Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.mft
File:                     WQ0nhfMG6JFKHf6bJ9V8a4n82pM.mft (raw, json)
Hash identifier:          W7z1XjrBVGnY6YmN1+9Gj/GeewEHK8L6ZglllgSlDtM=
Subject key identifier:   2B:80:E6:15:62:0B:D3:3D:ED:DE:84:DB:0D:B0:A7:94:EE:F7:5D:D5
Authority key identifier: 59:0D:27:85:F3:06:E8:91:4A:1D:FE:9B:27:D5:7C:6B:89:FC:DA:93
Certificate issuer:       /CN=A91376D4/serialNumber=590D2785F306E8914A1DFE9B27D57C6B89FCDA93
Certificate serial:       07D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.mft
Manifest number:          07C5
Signing time:             Wed 22 Jul 2026 21:59:30 +0000
Manifest this update:     Wed 22 Jul 2026 21:59:30 +0000
Manifest next update:     Wed 29 Jul 2026 21:59:30 +0000
Files and hashes:         1: WQ0nhfMG6JFKHf6bJ9V8a4n82pM.crl (hash: b9MvY7lzQBeejpyw+DGAEphP6ul81aUzKvMi4Fn/9Wg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.crl
                          rsync://rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:59:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2001 (0x7d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91376D4, serialNumber=590D2785F306E8914A1DFE9B27D57C6B89FCDA93
        Validity
            Not Before: Jul 22 21:59:30 2026 GMT
            Not After : Jul 29 21:59:30 2026 GMT
        Subject: CN=6a613d42-d05c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:c4:1c:98:6e:fc:02:9d:82:55:c3:46:10:af:
                    13:79:2f:44:f4:d0:4a:bd:ee:d2:44:50:a2:d3:67:
                    f2:5f:76:d5:c7:38:b8:5b:db:77:4a:b5:c3:d7:d4:
                    f2:a7:22:35:9d:46:8b:1b:99:82:35:3f:98:4c:53:
                    19:b9:bb:63:0f:e3:76:a5:fb:55:58:c0:7a:38:9e:
                    15:f7:a4:26:32:03:b9:03:05:7f:bf:4d:69:c5:c1:
                    f5:d0:65:8c:04:a4:c0:3a:d4:48:48:b2:8b:8a:7a:
                    69:2b:cb:e0:b1:78:7f:2d:15:82:20:a9:7b:37:a4:
                    8f:55:b5:3b:54:9b:19:ef:f7:16:0e:da:c2:59:ec:
                    f5:d1:f0:aa:ce:55:94:f5:03:df:f6:54:5b:34:20:
                    5d:f6:ca:ed:a4:a0:3b:0c:c5:b5:bf:25:8b:99:68:
                    2e:19:69:cd:b7:b0:85:b0:a9:87:bc:fb:a9:12:26:
                    ea:58:d9:d5:6f:71:d9:de:22:c2:49:51:ae:1e:93:
                    cc:35:b6:25:fd:f7:8c:82:64:ec:63:09:e5:9c:af:
                    e8:c1:80:9e:8c:96:69:89:51:35:9d:c7:e8:aa:89:
                    3e:7b:1f:6b:21:ff:f9:b1:8b:a2:7f:69:73:68:48:
                    97:5b:86:49:3a:71:77:fe:a1:b9:bd:76:09:16:08:
                    c0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:80:E6:15:62:0B:D3:3D:ED:DE:84:DB:0D:B0:A7:94:EE:F7:5D:D5
            X509v3 Authority Key Identifier:
                keyid:59:0D:27:85:F3:06:E8:91:4A:1D:FE:9B:27:D5:7C:6B:89:FC:DA:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:00:2b:a8:b6:db:e7:4a:c6:90:29:46:95:47:ed:f6:0a:dd:
         14:0a:b1:41:b9:57:bc:8e:b0:27:67:7d:b8:ff:34:d1:ca:a8:
         f8:07:a6:d0:30:5c:e4:92:7a:94:f2:7d:06:91:70:b1:d8:50:
         00:5d:11:9d:eb:f9:16:7a:72:4b:ca:bf:85:58:ab:eb:84:91:
         70:49:ef:13:4e:2c:e4:01:89:07:45:18:80:84:ad:d5:7b:22:
         3a:64:8c:37:14:c7:1e:33:a9:bb:83:f2:4b:8c:2a:5e:68:92:
         17:0d:82:70:37:6e:37:9a:c3:34:ad:c1:d5:b8:bf:99:5b:58:
         03:90:eb:0f:38:3b:26:90:8c:5c:f4:25:62:7c:ee:25:f4:c5:
         50:ba:e3:4d:c4:64:2c:54:3d:75:e6:44:4f:fe:3f:bc:72:35:
         78:a3:d0:79:8f:5d:57:b1:2c:7e:0d:9c:9a:7f:c8:f9:b8:14:
         78:03:38:89:04:99:8f:7c:35:81:e9:c1:a7:ec:eb:ef:e0:2a:
         f0:41:08:f0:a9:d4:3a:a4:20:0e:66:b8:8c:59:13:7b:be:cf:
         b4:5c:db:4c:d6:53:12:f8:c5:ac:8a:e4:e4:89:5d:c9:d3:39:
         b8:8a:f0:3a:1b:79:7f:8c:2a:73:89:47:5e:b6:44:fe:d1:89:
         f3:6b:b8:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:48:40 2026 by rpki-client