Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft
File:                     wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft (raw, json)
Hash identifier:          DDVVDsL43BRuFuFbXftYBb01jT4+V5ir03AYzGN4oJY=
Subject key identifier:   1A:48:28:4A:45:F9:C5:22:F2:17:9E:B1:F1:E0:88:99:86:E8:94:2C
Authority key identifier: C2:FC:64:48:56:4E:C6:52:6B:91:B2:FE:23:B4:FD:58:34:2D:20:F4
Certificate issuer:       /CN=A91B7292/serialNumber=C2FC6448564EC6526B91B2FE23B4FD58342D20F4
Certificate serial:       0201
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft
Manifest number:          01EF
Signing time:             Sat 03 Oct 2026 04:04:48 +0000
Manifest this update:     Sat 03 Oct 2026 04:04:48 +0000
Manifest next update:     Sat 10 Oct 2026 04:04:48 +0000
Files and hashes:         1: wvxkSFZOxlJrkbL-I7T9WDQtIPQ.crl (hash: XBX4mYWVA3Eam4LsiKVQzXrWFc5EyolQfdnu9imNBIw=)
                          2: 998461D4D14E11EEBD6E0D11C4F9AE02.roa (hash: 4q0CRvK7cBuNbIl5NhxnFGQFPdtxllu37atqP2x76PI=)
                          3: F007DD9AD14B11EEAB2B5281C4F9AE02.roa (hash: j6i+PoG1Un0EKIeMtEcI0TXiM+UyCndPMRvE27Z8cSY=)
                          4: 870862B2222011EFACCDE81BC4F9AE02.roa (hash: ciVFB0KvpDvAViK7hnqW2d1Z4F4bwONdYRVuRaAOg9A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 04:04:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 513 (0x201)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7292, serialNumber=C2FC6448564EC6526B91B2FE23B4FD58342D20F4
        Validity
            Not Before: Oct  3 04:04:48 2026 GMT
            Not After : Oct 10 04:04:48 2026 GMT
        Subject: CN=6ac07ee0-550a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:50:41:a9:85:14:29:e2:89:60:19:39:63:9d:
                    37:13:e7:e5:22:9b:36:66:e3:61:5a:ac:75:2e:4c:
                    ac:bb:bd:13:9f:f3:91:f2:8c:0f:4c:8a:94:76:cb:
                    d7:c6:ff:43:11:d6:64:d7:13:ed:25:2b:33:ee:9e:
                    f7:be:d4:3f:aa:a5:cb:d0:6b:cc:b1:05:7c:fc:e2:
                    aa:da:7f:16:a6:01:02:e4:2c:bb:8c:1a:e0:84:67:
                    43:c8:e0:45:93:5d:78:f5:a2:1e:c5:22:80:2d:e5:
                    79:04:34:54:56:d2:57:4f:a1:3b:e5:6e:1d:6d:16:
                    5d:47:3b:52:a5:a8:9a:7f:df:35:d4:3c:c2:5b:1a:
                    cc:2f:34:e4:15:7b:02:35:7b:e9:39:ba:1b:4b:df:
                    69:0f:3d:e9:db:b0:49:9b:2b:1e:fc:5b:3f:ff:b4:
                    f3:e2:dd:6c:9d:36:0c:45:88:77:7d:de:d4:2a:e4:
                    01:01:0d:b4:ee:4a:e2:39:af:7f:56:65:f8:3b:08:
                    0a:de:86:14:49:16:23:c0:5e:b7:d4:45:31:ad:8c:
                    1c:c7:c2:48:6c:90:77:16:69:29:87:96:8e:1f:d8:
                    b8:c8:d4:e0:8d:1d:8b:a3:5a:dd:16:b2:93:94:e9:
                    71:38:2a:66:12:46:c2:b0:4b:27:83:26:11:e8:27:
                    77:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:48:28:4A:45:F9:C5:22:F2:17:9E:B1:F1:E0:88:99:86:E8:94:2C
            X509v3 Authority Key Identifier:
                keyid:C2:FC:64:48:56:4E:C6:52:6B:91:B2:FE:23:B4:FD:58:34:2D:20:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:32:ca:1a:49:65:3b:26:90:06:87:b2:ad:16:66:39:16:1c:
         f1:97:68:86:71:16:ef:e5:8e:a1:ea:4a:d9:d9:cf:2f:fd:72:
         6f:09:a9:e3:2b:a3:0d:08:db:76:6a:3d:24:65:1c:28:e9:f0:
         dc:d2:ed:0c:5c:2a:22:07:1f:af:ef:00:b7:9f:52:21:44:f5:
         7f:5e:66:2e:8d:92:e0:68:b9:3a:96:a9:61:b7:51:a7:05:3d:
         a2:94:91:32:4f:71:1b:3e:f9:5e:07:d3:81:e4:29:4c:4b:3b:
         0d:fe:8d:3a:c6:05:ce:ac:25:6b:0a:22:b0:19:a6:45:8b:1d:
         89:3d:8f:14:98:65:41:07:af:2f:e8:17:ac:2a:c5:d8:9d:39:
         99:6a:cc:36:00:69:9d:7f:cb:11:42:d5:e8:a7:0a:0e:98:b6:
         fc:0c:1e:25:72:47:38:75:2a:dc:b8:b8:7f:4d:e4:4a:c8:73:
         ae:64:a0:8f:10:7b:bf:23:3e:84:c9:a8:49:4c:4b:32:4a:ea:
         1b:70:2a:55:97:a3:a7:10:6f:c5:d3:97:26:80:af:f5:10:ef:
         5b:b0:96:9f:d1:cd:a1:f4:e2:db:42:82:f6:15:d1:d2:ab:b8:
         bc:37:7a:17:c3:d7:0e:4d:e9:8f:81:f5:ab:00:dc:0b:31:59:
         a5:a7:72:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 20:31:50 2026 by rpki-client