cb:80:97:6c:48:b2:f7:a2:
                    90:0d:6c:cf:7a:92:76:43:cd:2b:cb:65:e3:b3:d8:
                    ca:46:9e:af:33:c5:2e:cc:97:57:c6:7f:c9:d7:c7:
                    51:55:d5:5e:4c:96:75:cb:e5:47:87:fe:d3:e6:64:
                    bd:9d:1c:e3:9a:1f:f9:9d:77:0b:a9:55:63:9d:18:
                    73:50:54:bf:4d:f2:d4:af:05:8a:71:6d:8e:c5:f6:
                    c3:19:9f:44:38:41:59:dd:49:b8:f5:27:2e:e3:33:
                    bf:20:cc:24:62:25:f5:6e:32:5b:b7:17:bc:44:83:
                    de:15:f3:0a:1a:5d:09:99:6e:37:57:fd:c3:66:75:
                    42:2f:61:d2:37:ad:9b:7d:bd:c7:15:8e:aa:5c:a9:
                    22:4f:79:72:f2:9c:75:4d:f5:16:3f:92:c5:2f:31:
                    31:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:E1:7F:E8:EA:FF:FE:4A:B4:82:8F:97:0F:54:BF:15:ED:9F:1D:04
            X509v3 Authority Key Identifier:
                keyid:59:D5:88:12:5A:71:66:98:73:8D:1D:1E:9E:6D:8A:68:D7:40:9B:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:c0:a4:61:1a:0a:ac:95:2c:d3:96:d7:2a:82:5a:a6:15:6a:
         42:a7:a9:2b:05:2e:e7:36:bf:ec:af:f7:a2:55:9f:40:12:9a:
         1f:ba:ff:3a:d7:9c:e2:32:02:29:6d:50:78:d4:86:4b:d6:08:
         e9:24:98:d1:c6:5c:2a:cd:41:19:3f:4b:be:5c:d5:d1:b5:77:
         2b:a4:b2:a9:11:27:70:5a:61:9c:6e:70:89:78:17:da:35:8c:
         de:d7:71:33:fb:d9:96:7b:6b:b4:14:c5:ac:9f:a7:e5:d9:58:
         c7:2e:bf:7d:1f:1a:61:06:df:95:37:28:f5:24:63:51:47:4f:
         9e:d1:77:0e:ad:d3:e0:29:f0:e0:ac:bc:f0:5a:1b:02:e1:5a:
         3e:79:a8:a8:e5:82:35:f9:fc:82:e3:74:cf:7e:51:62:a7:10:
         e4:31:f0:ac:62:67:d4:fb:87:8e:5e:f1:d0:90:31:4b:71:ef:
         6f:b1:73:2f:e4:e9:30:e3:b1:d1:ae:02:a6:91:90:00:36:0a:
         ae:b1:5b:8e:64:d4:87:b4:1e:c6:f3:02:da:af:9f:a9:ae:be:
         fd:06:22:fe:0e:c9:29:13:b4:51:fb:09:10:6f:2b:5d:cc:df:
         2b:1b:46:23:ac:02:c0:21:2d:1c:2c:8c:88:5a:4a:fe:e0:e7:
         0e:61:ec:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:18:47 2026 by rpki-client