Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.mft
File:                     WY9YPfrp_JTaoww3iyFr7JcOM5g.mft (raw, json)
Hash identifier:          VWzdy0nyhlMQ3Mi3TPi9g3xuRwIiWpFdWNTE0H9JyLk=
Subject key identifier:   B7:24:7E:24:18:FB:20:36:F5:A5:16:68:CA:E5:EE:3C:11:64:76:C9
Authority key identifier: 59:8F:58:3D:FA:E9:FC:94:DA:A3:0C:37:8B:21:6B:EC:97:0E:33:98
Certificate issuer:       /CN=A91EBD8F/serialNumber=598F583DFAE9FC94DAA30C378B216BEC970E3398
Certificate serial:       A9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WY9YPfrp_JTaoww3iyFr7JcOM5g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.mft
Manifest number:          A1
Signing time:             Wed 07 Oct 2026 07:50:22 +0000
Manifest this update:     Wed 07 Oct 2026 07:50:22 +0000
Manifest next update:     Wed 14 Oct 2026 07:50:22 +0000
Files and hashes:         1: WY9YPfrp_JTaoww3iyFr7JcOM5g.crl (hash: 0za15dONqCVth36hbCfILI/x7VjPh0CW5yljus5d8bc=)
                          2: 54F9E058D97F11F0B42EB3E75ED3641D.roa (hash: IbfmTJT4slGXqqy5jBNMbpSI8oHXqAY0nysJ/plorU0=)
                          3: 53EF3992D97F11F0B42EB3E75ED3641D.roa (hash: CB3oUxbQq+oYolrrHdTJzTMonbK2g+QTxJH/oX6hwkY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.crl
                          rsync://rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WY9YPfrp_JTaoww3iyFr7JcOM5g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 07:50:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169 (0xa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBD8F, serialNumber=598F583DFAE9FC94DAA30C378B216BEC970E3398
        Validity
            Not Before: Oct  7 07:50:22 2026 GMT
            Not After : Oct 14 07:50:22 2026 GMT
        Subject: CN=6ac5f9be-351a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:bc:9e:32:18:5b:01:30:87:9c:11:71:ef:06:
                    6b:c0:71:ca:5a:22:0a:eb:d2:5e:24:46:09:ec:af:
                    2f:01:e7:67:20:fa:9b:99:6e:04:1a:ca:29:de:fc:
                    7e:66:5f:50:fa:72:48:19:85:0e:eb:1c:a3:11:0e:
                    99:8c:b1:37:a4:77:d9:5a:86:cc:84:24:ef:a1:fd:
                    35:84:2b:2f:a5:a6:94:25:8e:e2:bd:06:10:9d:1d:
                    99:f8:dd:50:01:fc:07:cb:4d:fe:2a:21:f7:3e:7f:
                    2c:7d:c2:45:54:24:38:18:75:a1:f1:43:a3:b0:ab:
                    4b:21:17:bd:cf:4c:2b:40:3c:1e:5e:49:5f:e9:c5:
                    46:9c:34:f9:6b:f9:fc:0d:08:73:11:13:23:40:3b:
                    8d:80:29:fe:41:62:c8:76:98:53:c0:24:83:8a:07:
                    e5:30:6c:15:09:b8:64:22:b3:44:d5:58:17:90:c6:
                    0f:dc:08:c1:0b:f7:a9:19:da:e3:0e:53:11:91:6f:
                    f2:54:c9:08:d1:e1:4d:7f:d3:08:eb:9c:4c:f6:95:
                    1a:f9:55:4a:63:e2:ea:6d:45:2d:10:4f:5e:f2:a4:
                    26:95:b6:3d:c6:d2:bc:bf:f8:5c:07:b4:e7:8c:c8:
                    80:89:9d:ff:98:ec:ba:40:90:02:48:28:69:21:ab:
                    ec:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:24:7E:24:18:FB:20:36:F5:A5:16:68:CA:E5:EE:3C:11:64:76:C9
            X509v3 Authority Key Identifier:
                keyid:59:8F:58:3D:FA:E9:FC:94:DA:A3:0C:37:8B:21:6B:EC:97:0E:33:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WY9YPfrp_JTaoww3iyFr7JcOM5g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:0d:ca:04:0e:98:4f:a1:74:3b:88:b8:8a:3c:12:54:e6:0e:
         0d:76:56:b1:05:1d:e7:b0:44:fd:99:4b:f3:d9:3c:41:1f:60:
         dc:86:4c:c1:fa:a6:1e:ac:ad:d6:b4:37:eb:90:4a:81:5d:9a:
         32:dc:83:0f:eb:81:5e:46:ff:49:cb:38:ab:b0:eb:2b:d6:ff:
         7e:46:39:37:37:0d:b0:d4:96:d7:f5:0d:5f:5e:2c:e2:b1:c5:
         9f:58:d5:19:0b:1d:cc:d8:d0:74:0d:00:f4:e7:58:5f:16:f7:
         3d:32:03:86:24:39:f9:8b:99:48:49:b5:e1:dc:01:11:5b:2a:
         56:b0:fb:4d:2c:03:e0:bb:fe:6f:22:d2:a1:61:ed:67:3d:10:
         5f:72:92:44:3e:3d:09:3c:e5:84:e3:1c:45:b2:78:79:c6:29:
         41:fd:d9:a7:b4:1b:35:87:9c:61:70:c5:00:e3:bd:a2:5a:67:
         37:59:1e:48:82:e6:c4:a0:ae:92:d4:81:b0:6b:fb:18:e7:8b:
         e7:e4:67:c3:c6:bf:dc:4b:69:d8:9e:34:24:18:c7:83:71:54:
         19:14:0e:95:85:37:2f:80:f5:46:8d:3a:f4:31:3a:bd:ec:eb:
         ff:d1:0d:ac:da:53:9f:78:95:82:d2:fa:7d:ee:03:5c:3f:7f:
         45:28:43:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:26:50 2026 by rpki-client