Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.mft
File:                     WU96C6m9HBOGhHzoljlj_k5xY2w.mft (raw, json)
Hash identifier:          1eUArn2jZOY4Z34pyUumjU/n/q7ov56XHk4jU7Bp+w8=
Subject key identifier:   88:C4:16:4D:29:20:93:67:0D:16:8B:B7:E9:02:38:4C:79:CE:AC:36
Authority key identifier: 59:4F:7A:0B:A9:BD:1C:13:86:84:7C:E8:96:39:63:FE:4E:71:63:6C
Certificate issuer:       /CN=A91FFEDB/serialNumber=594F7A0BA9BD1C1386847CE8963963FE4E71636C
Certificate serial:       02EB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WU96C6m9HBOGhHzoljlj_k5xY2w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.mft
Manifest number:          02E3
Signing time:             Fri 25 Sep 2026 01:05:35 +0000
Manifest this update:     Fri 25 Sep 2026 01:05:34 +0000
Manifest next update:     Fri 02 Oct 2026 01:05:34 +0000
Files and hashes:         1: WU96C6m9HBOGhHzoljlj_k5xY2w.crl (hash: jeyg+nmPY1U0C3RFgycS+xp/j57XQRJmeg9bHR+J3Uo=)
                          2: 3CE5C23A550611ED96C8F350C4F9AE02.roa (hash: Q0Na7uz+8/SY8dENTuHd10OmIdY+SANtmNHmLdr0v6s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.crl
                          rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WU96C6m9HBOGhHzoljlj_k5xY2w.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 01:05:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 747 (0x2eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FFEDB, serialNumber=594F7A0BA9BD1C1386847CE8963963FE4E71636C
        Validity
            Not Before: Sep 25 01:05:34 2026 GMT
            Not After : Oct  2 01:05:34 2026 GMT
        Subject: CN=6ab5c8df-384b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6f:e8:c1:5f:c2:2d:b2:4e:d4:10:67:18:4c:
                    ca:0b:52:c4:02:c0:4d:7c:e3:2a:7d:3a:f3:f9:51:
                    ae:14:45:41:34:6f:3d:9b:d2:86:29:f0:d0:cf:bf:
                    c8:96:d3:8d:fd:27:bf:30:21:36:21:f9:49:c8:50:
                    42:f5:3f:8c:f2:0e:74:4e:c8:70:35:3a:55:00:a4:
                    e5:88:12:43:87:dd:a1:a8:89:dc:9a:d8:b0:71:4b:
                    eb:2c:99:58:12:bd:3c:c2:5b:89:59:2c:61:bc:59:
                    cb:77:f9:42:59:c7:5f:cb:52:1a:a4:84:79:54:e2:
                    ef:d3:4b:da:40:21:97:6f:ae:50:39:16:42:48:1b:
                    5c:cf:73:41:f5:5c:e6:cb:c3:ce:2c:36:b5:84:da:
                    c6:d3:2d:7e:14:56:df:58:21:3d:e9:14:8a:d9:97:
                    f4:bb:49:d2:02:e5:af:e2:ee:5d:aa:d4:28:5f:0a:
                    44:ae:45:22:08:1d:d7:98:0d:56:9a:8e:de:95:14:
                    e2:04:74:63:65:12:a0:fb:39:66:9f:b2:86:a8:62:
                    8b:4e:99:c7:99:36:c2:3a:18:c7:7a:00:41:74:7a:
                    1e:09:cc:46:86:53:19:73:53:c0:cc:f9:3d:7b:92:
                    6f:0a:83:6c:a1:f2:8b:6a:c8:21:04:8c:ec:52:df:
                    63:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C4:16:4D:29:20:93:67:0D:16:8B:B7:E9:02:38:4C:79:CE:AC:36
            X509v3 Authority Key Identifier:
                keyid:59:4F:7A:0B:A9:BD:1C:13:86:84:7C:E8:96:39:63:FE:4E:71:63:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WU96C6m9HBOGhHzoljlj_k5xY2w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:64:e0:06:18:83:3d:26:da:b9:09:fb:e8:d4:ee:fa:c4:0d:
         6e:76:de:8e:9f:6e:6a:99:bd:8c:e3:11:89:4b:df:bd:cd:2c:
         64:bd:80:a6:75:ed:e3:00:45:e9:a5:44:c2:f3:58:d5:d3:f3:
         cd:a3:58:c2:9f:aa:0a:7b:e8:21:c0:d7:79:0a:be:17:84:6f:
         22:fc:e5:0f:9b:d5:5a:6b:13:93:e3:84:8a:ca:39:12:a6:03:
         f1:05:61:3e:67:f5:54:6e:cd:86:77:0a:f2:6d:6d:1c:67:cd:
         2f:62:43:92:0b:f7:fc:d9:79:1a:50:10:30:7c:eb:e2:e7:51:
         c0:eb:ba:6a:93:70:cf:1e:af:8e:3a:b8:27:e5:64:df:23:2c:
         3f:18:6d:b8:84:db:09:79:67:10:c4:50:6c:24:ef:95:d0:93:
         19:7d:9e:91:1e:df:69:8e:09:64:0b:3a:97:18:c0:30:09:0a:
         e0:4e:65:b5:f2:c1:60:f1:6b:91:e7:b6:e8:b5:ef:82:03:83:
         5a:dc:f8:c1:1d:e5:e5:86:09:a9:2a:2f:63:f7:a4:28:04:5c:
         59:11:41:a5:72:68:a6:d3:cc:e1:3a:89:8a:45:90:2b:be:72:
         5a:0b:1b:71:f4:2b:f0:2c:a2:c8:9e:3b:62:08:68:62:a1:e6:
         c0:07:50:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:37:29 2026 by rpki-client