Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D8601/73AA3EBAF6AF11F0BE1EBC5F436F56BC/WYMt_ndUWn2J_bBhkVxnGef4K98.mft
File:                     WYMt_ndUWn2J_bBhkVxnGef4K98.mft (raw, json)
Hash identifier:          7qAHGpg/rilDWpazW6C52dCEAl4aVCK5o9w+cxa6iiE=
Subject key identifier:   4C:4D:CE:2D:91:FB:D3:5A:78:F4:B2:F6:3F:B5:57:9A:C5:F1:FC:28
Authority key identifier: 59:83:2D:FE:77:54:5A:7D:89:FD:B0:61:91:5C:67:19:E7:F8:2B:DF
Certificate issuer:       /CN=A91D8601/serialNumber=59832DFE77545A7D89FDB061915C6719E7F82BDF
Certificate serial:       84
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WYMt_ndUWn2J_bBhkVxnGef4K98.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8601/73AA3EBAF6AF11F0BE1EBC5F436F56BC/WYMt_ndUWn2J_bBhkVxnGef4K98.mft
Manifest number:          81
Signing time:             Mon 21 Sep 2026 07:43:35 +0000
Manifest this update:     Mon 21 Sep 2026 07:43:35 +0000
Manifest next update:     Mon 28 Sep 2026 07:43:35 +0000
Files and hashes:         1: WYMt_ndUWn2J_bBhkVxnGef4K98.crl (hash: nElYEKlPv/s9NSzYmKhDb/UO/cq/ab/gXkYQjEcre0k=)
                          2: CBF1F0FEF6AF11F09B571584436F56BC.roa (hash: Bawj5Qb3y5hud9s4mY4i7Q9eoq0uTVRDnGt9JTxtaYQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8601/73AA3EBAF6AF11F0BE1EBC5F436F56BC/WYMt_ndUWn2J_bBhkVxnGef4K98.crl
                          rsync://rpki.apnic.net/member_repository/A91D8601/73AA3EBAF6AF11F0BE1EBC5F436F56BC/WYMt_ndUWn2J_bBhkVxnGef4K98.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WYMt_ndUWn2J_bBhkVxnGef4K98.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:43:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132 (0x84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8601, serialNumber=59832DFE77545A7D89FDB061915C6719E7F82BDF
        Validity
            Not Before: Sep 21 07:43:35 2026 GMT
            Not After : Sep 28 07:43:35 2026 GMT
        Subject: CN=6ab0e027-1bce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:14:9d:bf:a0:e4:c4:d1:de:2d:8f:65:0b:a0:
                    a8:d0:ad:67:49:47:cb:6b:4a:64:95:77:26:2c:b7:
                    0e:9c:72:25:20:eb:09:fd:c3:2a:d3:83:55:ce:ed:
                    ed:e7:22:41:53:ba:47:75:15:00:0a:6b:e9:fa:58:
                    5a:13:b9:3a:30:d3:ba:a6:fe:da:21:2d:45:23:2b:
                    6c:c9:74:cd:ff:39:22:a0:82:aa:ec:70:78:39:18:
                    11:91:0e:87:9c:96:1c:ac:cc:da:1d:96:4d:fb:e6:
                    7f:39:e8:56:26:e7:0a:e1:d0:2c:d2:00:d5:35:eb:
                    20:46:29:7c:83:ba:06:01:0f:9b:dd:86:59:1d:59:
                    2b:76:1d:02:f7:8e:76:53:12:2a:1d:bf:0f:af:5d:
                    60:2b:93:17:41:5c:cb:dc:f0:a0:ad:1d:85:45:a6:
                    21:17:d3:f9:e6:7b:b5:f8:04:be:39:d9:00:c3:af:
                    b0:28:fa:2f:68:2a:8d:09:11:7c:72:e4:39:74:ca:
                    cb:7a:59:48:39:8b:e1:24:a2:53:d8:d8:31:03:6e:
                    bc:cd:e6:da:81:7e:7c:80:54:b3:a3:9c:f6:d5:b6:
                    c4:ba:12:76:66:ea:24:9e:5b:bf:36:7e:ec:f2:94:
                    40:98:08:fb:50:9c:19:f7:3c:42:d0:82:e7:ab:7c:
                    98:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:4D:CE:2D:91:FB:D3:5A:78:F4:B2:F6:3F:B5:57:9A:C5:F1:FC:28
            X509v3 Authority Key Identifier:
                keyid:59:83:2D:FE:77:54:5A:7D:89:FD:B0:61:91:5C:67:19:E7:F8:2B:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8601/73AA3EBAF6AF11F0BE1EBC5F436F56BC/WYMt_ndUWn2J_bBhkVxnGef4K98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WYMt_ndUWn2J_bBhkVxnGef4K98.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8601/73AA3EBAF6AF11F0BE1EBC5F436F56BC/WYMt_ndUWn2J_bBhkVxnGef4K98.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:e8:86:4d:67:3e:a6:21:fb:51:62:fb:cf:f1:fd:96:f2:fe:
         60:bc:02:20:14:64:2e:b4:ea:cc:9b:7e:13:94:18:04:e2:f1:
         c2:14:ed:21:d5:5b:8a:cf:0a:45:ac:e1:4b:64:62:ce:fd:bf:
         85:c9:7c:8c:2d:7f:76:b9:17:e6:9e:ee:ef:ed:05:74:12:f1:
         20:a3:8d:90:9a:bb:07:2d:75:10:df:f5:f0:31:36:e6:e4:47:
         39:50:2b:71:1a:9f:15:b6:e2:af:98:67:08:35:da:93:cb:01:
         d3:6c:50:df:f3:de:82:a1:e1:a2:6b:7e:e8:fb:dd:51:f9:db:
         c2:2c:51:52:44:be:e9:2a:20:4f:39:81:84:33:87:d3:4b:ee:
         17:17:3a:72:55:29:b1:29:cb:23:2f:12:49:13:2e:f7:18:70:
         f4:cd:fd:fd:96:d6:8f:fb:4d:ad:d2:41:eb:27:da:1e:89:de:
         92:15:94:04:09:a8:4a:4e:4a:0e:b1:bd:81:7f:58:6b:bf:ef:
         74:e8:f2:36:1e:39:43:64:8a:60:20:06:ee:e4:10:a0:d2:f9:
         26:e4:8b:25:ac:16:9b:52:b1:28:86:3e:25:a9:28:05:ab:33:
         da:6b:46:8d:e9:9b:da:6c:41:6b:51:e1:de:cb:25:a2:79:2e:
         0f:ad:1d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:45:26 2026 by rpki-client