Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft
File:                     WYxfzqVVrllcyel2HA-y3q6kRR8.mft (raw, json)
Hash identifier:          kC6tOuZb7QJsWYcqQzVuUIkw1KN7U+Yp14mX7KqlMKA=
Subject key identifier:   A6:4A:86:2A:73:DC:86:A4:01:40:D3:AF:55:EC:37:B7:08:B1:84:87
Authority key identifier: 59:8C:5F:CE:A5:55:AE:59:5C:C9:E9:76:1C:0F:B2:DE:AE:A4:45:1F
Certificate issuer:       /CN=A91FB880/serialNumber=598C5FCEA555AE595CC9E9761C0FB2DEAEA4451F
Certificate serial:       02A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft
Manifest number:          029E
Signing time:             Sat 17 Oct 2026 02:10:11 +0000
Manifest this update:     Sat 17 Oct 2026 02:10:10 +0000
Manifest next update:     Sat 24 Oct 2026 02:10:10 +0000
Files and hashes:         1: WYxfzqVVrllcyel2HA-y3q6kRR8.crl (hash: q2ZpwTthosXtxdk7GTLjnUKUYbdeiWPPZgzMuEOE+K8=)
                          2: 50A5B1ACC75911EDBFF7200BC4F9AE02.roa (hash: 8F41x2fmLZ5M8u7RlY+aL2kU1d0Mkh7PiR5sgAseHxg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.crl
                          rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Oct 2026 02:10:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 676 (0x2a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB880, serialNumber=598C5FCEA555AE595CC9E9761C0FB2DEAEA4451F
        Validity
            Not Before: Oct 17 02:10:10 2026 GMT
            Not After : Oct 24 02:10:10 2026 GMT
        Subject: CN=6ad2d903-6e0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ba:f5:d0:a1:5f:51:a9:6a:3c:69:16:41:ab:
                    17:74:e1:92:2f:01:5d:9f:8d:06:0f:51:bc:14:3e:
                    b4:bf:b6:f5:1c:6b:a5:45:75:22:15:e2:41:c1:a4:
                    fa:7d:68:41:45:f9:9f:bb:37:cb:e9:6a:9f:24:6e:
                    ff:aa:0e:49:2f:b7:7c:3a:04:90:26:1c:77:20:53:
                    0d:e0:02:66:a5:74:fa:8a:cb:95:b0:92:f5:a4:f2:
                    24:6f:7a:af:5c:ea:01:54:54:4f:13:a5:58:90:8b:
                    73:ce:49:95:c8:f0:03:90:05:25:75:ba:4f:3f:6e:
                    42:b9:66:af:0e:cd:20:29:c7:0c:cf:ad:45:78:97:
                    df:fd:b1:d7:7b:80:70:ab:46:2b:87:8d:25:95:ab:
                    d5:ae:94:6c:e4:bc:61:ed:1c:a7:9c:b0:37:3e:bd:
                    f8:34:55:ed:d0:71:41:68:0f:0a:18:af:81:49:ec:
                    bd:17:b0:aa:eb:c6:fe:11:c7:7f:e5:3e:e8:27:b5:
                    d7:6a:4f:45:74:44:bb:bc:1c:94:42:32:87:0d:d7:
                    37:86:1e:e3:82:78:66:08:20:e2:72:f4:ec:56:bb:
                    ba:30:c6:30:0f:20:d3:4c:1e:1c:68:e3:8c:97:6f:
                    ec:85:49:00:47:c8:c8:13:72:1c:05:61:bd:9c:e1:
                    05:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:4A:86:2A:73:DC:86:A4:01:40:D3:AF:55:EC:37:B7:08:B1:84:87
            X509v3 Authority Key Identifier:
                keyid:59:8C:5F:CE:A5:55:AE:59:5C:C9:E9:76:1C:0F:B2:DE:AE:A4:45:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:d9:f5:54:8d:04:52:8c:82:f9:4d:01:3b:ab:2a:ec:95:19:
         b9:50:4e:50:7a:17:2e:81:47:d5:a1:40:c2:3d:36:85:b6:28:
         a1:8f:6c:72:ed:dc:6d:fd:aa:01:73:6b:6f:10:74:85:9d:e6:
         ad:ae:dd:40:1b:a4:ed:d2:4c:b9:52:38:c6:6a:02:33:a5:e6:
         bd:5a:58:cd:40:28:b3:cb:ea:e8:5d:f3:86:03:03:28:94:ad:
         04:fe:a4:9a:8c:5d:20:52:4d:20:4a:ab:c4:74:fe:b4:b1:a5:
         49:aa:bc:18:29:15:92:56:07:c3:86:c0:a3:77:4f:11:be:4a:
         08:f6:a6:90:d7:5c:2e:d8:ec:24:cb:c8:a5:03:85:93:9b:f6:
         35:cb:c3:24:da:10:e0:c0:50:c3:44:23:a5:ab:a0:4f:4f:bf:
         31:c2:97:75:5c:52:37:6a:3a:9d:f5:13:c8:b8:3f:76:58:4f:
         0b:57:49:3d:11:fc:e4:bc:61:6c:59:b6:3d:bd:cd:07:d5:c3:
         79:f4:ca:85:f1:db:59:7a:a4:10:d7:d2:28:43:44:6d:0b:6f:
         4f:a1:17:0c:a8:39:f1:61:83:4b:ea:38:8c:03:b4:36:3a:71:
         ce:6a:79:24:5e:36:b1:e5:28:03:89:01:98:45:d8:bf:af:98:
         ea:ce:4d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 08:35:32 2026 by rpki-client