Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft
File:                     s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft (raw, json)
Hash identifier:          S3Gtdu1EUh714F8xisfgsl7Hc5LaQRnMWt9ENd3TmWw=
Subject key identifier:   88:2D:C1:75:31:3D:4F:8A:BE:23:C4:0D:84:D9:B1:C9:F9:EE:80:26
Authority key identifier: B3:EC:1F:F6:AD:55:2A:A1:6E:E1:01:95:64:BA:D9:F7:61:FD:B5:D8
Certificate issuer:       /CN=A91A381A/serialNumber=B3EC1FF6AD552AA16EE1019564BAD9F761FDB5D8
Certificate serial:       0210
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-wf9q1VKqFu4QGVZLrZ92H9tdg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft
Manifest number:          0202
Signing time:             Thu 23 Jul 2026 04:28:17 +0000
Manifest this update:     Thu 23 Jul 2026 04:28:17 +0000
Manifest next update:     Thu 30 Jul 2026 04:28:17 +0000
Files and hashes:         1: s-wf9q1VKqFu4QGVZLrZ92H9tdg.crl (hash: oOwJcU35eJpYCVZvXBBP0DYE1BWeF5/D8Bj84mQw1bo=)
                          2: EBB7A41AB4DA11EEBD650259C4F9AE02.roa (hash: SDwmGnNA62CDBnu6SIeNZtXcNKrSVhcMHLtnwpsVMtg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.crl
                          rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-wf9q1VKqFu4QGVZLrZ92H9tdg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 528 (0x210)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A381A, serialNumber=B3EC1FF6AD552AA16EE1019564BAD9F761FDB5D8
        Validity
            Not Before: Jul 23 04:28:17 2026 GMT
            Not After : Jul 30 04:28:17 2026 GMT
        Subject: CN=6a619861-a704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:26:3c:81:d5:c6:ed:27:27:c5:a4:8d:a4:bf:
                    59:30:b3:29:69:86:20:8f:c7:61:1d:89:8f:dd:bf:
                    30:63:5f:3f:46:2d:45:ad:5e:8b:f7:47:c5:fb:bd:
                    f7:9f:1a:fc:2a:5e:d6:12:c5:9b:c0:22:0a:bf:ba:
                    db:61:2b:fa:09:5a:f5:7f:d7:e9:60:b4:53:37:29:
                    2e:0c:e1:ab:c9:f3:ef:31:13:fe:87:85:18:b3:d1:
                    a4:9d:b0:fd:89:73:67:14:99:45:36:b8:61:48:1c:
                    81:6c:34:b1:3b:33:c1:b7:ed:08:13:cd:89:d9:7e:
                    b9:91:d6:c8:67:c5:59:26:55:39:4b:65:74:a4:5a:
                    97:02:26:f3:e1:cd:af:e7:cf:42:97:a9:92:90:66:
                    91:b7:5c:d2:0c:8e:b7:aa:44:e2:10:44:53:e4:da:
                    84:ef:71:a6:bc:d5:64:bf:06:92:2d:ed:85:c3:10:
                    6a:4c:26:10:be:40:d5:27:13:8e:c8:20:ed:98:c7:
                    6a:b0:34:1e:0b:45:f2:f7:c4:65:a3:28:5d:d0:af:
                    45:1a:b2:2f:f8:8c:79:3d:ae:8b:40:fd:60:42:95:
                    0a:c0:d0:64:e7:e8:57:db:f2:dc:62:66:36:5b:81:
                    cb:e1:ba:37:08:00:a5:e6:e5:03:ea:e9:c0:50:d1:
                    7f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:2D:C1:75:31:3D:4F:8A:BE:23:C4:0D:84:D9:B1:C9:F9:EE:80:26
            X509v3 Authority Key Identifier:
                keyid:B3:EC:1F:F6:AD:55:2A:A1:6E:E1:01:95:64:BA:D9:F7:61:FD:B5:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-wf9q1VKqFu4QGVZLrZ92H9tdg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:e3:b5:15:4e:2b:27:cf:44:b9:3d:c7:5f:31:d2:8e:f1:29:
         b4:a7:ff:67:ce:75:d9:32:ed:c1:9a:22:7d:d2:9c:30:99:42:
         8d:16:d1:02:69:e4:aa:8b:16:56:54:e5:8c:ec:34:1a:9b:70:
         77:1b:62:6d:2f:24:b3:0e:25:98:65:46:70:72:35:8f:fa:e0:
         e6:28:dc:20:56:32:ea:5d:02:96:3d:b8:04:21:5d:60:78:d8:
         44:38:57:73:1e:17:7f:35:b8:2a:34:fa:57:6a:3e:9a:92:dc:
         39:3a:cc:e3:97:12:57:06:98:4a:76:9e:bf:bd:5f:7d:7e:2a:
         63:d2:29:aa:d6:01:6c:84:7d:9d:25:25:75:03:95:be:c0:b7:
         2e:14:6c:2e:42:15:33:bb:a5:ae:8c:2d:fe:49:52:58:38:24:
         cd:28:5b:bf:37:53:a1:69:14:61:a1:99:47:f5:94:3e:ad:81:
         9a:70:51:3f:7a:d6:8a:45:8a:66:03:5a:83:cb:88:3f:d3:ae:
         d8:07:d0:b3:26:f4:07:5f:5d:b8:37:96:9d:97:66:e4:62:94:
         b8:c7:f9:d3:0f:47:4e:c5:ca:6d:1d:21:5d:d9:50:bd:9a:9f:
         07:45:0a:8a:c9:78:9b:85:fd:4c:3b:1f:b1:4e:e8:a5:07:ca:
         40:3e:75:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:07:06 2026 by rpki-client