Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.mft
File:                     Wr7NjqrTfqV665OfLAsUKXSEH4o.mft (raw, json)
Hash identifier:          rejp4wn/7dIVYxD4CiKHtGtgZ23qXCF7Xbw5R8hsfj8=
Subject key identifier:   E4:91:B2:E3:AC:AB:33:C3:57:5E:67:21:D9:34:5F:8C:FB:59:C1:FA
Authority key identifier: 5A:BE:CD:8E:AA:D3:7E:A5:7A:EB:93:9F:2C:0B:14:29:74:84:1F:8A
Certificate issuer:       /CN=A91A5A82/serialNumber=5ABECD8EAAD37EA57AEB939F2C0B142974841F8A
Certificate serial:       0129
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr7NjqrTfqV665OfLAsUKXSEH4o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.mft
Manifest number:          0125
Signing time:             Tue 13 Oct 2026 06:27:26 +0000
Manifest this update:     Tue 13 Oct 2026 06:27:26 +0000
Manifest next update:     Tue 20 Oct 2026 06:27:26 +0000
Files and hashes:         1: Wr7NjqrTfqV665OfLAsUKXSEH4o.crl (hash: TUEMj8DwA+DoB3r3Y/XvGXihFzmB1Emzay3gIwq1bmM=)
                          2: D0B32912090911F0A5348F26C4F9AE02.roa (hash: 4Lyw/AU+Wk60oVjtMsai5M/XpQ4x8ZuW3TaDGBXdpZU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.crl
                          rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr7NjqrTfqV665OfLAsUKXSEH4o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 06:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 297 (0x129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5A82, serialNumber=5ABECD8EAAD37EA57AEB939F2C0B142974841F8A
        Validity
            Not Before: Oct 13 06:27:26 2026 GMT
            Not After : Oct 20 06:27:26 2026 GMT
        Subject: CN=6acdcf4e-66b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b0:22:3d:36:31:3a:41:22:34:de:cb:e5:b3:
                    84:e4:bb:59:26:34:fa:35:70:e9:0f:0b:b8:17:9e:
                    be:d5:30:30:88:09:69:b2:00:ee:9b:8b:d4:f3:3f:
                    4e:89:0d:ae:be:63:92:3b:3b:1f:c5:19:82:15:61:
                    a1:af:d0:6b:12:4a:54:cf:35:ce:3e:3f:d7:5d:ab:
                    50:1f:f1:41:a0:b6:f4:35:c0:bc:ec:cc:25:84:6f:
                    f1:ad:f7:d1:d0:03:22:16:61:42:64:d5:49:cf:b6:
                    7d:c1:63:c9:4e:94:ee:39:ce:07:d4:ef:a6:b0:9a:
                    ea:fd:3b:f8:91:75:3f:ca:15:fb:a5:ed:65:4d:eb:
                    ff:aa:85:31:71:b6:3a:e6:0d:a4:14:07:52:f8:cd:
                    12:28:4e:23:83:02:c7:f3:88:4c:71:6a:b4:92:43:
                    4c:71:28:b1:ba:c1:e4:c1:01:52:b0:8b:52:00:61:
                    b5:50:98:24:7b:f3:2b:22:aa:1f:8c:55:e7:4f:73:
                    bc:47:ca:c1:aa:5f:bc:10:ae:38:fb:e6:23:bb:db:
                    97:a7:08:6c:be:b8:10:90:c7:25:a1:2b:b6:1c:0c:
                    52:2e:9c:ef:b6:4b:53:e1:35:f4:cb:e9:d0:51:48:
                    92:cf:f0:11:25:17:30:60:18:7f:6c:0b:dc:6a:2d:
                    ad:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:91:B2:E3:AC:AB:33:C3:57:5E:67:21:D9:34:5F:8C:FB:59:C1:FA
            X509v3 Authority Key Identifier:
                keyid:5A:BE:CD:8E:AA:D3:7E:A5:7A:EB:93:9F:2C:0B:14:29:74:84:1F:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr7NjqrTfqV665OfLAsUKXSEH4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:bc:d3:7b:15:c6:c2:70:79:e5:da:dc:12:75:3f:62:68:43:
         04:cb:97:31:f9:fa:b0:bb:ff:f9:e0:f3:29:5f:61:c6:e0:be:
         d3:30:62:c6:a9:b9:d3:52:d8:27:5a:aa:5f:98:5d:8a:1b:7b:
         8d:9b:8c:62:7d:61:60:8c:a3:28:21:2d:13:33:1c:6b:c0:cf:
         8d:6a:fd:84:70:8f:17:66:a4:c2:26:e2:4f:85:fe:06:7b:b2:
         d5:7c:b8:aa:6a:27:e5:75:45:44:e1:db:49:8b:df:da:14:bc:
         d5:b1:ad:a5:1c:27:e2:4a:e9:46:71:c2:2d:eb:33:d7:35:73:
         af:aa:5f:bf:e5:f7:56:8b:cf:0c:a3:fb:e2:0d:81:0e:51:cb:
         25:43:56:a7:a0:23:0b:34:30:cc:fb:6c:78:d0:3c:1a:25:1e:
         99:ba:62:60:d8:c8:e6:51:bd:55:f6:4c:06:5f:96:8f:ca:83:
         91:a1:10:08:18:1e:c1:76:08:ec:32:89:78:91:af:95:4e:49:
         6b:71:5d:86:05:47:05:1d:1b:3e:89:e8:28:3f:b2:51:c9:25:
         fd:9e:f1:d3:98:e8:9c:52:8e:14:9e:d1:bb:72:ac:47:86:1d:
         d9:37:f1:87:2d:1f:84:d4:41:d5:ea:ae:a7:f3:e0:86:e4:23:
         fb:f9:ec:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 23:14:59 2026 by rpki-client