Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.mft
File:                     Wr7NjqrTfqV665OfLAsUKXSEH4o.mft (raw, json)
Hash identifier:          oh2T4+1A6/LAKdojTEgIKzWS/d5Gtb1YvSzpf1Ky0uQ=
Subject key identifier:   5D:21:93:0F:08:D4:25:73:62:94:9D:31:CD:89:26:14:B2:6A:D8:AE
Authority key identifier: 5A:BE:CD:8E:AA:D3:7E:A5:7A:EB:93:9F:2C:0B:14:29:74:84:1F:8A
Certificate issuer:       /CN=A91A5A82/serialNumber=5ABECD8EAAD37EA57AEB939F2C0B142974841F8A
Certificate serial:       FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr7NjqrTfqV665OfLAsUKXSEH4o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.mft
Manifest number:          FB
Signing time:             Thu 23 Jul 2026 08:00:41 +0000
Manifest this update:     Thu 23 Jul 2026 08:00:40 +0000
Manifest next update:     Thu 30 Jul 2026 08:00:40 +0000
Files and hashes:         1: Wr7NjqrTfqV665OfLAsUKXSEH4o.crl (hash: Vr5+fWIIOGgo6x/ibI2CGWzt17di1GNWwC35M5GdyeM=)
                          2: D0B32912090911F0A5348F26C4F9AE02.roa (hash: 4Lyw/AU+Wk60oVjtMsai5M/XpQ4x8ZuW3TaDGBXdpZU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.crl
                          rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr7NjqrTfqV665OfLAsUKXSEH4o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 255 (0xff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5A82, serialNumber=5ABECD8EAAD37EA57AEB939F2C0B142974841F8A
        Validity
            Not Before: Jul 23 08:00:40 2026 GMT
            Not After : Jul 30 08:00:40 2026 GMT
        Subject: CN=6a61ca29-11b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d6:4f:f8:a0:ee:6d:93:c6:f4:e5:ea:97:13:
                    4c:2e:e6:c2:43:29:7e:0b:cc:c0:ca:4b:2b:db:89:
                    49:af:73:c2:a9:3e:81:23:75:5d:62:d4:4d:bc:14:
                    5e:87:36:bb:39:f1:0d:ac:d0:ac:b5:77:57:38:36:
                    30:cc:32:53:10:d0:40:63:e5:ee:aa:9f:1e:22:52:
                    00:07:09:ee:4a:71:fb:92:51:2f:0a:b0:ef:cc:05:
                    9e:10:5d:72:9b:fa:3a:5f:a1:e9:b4:c1:de:75:76:
                    e7:69:be:dd:83:12:cd:fa:d7:a7:54:50:ab:96:c1:
                    41:b2:c3:98:e5:e5:cd:bc:29:31:0f:73:04:ad:94:
                    38:2c:aa:de:c4:3a:e5:bd:81:08:a8:04:40:60:93:
                    68:29:90:82:72:46:7d:6e:b2:37:25:2e:74:77:83:
                    0d:47:27:01:7c:e3:3f:ee:45:20:df:94:60:97:e6:
                    5a:83:71:13:83:f3:e4:0b:6c:3a:8e:e0:cb:3e:71:
                    8b:50:27:69:a7:bc:d5:c1:f0:0a:fd:40:5c:b2:48:
                    af:19:bb:f0:de:a3:bb:08:e6:3e:7c:e4:2c:e8:c9:
                    bc:a3:18:0c:ae:2a:a3:41:bb:cb:23:3e:61:52:c8:
                    76:e1:ad:ff:ea:3b:38:e7:89:2d:54:97:64:19:21:
                    50:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:21:93:0F:08:D4:25:73:62:94:9D:31:CD:89:26:14:B2:6A:D8:AE
            X509v3 Authority Key Identifier:
                keyid:5A:BE:CD:8E:AA:D3:7E:A5:7A:EB:93:9F:2C:0B:14:29:74:84:1F:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr7NjqrTfqV665OfLAsUKXSEH4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:27:49:c2:51:f5:1b:fc:a1:12:6f:bf:e3:04:09:89:d0:05:
         fa:9a:2a:a6:24:f1:26:f4:07:ba:88:59:4d:1a:e2:90:f4:79:
         22:dc:e4:c9:59:8d:b6:21:e8:de:b8:03:fd:46:87:25:f1:7f:
         73:53:fb:ea:e6:85:32:65:f5:c9:8d:5c:4a:4a:18:c7:30:a5:
         56:81:7f:a8:b8:82:b3:27:fc:b3:57:cd:ea:f9:2d:1c:c3:01:
         82:4a:41:1c:e8:65:df:01:8f:c8:b3:f6:10:07:be:82:28:d4:
         69:df:ed:c6:04:e7:a9:a2:c4:c4:b9:78:35:c7:fb:21:1b:d4:
         5b:17:a3:ff:ee:74:27:9f:09:eb:e8:9d:f3:84:fa:c7:c9:08:
         fc:ce:4e:34:c0:35:d3:05:c0:49:ae:d0:b0:9e:81:13:9a:23:
         a0:eb:ef:a9:10:d4:86:b7:30:fb:85:d5:5d:8d:f9:aa:e0:50:
         35:4c:e2:3b:48:56:29:11:21:82:2d:ee:f7:50:77:f8:a2:35:
         5e:cc:3b:0d:a2:19:8c:6d:f2:d0:44:54:f7:2e:69:b4:ad:93:
         4d:50:c4:05:0e:92:a1:28:07:03:06:5e:10:6f:4f:8d:f9:2b:
         70:d3:d7:36:4c:07:93:7b:71:53:55:36:1c:4c:e8:6c:21:5b:
         f4:48:4a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:59:00 2026 by rpki-client