Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F9C3/6F288AB64AB711F186F27E3ABA833773/WfcM8WVJPKOohcgfFJYqhNv7-do.mft
File:                     WfcM8WVJPKOohcgfFJYqhNv7-do.mft (raw, json)
Hash identifier:          gRKsexcKfMywNgF9rPVB285Ku1q8almIsHL1oHtW4gc=
Subject key identifier:   B1:F7:9C:05:E5:B8:DA:A7:5F:93:A8:98:23:5A:03:3D:08:BF:07:6F
Authority key identifier: 59:F7:0C:F1:65:49:3C:A3:A8:85:C8:1F:14:96:2A:84:DB:FB:F9:DA
Certificate issuer:       /CN=A917F9C3/serialNumber=59F70CF165493CA3A885C81F14962A84DBFBF9DA
Certificate serial:       28
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfcM8WVJPKOohcgfFJYqhNv7-do.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F9C3/6F288AB64AB711F186F27E3ABA833773/WfcM8WVJPKOohcgfFJYqhNv7-do.mft
Manifest number:          27
Signing time:             Thu 23 Jul 2026 10:52:10 +0000
Manifest this update:     Thu 23 Jul 2026 10:52:09 +0000
Manifest next update:     Thu 30 Jul 2026 10:52:09 +0000
Files and hashes:         1: WfcM8WVJPKOohcgfFJYqhNv7-do.crl (hash: Zhrbg4HNDmz1R78bxRa/YvICJoUu8YNstM0laj4bE8k=)
                          2: 6BD47C4C4AB911F18A4D3DF6BB833773.roa (hash: ebv4da5ihfjLA6qrd11hFHVIha6XG9+Q5KSSUG/SzsI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F9C3/6F288AB64AB711F186F27E3ABA833773/WfcM8WVJPKOohcgfFJYqhNv7-do.crl
                          rsync://rpki.apnic.net/member_repository/A917F9C3/6F288AB64AB711F186F27E3ABA833773/WfcM8WVJPKOohcgfFJYqhNv7-do.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfcM8WVJPKOohcgfFJYqhNv7-do.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:52:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F9C3, serialNumber=59F70CF165493CA3A885C81F14962A84DBFBF9DA
        Validity
            Not Before: Jul 23 10:52:09 2026 GMT
            Not After : Jul 30 10:52:09 2026 GMT
        Subject: CN=6a61f259-97a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:03:15:74:85:51:8f:bc:93:50:c3:d3:7c:0c:
                    c6:21:e1:aa:50:2d:b9:96:76:5c:ad:8e:2f:42:9c:
                    eb:22:91:e6:f5:36:7c:6c:f8:97:d5:e8:ec:16:ec:
                    14:85:5b:8e:44:d6:da:9c:45:ba:0a:d8:b5:3b:44:
                    56:6e:c4:62:98:03:c1:2a:61:ae:80:c3:6b:4c:25:
                    7a:d5:40:53:55:61:36:40:3c:d3:e1:4e:6c:6d:2a:
                    1d:ff:31:9c:fc:fd:39:39:3b:49:29:2a:89:a6:bb:
                    9e:4f:bd:76:b8:d7:85:e3:87:de:bc:15:75:18:20:
                    10:fe:f8:45:bf:ea:96:ca:8e:19:f9:11:65:25:66:
                    ac:87:75:86:f2:4d:08:4e:6b:16:1d:26:94:24:17:
                    a7:34:06:f9:54:20:44:06:96:bf:80:c5:dc:35:97:
                    a8:1c:f6:10:14:4e:08:38:08:09:08:d7:c6:b0:a3:
                    c2:1e:23:07:9d:3f:9e:f2:68:d8:54:98:cd:8a:f8:
                    47:c0:0f:81:e9:44:34:4b:db:d5:1d:b8:80:84:98:
                    60:05:4b:ff:e9:a1:b1:25:53:02:66:9c:23:cf:44:
                    95:33:b4:de:3a:25:4e:97:df:7b:38:db:c0:86:00:
                    0d:42:2e:38:61:4d:fa:5f:23:d5:60:08:b9:a7:7e:
                    75:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F7:9C:05:E5:B8:DA:A7:5F:93:A8:98:23:5A:03:3D:08:BF:07:6F
            X509v3 Authority Key Identifier:
                keyid:59:F7:0C:F1:65:49:3C:A3:A8:85:C8:1F:14:96:2A:84:DB:FB:F9:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F9C3/6F288AB64AB711F186F27E3ABA833773/WfcM8WVJPKOohcgfFJYqhNv7-do.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfcM8WVJPKOohcgfFJYqhNv7-do.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F9C3/6F288AB64AB711F186F27E3ABA833773/WfcM8WVJPKOohcgfFJYqhNv7-do.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:07:26:bb:f3:f0:17:99:d2:96:e4:ed:c8:56:b8:11:ad:06:
         c8:74:55:dc:31:4b:68:25:96:d1:c3:45:88:26:c9:bf:0c:59:
         8f:69:11:35:83:42:5c:0c:6d:6b:97:d0:3b:03:9e:f9:04:88:
         90:0f:ec:2f:9e:06:74:d0:c9:97:bd:9e:ee:49:48:8f:e6:ac:
         fd:29:ae:e5:a0:2d:c7:27:87:c6:1b:a7:9a:38:b3:fa:b7:6a:
         7a:1f:a6:4b:51:3d:db:c6:ee:13:2c:bb:e4:e3:e3:3f:4d:fd:
         d5:5d:87:27:74:52:cb:7e:7e:a9:e8:2f:b6:da:66:ae:61:f4:
         ea:0d:42:e8:3a:7a:0f:47:2a:20:d8:14:15:96:26:df:21:10:
         2d:76:f7:17:71:29:17:08:7a:36:49:47:a0:ec:9b:1e:b3:c2:
         63:8b:55:af:b5:f9:54:d1:70:c4:d3:83:8d:bc:67:a7:ba:0e:
         c9:1f:37:97:08:87:3e:7a:05:85:5a:58:00:6a:3e:3c:12:d7:
         56:b4:37:c0:53:34:a8:b5:2d:35:fc:20:62:af:ba:4a:f3:e4:
         c5:3d:82:06:24:82:50:5f:14:91:89:88:43:d5:9c:8b:d9:b1:
         0a:b5:22:1b:4c:51:9e:0c:b3:e9:33:9a:96:d3:a8:bf:cf:35:
         89:16:fb:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:43:07 2026 by rpki-client