Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft
File:                     wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft (raw, json)
Hash identifier:          DiiC+xD09+2Bvt1wTAwwYSQ/c+M6vqPKwlqZvaeoR8k=
Subject key identifier:   CA:FC:48:0F:49:EC:90:25:D2:E3:04:8B:6A:A0:09:6C:E2:14:3E:16
Authority key identifier: C0:F7:D8:D6:D5:41:63:76:5F:F6:F3:E2:FB:33:7F:CF:E1:50:72:19
Certificate issuer:       /CN=A91A445C/serialNumber=C0F7D8D6D54163765FF6F3E2FB337FCFE1507219
Certificate serial:       30EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wPfY1tVBY3Zf9vPi-zN_z-FQchk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft
Manifest number:          30DE
Signing time:             Thu 08 Oct 2026 15:28:38 +0000
Manifest this update:     Thu 08 Oct 2026 15:28:38 +0000
Manifest next update:     Thu 15 Oct 2026 15:28:38 +0000
Files and hashes:         1: wPfY1tVBY3Zf9vPi-zN_z-FQchk.crl (hash: FFT7sxk5DsTwIy2XF+gIJ0Mh3kQS/L34HuQBmVTUkHM=)
                          2: 47A21580B6CC11EC98672826C4F9AE02.roa (hash: wtG9zcw24gOM5B08rJZr4FcF3LYoXdfgSkCeRx0p6Uo=)
                          3: dxLck8ENvqKCFCG48qm13E6NGtg.asa (hash: 3iWwpxG5FY4BuafGphXogA42l4X7bH7dzfmrbJ4oIhI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.crl
                          rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wPfY1tVBY3Zf9vPi-zN_z-FQchk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 15:28:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12524 (0x30ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A445C, serialNumber=C0F7D8D6D54163765FF6F3E2FB337FCFE1507219
        Validity
            Not Before: Oct  8 15:28:38 2026 GMT
            Not After : Oct 15 15:28:38 2026 GMT
        Subject: CN=6ac7b6a6-6c9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3e:a3:2f:07:e0:49:38:5a:e0:54:f9:5c:9f:
                    88:ff:c2:83:ad:c9:96:ee:ef:8b:8a:f8:d3:0d:02:
                    18:d6:e0:da:bf:4b:fa:4e:10:22:f5:22:ea:6b:0d:
                    cf:70:2d:01:7c:c0:41:22:90:b9:ba:fb:40:51:0a:
                    14:59:4e:37:b0:b8:26:35:f4:a5:f9:09:61:a1:e4:
                    2a:30:59:78:21:0c:bb:8c:e4:1a:24:96:95:98:ab:
                    73:92:39:89:a2:f6:1a:a1:6b:39:7d:d6:5e:23:8d:
                    e5:8e:f3:10:4f:74:f4:e7:46:e7:b4:09:68:80:73:
                    a4:96:b3:6f:66:14:ac:2b:2a:52:35:78:a6:45:f5:
                    1d:a5:37:37:c4:5a:40:19:78:f8:4b:32:26:86:7b:
                    86:7a:5d:78:39:f9:88:4b:59:57:fd:8a:d1:50:4c:
                    01:8f:71:fe:5f:3f:70:72:43:cf:d2:19:8e:6a:56:
                    41:a9:54:9a:c3:e7:7e:c4:68:00:27:15:2e:50:a9:
                    b8:d1:62:36:88:2f:c5:6e:8d:06:2e:c1:94:cf:df:
                    c0:cf:4d:3d:27:06:32:e8:f4:06:da:88:31:41:93:
                    2a:c8:be:7b:f6:cc:c9:07:74:bf:c6:7f:b5:78:50:
                    27:fb:6f:44:91:e1:e2:3c:01:cd:e4:c8:b0:5f:6e:
                    4b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:FC:48:0F:49:EC:90:25:D2:E3:04:8B:6A:A0:09:6C:E2:14:3E:16
            X509v3 Authority Key Identifier:
                keyid:C0:F7:D8:D6:D5:41:63:76:5F:F6:F3:E2:FB:33:7F:CF:E1:50:72:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wPfY1tVBY3Zf9vPi-zN_z-FQchk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:11:c8:18:0c:e2:78:61:b4:c9:7b:e1:ef:70:f8:0c:70:c2:
         60:a1:3b:85:b8:75:09:9a:d4:94:cd:b8:0b:c2:44:fd:97:11:
         3b:34:17:9c:e4:c1:20:bf:49:9f:3c:39:1d:72:90:bc:93:91:
         c2:45:e3:37:00:c1:36:65:c4:c4:53:27:50:d4:c8:ca:1f:6c:
         67:13:58:71:85:ea:5b:bd:f3:07:6f:e8:08:1c:fa:68:9c:0b:
         a9:67:4a:26:5d:0d:34:fe:3d:1e:d3:9c:70:98:65:97:f4:64:
         88:a5:22:29:46:f6:70:86:2c:46:58:51:94:3e:52:95:e3:fc:
         09:db:15:96:79:76:dd:2d:be:05:cb:be:cb:91:a9:0e:79:08:
         31:81:fb:c6:de:61:ac:15:3a:d9:3c:20:8a:1d:dc:26:71:87:
         96:5a:d9:03:ca:2d:23:36:2b:0c:ed:a1:48:f9:a9:59:76:86:
         ae:fc:ea:67:96:c2:62:97:78:cd:f6:8a:f6:d3:5d:96:73:bf:
         ba:34:ed:ca:e5:b5:a3:1c:1e:67:20:00:3f:90:27:0e:a2:a3:
         64:79:c5:82:64:8d:31:e0:35:57:02:38:47:91:a8:d7:05:ca:
         1f:71:02:94:c3:a2:0a:a8:6b:bf:9e:9a:96:34:36:62:0d:6d:
         bb:3c:66:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 15:27:19 2026 by rpki-client