Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft
File:                     c4wjqkznVV7qL8jCvtj0akiNyT0.mft (raw, json)
Hash identifier:          wgRkEuYt0kKyitFKj3j1tN6Gc54b2xe1XG7zHHxGUBE=
Subject key identifier:   F9:D5:DD:72:46:AD:51:74:D1:9C:96:4E:CD:F0:15:C6:82:B0:F1:31
Authority key identifier: 73:8C:23:AA:4C:E7:55:5E:EA:2F:C8:C2:BE:D8:F4:6A:48:8D:C9:3D
Certificate issuer:       /CN=A91B2D29/serialNumber=738C23AA4CE7555EEA2FC8C2BED8F46A488DC93D
Certificate serial:       2525
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft
Manifest number:          497D
Signing time:             Thu 08 Oct 2026 15:47:36 +0000
Manifest this update:     Thu 08 Oct 2026 15:47:35 +0000
Manifest next update:     Thu 15 Oct 2026 15:47:35 +0000
Files and hashes:         1: c4wjqkznVV7qL8jCvtj0akiNyT0.crl (hash: TzwXTiGIm8uayq1fiVpyzQVB55PGhBM9rFXuvO2XqtI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.crl
                          rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 15:47:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9509 (0x2525)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2D29, serialNumber=738C23AA4CE7555EEA2FC8C2BED8F46A488DC93D
        Validity
            Not Before: Oct  8 15:47:35 2026 GMT
            Not After : Oct 15 15:47:35 2026 GMT
        Subject: CN=6ac7bb18-fa34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c2:1d:4c:94:bc:04:61:dd:ea:b9:95:d7:15:
                    bd:b9:03:14:0c:bd:78:2a:fa:97:eb:c3:54:2e:10:
                    61:f9:7e:9f:9d:9d:bb:a8:f9:27:48:42:93:7b:61:
                    b4:0a:29:cc:f3:12:3e:66:df:2d:6c:bc:e5:2d:e3:
                    d6:9f:26:13:0f:d8:e5:1d:4b:e7:19:9a:09:9c:10:
                    25:bc:fb:08:df:1d:ac:9d:cc:91:74:d2:66:3e:cf:
                    c0:a0:b2:21:ef:91:a2:5f:79:8d:04:47:3f:50:05:
                    6d:11:69:48:58:1a:52:c9:bd:2f:71:1d:5b:08:d1:
                    ef:4b:80:51:76:48:b1:12:3b:14:d0:d6:19:36:0a:
                    f9:75:49:a5:07:99:c7:78:35:16:ab:1c:ee:0c:13:
                    8e:01:f5:f9:e2:48:30:6d:d4:5b:ae:17:32:13:32:
                    3e:f9:a5:00:c2:b5:07:1b:46:54:7b:c7:56:19:d3:
                    a3:26:dd:6e:26:bb:fa:9a:4a:da:8f:c2:da:0b:6b:
                    fe:02:00:d6:49:b7:cd:d1:3b:66:70:7e:bc:f4:78:
                    c0:3b:97:5b:09:73:ae:74:de:85:4d:f4:d5:f2:53:
                    2e:95:c6:44:fc:79:da:ad:fd:c5:85:0f:45:be:c3:
                    7b:b0:c6:20:a4:b8:76:19:40:a4:0c:12:fb:b8:86:
                    43:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:D5:DD:72:46:AD:51:74:D1:9C:96:4E:CD:F0:15:C6:82:B0:F1:31
            X509v3 Authority Key Identifier:
                keyid:73:8C:23:AA:4C:E7:55:5E:EA:2F:C8:C2:BE:D8:F4:6A:48:8D:C9:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:d7:d1:49:02:8c:cf:58:08:2a:25:0d:0c:34:70:24:36:5f:
         2b:6f:76:2b:d2:12:7d:e5:3a:aa:cb:aa:cf:5e:8e:f0:b2:7b:
         f9:1e:9b:c1:2b:ff:56:80:54:0f:04:3d:7b:24:e3:a6:b8:cc:
         de:55:ec:3a:1b:3f:8d:40:1d:0c:4b:53:e2:50:0a:54:f3:76:
         4b:44:ae:30:80:dd:a5:be:17:40:ce:85:bf:c7:c9:90:21:05:
         c7:33:a9:e3:d5:be:38:e5:c0:b7:e0:9d:2d:a6:d7:26:29:14:
         d3:f3:ce:f9:e9:b8:d4:9b:c8:b4:af:1b:a5:ad:b2:a8:26:7b:
         df:40:ca:63:8c:c3:b1:dd:ae:91:61:bf:ec:42:9b:84:37:e0:
         35:c8:4b:11:12:e7:85:db:19:55:5b:c7:96:b7:0d:2b:e9:51:
         c4:d8:49:2c:d2:93:62:d3:22:39:9c:83:98:c1:cf:11:a0:af:
         7e:8c:64:47:2f:08:a9:8a:e9:1a:f3:3a:50:d6:88:fd:9a:60:
         de:cb:5a:73:c0:24:55:64:c9:82:de:11:a5:7a:4b:1e:6b:f1:
         22:32:83:de:f1:ea:ba:84:f5:e1:64:f9:d7:4f:13:e3:af:1a:
         46:d7:ca:5d:8d:5e:aa:46:2a:d8:1e:8d:b2:4e:31:eb:d0:58:
         44:39:fe:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 12:36:08 2026 by rpki-client