Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft
File:                     waLHH9itWCWJ8EkC3a-DmIXf0zc.mft (raw, json)
Hash identifier:          yUemPGOolJdyit9K6VNFHKt2+mHBw9J22s9yAU7msZY=
Subject key identifier:   09:C4:B4:81:C6:E1:55:F7:D8:34:A8:56:63:56:4D:04:58:BD:39:D8
Authority key identifier: C1:A2:C7:1F:D8:AD:58:25:89:F0:49:02:DD:AF:83:98:85:DF:D3:37
Certificate issuer:       /CN=A91A87AB/serialNumber=C1A2C71FD8AD582589F04902DDAF839885DFD337
Certificate serial:       0672
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft
Manifest number:          0669
Signing time:             Sat 26 Sep 2026 22:41:16 +0000
Manifest this update:     Sat 26 Sep 2026 22:41:16 +0000
Manifest next update:     Sat 03 Oct 2026 22:41:16 +0000
Files and hashes:         1: waLHH9itWCWJ8EkC3a-DmIXf0zc.crl (hash: seCxIeuZmaiFC13T7teZDTiEsUgFgmQGhtRM98Tbzek=)
                          2: 9C3424A08F7F11F09A0D9529C4F9AE02.roa (hash: hM4BPVux9YYhFTFUn31M+wA3pgU5Mg1/NkcXZA6rsfo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.crl
                          rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 22:41:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1650 (0x672)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A87AB, serialNumber=C1A2C71FD8AD582589F04902DDAF839885DFD337
        Validity
            Not Before: Sep 26 22:41:16 2026 GMT
            Not After : Oct  3 22:41:16 2026 GMT
        Subject: CN=6ab84a0c-f767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2f:a7:43:30:db:f7:46:af:3c:44:f7:46:43:
                    60:65:22:5e:19:95:de:6f:58:c2:24:e3:2b:8c:16:
                    fe:f6:47:00:e5:dd:2b:1b:b7:59:c1:5b:6d:ce:0e:
                    85:4b:72:81:19:76:d4:b1:fc:a0:cf:e9:13:3d:a9:
                    67:54:3e:0b:02:1f:44:c5:ac:43:23:af:f9:bd:0f:
                    e7:09:73:df:8d:f4:03:e8:4b:4a:75:e9:35:a1:71:
                    90:7f:95:3a:34:9a:a4:46:a8:bf:2a:7b:31:45:ad:
                    76:56:8a:dd:59:e8:34:54:d7:fc:28:9c:4e:93:c2:
                    f4:87:22:de:2e:f9:68:d4:0a:9a:68:e1:a9:50:5a:
                    49:5f:a7:3f:64:2c:04:9c:14:cc:7a:43:5a:2e:86:
                    c0:cc:c1:e9:54:d0:87:67:63:a8:8d:d5:3a:ca:04:
                    7b:8f:ff:72:fa:61:d8:d4:8e:e3:18:df:73:b2:71:
                    4c:de:45:aa:91:25:cb:98:aa:7f:90:33:d4:1e:33:
                    3e:77:14:d9:3c:cb:19:78:36:88:1b:ec:43:17:c2:
                    47:28:9b:a5:82:5e:a9:ec:d9:6d:c3:1a:af:f4:4d:
                    36:33:e0:6c:4d:24:8c:3d:1d:17:6a:5a:f2:f7:27:
                    f7:c1:38:a6:bf:4f:e9:26:df:3c:5f:51:9d:1d:62:
                    f3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C4:B4:81:C6:E1:55:F7:D8:34:A8:56:63:56:4D:04:58:BD:39:D8
            X509v3 Authority Key Identifier:
                keyid:C1:A2:C7:1F:D8:AD:58:25:89:F0:49:02:DD:AF:83:98:85:DF:D3:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:b5:0c:7d:5f:96:8a:5f:5a:55:9f:14:a4:cd:e1:6e:1b:a6:
         47:43:e0:13:26:c5:59:21:49:18:91:4d:47:56:cf:69:cc:3a:
         70:54:71:76:f2:1d:50:98:e3:b4:f6:d4:3a:ac:a4:cb:11:54:
         1c:93:b7:dc:8b:ce:ad:42:91:48:2d:f5:7e:4d:b3:fd:48:68:
         30:75:4e:40:d1:4b:1d:20:e4:91:18:b9:62:6f:28:ef:b1:79:
         f8:9f:bc:82:e4:a0:dd:b6:23:f9:7a:05:50:b6:13:5d:d5:02:
         a1:3d:d1:b1:71:dc:16:78:86:0e:af:10:51:f4:0a:c8:ed:08:
         09:95:8f:b8:03:88:ad:8a:d6:82:6a:3b:f3:41:5e:b8:01:df:
         18:cf:a5:56:30:29:bd:99:64:e5:64:20:ad:17:3b:c7:c6:42:
         d4:96:4a:48:01:d5:6b:33:8c:4c:5d:74:23:51:07:9d:67:95:
         10:76:4a:85:e8:5a:33:1f:9e:bc:46:99:52:b4:03:2d:c3:93:
         85:1e:a7:61:55:42:d4:59:cc:df:9a:3c:a7:8c:da:46:fc:7d:
         38:de:64:a4:bb:55:b5:80:8f:0a:ca:29:ad:35:93:f9:8a:b2:
         e6:b8:32:c6:e9:9a:38:a3:35:49:fc:5c:e1:cb:84:44:c7:8a:
         4c:e3:25:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 16:28:52 2026 by rpki-client