Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.mft
File:                     WKqOb2Cb9VgUA20moSpeKyUViTo.mft (raw, json)
Hash identifier:          wSyGMmkfYK7RzKinwVct/vjpQa6IgtWJf8266R1dwh0=
Subject key identifier:   B0:31:B0:6B:A8:01:A9:68:57:49:34:BC:BA:A2:CB:F8:E0:F6:E6:13
Authority key identifier: 58:AA:8E:6F:60:9B:F5:58:14:03:6D:26:A1:2A:5E:2B:25:15:89:3A
Certificate issuer:       /CN=A914EBB2/serialNumber=58AA8E6F609BF55814036D26A12A5E2B2515893A
Certificate serial:       75
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKqOb2Cb9VgUA20moSpeKyUViTo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.mft
Manifest number:          6E
Signing time:             Thu 23 Jul 2026 05:55:39 +0000
Manifest this update:     Thu 23 Jul 2026 05:55:39 +0000
Manifest next update:     Thu 30 Jul 2026 05:55:39 +0000
Files and hashes:         1: WKqOb2Cb9VgUA20moSpeKyUViTo.crl (hash: YlyF9mlketVshMC8b2NxNIPiopJ+EHMnoQlJV0Gi+t8=)
                          2: 651B78142DD711F187F45729B3833773.roa (hash: orGvvH8EtrQFqpfDS8Xvz4vEWTgyCI2f9BcO9d6cJBw=)
                          3: D23FC546011111F1B3598E67446F56BC.roa (hash: vcrWn/T7PWva5wilhUJF83D5sEdB2Zxd5D/0CZVE3OU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.crl
                          rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKqOb2Cb9VgUA20moSpeKyUViTo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:55:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EBB2, serialNumber=58AA8E6F609BF55814036D26A12A5E2B2515893A
        Validity
            Not Before: Jul 23 05:55:39 2026 GMT
            Not After : Jul 30 05:55:39 2026 GMT
        Subject: CN=6a61acdb-2b7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:08:97:a3:24:9a:a1:ab:89:d2:58:14:7a:0b:
                    d8:dc:1e:8c:4d:c2:0c:d9:4e:eb:12:5d:82:3b:7b:
                    a9:b5:c3:e2:3a:d8:06:df:7a:d0:34:05:cc:e3:26:
                    86:83:53:e2:e0:e3:84:e2:6f:16:35:6b:63:66:36:
                    dc:3f:d4:c8:62:42:c4:04:00:36:93:c5:97:7c:15:
                    c6:5c:ad:36:f8:fb:e0:58:2c:43:f7:6f:fc:c4:d8:
                    cf:43:37:be:9a:32:e2:9b:05:09:6a:74:e1:75:03:
                    a8:e7:4d:99:e9:4c:fb:78:59:b4:9e:2d:ae:a9:2f:
                    74:17:c9:2a:2b:54:6d:8f:6c:92:7a:90:3d:29:c6:
                    4e:93:28:e7:e4:8f:1b:0d:99:a8:f7:f2:df:f0:a1:
                    e9:79:76:39:e9:f1:8b:66:82:21:7e:f9:78:de:a5:
                    e4:56:1d:56:df:26:94:fc:12:06:8f:7f:93:8d:1a:
                    d9:df:47:5a:10:f9:11:52:63:92:55:cc:b2:b6:a3:
                    72:be:d4:39:61:9e:64:3b:16:df:6b:d1:32:f9:16:
                    54:96:8d:fb:99:f6:a1:4b:06:7d:fb:3e:6c:6f:0b:
                    f2:fd:48:63:91:2d:5d:0d:5e:d3:04:8a:4f:cc:70:
                    5e:eb:9f:af:8b:58:90:99:e2:67:58:12:62:61:13:
                    26:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:31:B0:6B:A8:01:A9:68:57:49:34:BC:BA:A2:CB:F8:E0:F6:E6:13
            X509v3 Authority Key Identifier:
                keyid:58:AA:8E:6F:60:9B:F5:58:14:03:6D:26:A1:2A:5E:2B:25:15:89:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKqOb2Cb9VgUA20moSpeKyUViTo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:08:af:41:21:af:cb:fc:a8:bf:39:ad:b9:d2:cb:59:41:f5:
         df:aa:c0:e8:d4:41:03:71:9e:00:09:30:5a:4d:b0:62:f3:3e:
         15:40:34:a0:71:63:86:a6:19:34:ae:e7:b4:5f:20:51:62:bc:
         db:91:78:e4:01:19:84:fa:6d:7d:9e:a0:26:e6:79:a1:60:d0:
         92:1e:25:b1:4f:6f:90:9b:c9:66:4c:83:a8:b2:d8:86:6c:3b:
         10:4b:ff:8f:48:48:0e:dd:09:f6:c6:25:d4:d1:c0:7a:e2:93:
         ac:cb:20:9c:54:13:a7:91:07:be:ef:7d:e4:66:c3:6c:a3:a5:
         a1:da:6d:57:13:93:37:c2:64:e7:42:a0:56:8f:2c:24:7d:42:
         26:20:23:61:4d:6b:3b:57:c7:80:4c:57:88:ae:da:f9:99:16:
         31:b7:0f:0e:9d:ea:0a:c5:cc:96:13:3b:04:d3:89:9b:81:c3:
         57:a4:73:34:af:88:7f:f6:77:e5:76:79:af:0e:1c:f3:e3:79:
         c7:14:87:b7:50:ba:6a:a9:88:27:33:f1:81:18:e0:89:2f:ff:
         15:75:40:c3:fc:b3:3e:98:92:91:7f:d8:0d:aa:dc:3b:0c:5b:
         b1:41:83:3a:6f:78:b0:a9:4e:6a:3b:ff:0f:78:75:44:68:7b:
         e3:cd:ef:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:28:39 2026 by rpki-client