Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft
File:                     wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft (raw, json)
Hash identifier:          ow/hZTh0CQdpJjea9MdV2QroCclp1XMXcfncmBYHjXg=
Subject key identifier:   8D:FE:E2:85:A4:4B:59:90:A5:12:D6:36:95:E0:C2:BA:99:34:A2:30
Authority key identifier: C2:7A:E1:D1:64:72:9F:43:D9:E0:FA:64:BE:51:D0:B6:AE:09:EB:99
Certificate issuer:       /CN=A91DD1F9/serialNumber=C27AE1D164729F43D9E0FA64BE51D0B6AE09EB99
Certificate serial:       01AA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wnrh0WRyn0PZ4PpkvlHQtq4J65k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft
Manifest number:          01A1
Signing time:             Tue 13 Oct 2026 04:49:12 +0000
Manifest this update:     Tue 13 Oct 2026 04:49:11 +0000
Manifest next update:     Tue 20 Oct 2026 04:49:11 +0000
Files and hashes:         1: wnrh0WRyn0PZ4PpkvlHQtq4J65k.crl (hash: HCZC5sFpeJj449vqu/zGPHv0yY65ycBRJABNZpbUQME=)
                          2: 36CFD1EE4AD011EF9B941D17C4F9AE02.roa (hash: MUunUkwxKjQsXH8JfGfvX7BfOKqKymz6NC/WOW+DYqA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.crl
                          rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wnrh0WRyn0PZ4PpkvlHQtq4J65k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 04:49:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 426 (0x1aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD1F9, serialNumber=C27AE1D164729F43D9E0FA64BE51D0B6AE09EB99
        Validity
            Not Before: Oct 13 04:49:11 2026 GMT
            Not After : Oct 20 04:49:11 2026 GMT
        Subject: CN=6acdb848-1c05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:75:00:23:e1:6b:b4:a4:f7:fc:6d:95:a1:3f:
                    5f:78:9e:6e:0c:05:8b:79:20:ef:25:70:76:8f:84:
                    8e:c4:38:3e:44:ea:22:1a:fa:f8:1e:c5:ca:9e:83:
                    63:00:63:0a:4c:7d:a4:b7:45:e3:8d:64:62:d6:21:
                    60:de:9e:9f:13:ef:a7:52:16:3c:fb:b2:7e:c1:b0:
                    f5:fd:65:20:14:ab:3a:e9:4c:c7:8c:21:c7:88:78:
                    dd:b9:3c:aa:62:19:3e:11:84:8d:f6:0d:b6:d8:61:
                    46:07:46:fa:fb:0f:3d:a2:6b:b2:2a:68:37:fc:1f:
                    6a:0d:32:09:c9:70:47:13:23:df:96:9a:ea:34:e6:
                    d6:2e:7a:1d:6e:41:e0:9e:28:3f:2d:49:99:70:40:
                    39:51:68:19:2d:c1:96:75:4f:b9:92:e7:d8:ff:70:
                    df:3b:9c:4e:ce:9e:81:04:76:71:87:2c:3a:71:df:
                    55:85:ae:d2:c3:b6:2f:c7:39:17:5d:9f:6c:0c:30:
                    aa:07:ad:54:dd:f7:29:a5:bf:4c:ae:22:28:c2:71:
                    7f:3b:4c:83:ac:4e:96:c3:2e:de:43:a3:08:ce:bb:
                    85:cf:f1:80:08:01:d2:1a:2c:e7:59:67:27:6d:87:
                    ae:40:d5:23:3e:ae:be:04:bf:02:6d:9e:ff:d6:66:
                    cc:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:FE:E2:85:A4:4B:59:90:A5:12:D6:36:95:E0:C2:BA:99:34:A2:30
            X509v3 Authority Key Identifier:
                keyid:C2:7A:E1:D1:64:72:9F:43:D9:E0:FA:64:BE:51:D0:B6:AE:09:EB:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wnrh0WRyn0PZ4PpkvlHQtq4J65k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:2f:9d:f1:66:4f:fc:43:c1:3d:01:40:2b:d1:ef:43:f1:f2:
         dc:9b:24:32:58:68:2b:25:02:c6:f7:65:ad:6a:f8:4d:89:d0:
         2e:85:0f:4f:4e:58:dd:58:c9:1d:45:1b:c7:8e:4e:1e:a0:d6:
         f3:5f:84:9e:22:a3:6e:ac:86:91:43:47:27:8b:41:94:2b:c2:
         42:33:76:53:49:15:78:7d:e7:8a:08:27:fe:36:47:b6:5b:65:
         be:0e:d6:4c:c0:a7:de:90:15:ef:41:c3:af:26:54:ce:c7:b9:
         15:d1:72:f4:8c:4a:54:c7:d6:33:5e:0e:3a:be:45:81:3f:6e:
         6c:aa:ec:94:b5:32:3b:6a:bf:30:3f:69:8d:c0:2b:4c:57:8e:
         94:4b:69:92:04:70:c7:cd:8a:dc:43:5a:af:28:1d:bb:5a:4c:
         05:5d:5f:76:b2:11:6e:50:17:01:5f:ef:1a:5d:96:40:16:3c:
         58:8c:c8:df:78:53:c5:c3:05:85:26:93:90:61:92:37:27:95:
         28:96:69:01:7f:6d:df:d0:b8:4f:27:2b:ba:22:f5:6b:2e:9e:
         e5:11:7d:30:45:bc:93:eb:ef:ee:1a:27:a1:c6:f2:8d:0e:fb:
         21:01:fd:9b:08:0e:c3:61:f4:85:b6:5f:87:7e:74:ba:4a:5a:
         11:cc:45:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:08:54 2026 by rpki-client