Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.mft
File:                     WCInA0DzKvjXCSJhC3CA_DQXes8.mft (raw, json)
Hash identifier:          HUNSgtboPsKv7tUcda2FKutfhmB/G56I4aKkjnE26OU=
Subject key identifier:   6D:E6:B1:D0:44:DF:BF:18:BC:39:00:E4:61:9A:14:7C:28:C0:ED:4B
Authority key identifier: 58:22:27:03:40:F3:2A:F8:D7:09:22:61:0B:70:80:FC:34:17:7A:CF
Certificate issuer:       /CN=A91F742D/serialNumber=5822270340F32AF8D70922610B7080FC34177ACF
Certificate serial:       0683
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCInA0DzKvjXCSJhC3CA_DQXes8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.mft
Manifest number:          067B
Signing time:             Wed 14 Oct 2026 22:56:42 +0000
Manifest this update:     Wed 14 Oct 2026 22:56:42 +0000
Manifest next update:     Wed 21 Oct 2026 22:56:42 +0000
Files and hashes:         1: WCInA0DzKvjXCSJhC3CA_DQXes8.crl (hash: PkY896lwY2AQOK2MSkVSIGZGq051zlQFfXuLGT1Xq5E=)
                          2: 78423A52DE2911EB9B09A334C4F9AE02.roa (hash: MpdLSsMmjHFUWd3HLlJvQtsUmodPuK2kZOOzcTbMZ7M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.crl
                          rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCInA0DzKvjXCSJhC3CA_DQXes8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Oct 2026 22:56:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1667 (0x683)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F742D, serialNumber=5822270340F32AF8D70922610B7080FC34177ACF
        Validity
            Not Before: Oct 14 22:56:42 2026 GMT
            Not After : Oct 21 22:56:42 2026 GMT
        Subject: CN=6ad008aa-8b17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b6:8c:16:28:fd:55:74:8f:7d:54:ae:d0:c2:
                    8d:f4:5f:74:0a:0a:b5:f2:55:4b:9f:15:e5:f5:c4:
                    bb:bf:4a:6c:a8:30:dd:9b:58:e4:fd:b2:70:e8:28:
                    15:49:43:2b:3f:1b:b4:8d:37:6d:c7:5f:ee:29:21:
                    54:1e:2e:89:6f:e2:ba:30:1a:da:0b:c8:16:78:f2:
                    31:c9:7b:63:00:bb:57:d4:07:65:dd:f3:3d:74:37:
                    b1:0e:46:07:1f:bc:1b:a4:d0:b5:15:31:78:f7:c1:
                    82:14:18:3b:7a:7f:34:30:d3:38:15:01:7e:c3:d9:
                    28:10:8c:ed:49:78:6f:eb:5f:8a:04:39:72:e7:b2:
                    63:29:af:e5:37:2b:10:43:b5:ff:1a:a8:6e:02:7b:
                    b5:73:03:fe:27:d1:5b:30:8b:5e:09:d9:20:70:24:
                    7c:49:40:8e:6e:b7:d9:a7:4d:71:10:1b:88:77:11:
                    11:ee:a5:be:c5:c9:0f:8e:66:c5:9f:30:29:b9:c2:
                    04:8d:74:0a:40:7e:1c:5d:ab:bd:0e:7f:88:83:c4:
                    07:af:b3:99:2b:87:1e:aa:99:27:12:f0:57:56:b7:
                    1e:ca:0c:4e:17:3a:b4:a6:e5:f4:17:40:87:12:0a:
                    43:7c:b2:89:df:2c:ad:d6:1a:be:77:ad:86:75:06:
                    24:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:E6:B1:D0:44:DF:BF:18:BC:39:00:E4:61:9A:14:7C:28:C0:ED:4B
            X509v3 Authority Key Identifier:
                keyid:58:22:27:03:40:F3:2A:F8:D7:09:22:61:0B:70:80:FC:34:17:7A:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCInA0DzKvjXCSJhC3CA_DQXes8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:0d:15:7f:f7:94:73:ac:5b:9f:2b:79:e8:74:3a:5a:75:1b:
         1e:4f:ee:0b:27:6b:b5:24:4d:dd:5c:2a:17:1d:9f:89:8d:f4:
         2c:0f:83:1a:aa:f9:52:97:fc:ec:b9:d1:94:a9:26:16:d7:ee:
         d1:70:5e:01:5b:a0:45:e8:61:56:4f:15:c0:73:6f:78:a6:9c:
         2d:88:49:bb:8b:35:b9:66:56:ad:c2:bd:5a:b5:cc:9d:5d:f5:
         d0:53:e6:ce:14:4a:e6:e8:3b:d3:6d:c7:14:51:81:b1:a2:38:
         48:88:b1:61:5b:f0:a8:bb:02:f3:ad:c6:f0:bb:8c:7f:1c:b5:
         75:f8:6e:b9:c5:29:3a:6d:76:46:6e:26:93:c0:d3:c1:de:4e:
         14:d1:59:05:77:24:40:98:92:cf:8f:11:35:63:6e:1d:90:04:
         a9:00:50:e4:a8:85:6c:7d:b1:40:ef:8a:ba:ce:fe:7b:27:65:
         08:fe:a8:d0:e7:b7:d9:84:53:58:93:03:6f:89:3c:45:70:e5:
         c4:34:97:89:73:8a:19:1a:42:cb:c5:b6:3e:6b:32:48:dd:e6:
         e4:2f:28:0b:7b:ea:91:76:6b:44:cf:0e:0a:d3:c3:6b:9c:77:
         e6:e9:9f:ac:7d:5a:95:eb:71:f7:e5:97:75:5b:69:d3:fb:52:
         f5:c8:c8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 05:10:20 2026 by rpki-client