Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.mft
File:                     wFcRnKRd0xQhXGHgm_hx1Iq7X5s.mft (raw, json)
Hash identifier:          HQENjHOyAQ7X02dBFq/5OXB6qfJ1VnOfV+cu7eY26Kg=
Subject key identifier:   BA:84:15:D2:75:A6:16:25:78:6D:23:D7:5D:00:89:27:38:46:E8:F5
Authority key identifier: C0:57:11:9C:A4:5D:D3:14:21:5C:61:E0:9B:F8:71:D4:8A:BB:5F:9B
Certificate issuer:       /CN=A91B0B65/serialNumber=C057119CA45DD314215C61E09BF871D48ABB5F9B
Certificate serial:       1205
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.mft
Manifest number:          11EE
Signing time:             Wed 22 Jul 2026 17:17:25 +0000
Manifest this update:     Wed 22 Jul 2026 17:17:24 +0000
Manifest next update:     Wed 29 Jul 2026 17:17:24 +0000
Files and hashes:         1: wFcRnKRd0xQhXGHgm_hx1Iq7X5s.crl (hash: CyDTtpisUWr+AEMX4KO6CvYxMi3s3hg5kLfqjZba8/c=)
                          2: CA7A6F1A157C11E9BB547B7AC4F9AE02.roa (hash: eh77xy/M1nZdj0GwmtoZv3V9lfazohZ6e7A9i7EqAfo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.crl
                          rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:17:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4613 (0x1205)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0B65, serialNumber=C057119CA45DD314215C61E09BF871D48ABB5F9B
        Validity
            Not Before: Jul 22 17:17:24 2026 GMT
            Not After : Jul 29 17:17:24 2026 GMT
        Subject: CN=6a60fb25-60d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5a:4a:6b:e9:e7:d3:23:67:5d:5c:0b:0b:9c:
                    4b:b5:62:ee:17:76:15:8a:d5:48:68:07:b5:30:c8:
                    02:23:6c:c3:6f:1d:77:c5:aa:79:e9:92:bd:13:93:
                    be:b7:60:c7:0e:55:26:00:aa:ef:0a:c7:a8:ba:2c:
                    aa:67:cd:3e:d5:cb:db:c3:1f:f1:0f:d0:b6:51:e7:
                    30:30:98:04:45:51:a5:73:8c:0e:3f:84:b1:2d:9d:
                    0b:7d:90:d4:e3:e2:10:d0:56:1a:ce:48:22:db:ff:
                    e1:67:f7:df:80:c9:1a:0a:c9:2c:af:45:25:f0:df:
                    62:dd:a5:79:78:78:a2:06:47:3f:96:09:ec:26:b0:
                    5f:e6:32:e7:4c:d6:44:6d:88:28:3d:d4:c4:a0:1b:
                    3b:45:03:d6:b5:39:17:22:ea:e2:88:7f:fb:5d:fa:
                    4c:38:23:79:8a:5f:db:ea:bc:a6:f9:da:be:35:79:
                    12:07:74:7d:b9:6c:ef:f3:4e:03:a5:9b:3b:d5:69:
                    a9:6d:d3:34:2d:75:04:52:ea:db:32:6c:d2:82:07:
                    72:36:aa:11:12:ae:c4:9a:01:a9:35:f3:5b:ca:a9:
                    c5:08:a5:66:73:c1:03:16:f1:c4:23:20:25:88:84:
                    03:3f:e6:1f:39:02:ef:4e:81:a9:d3:c7:88:83:4d:
                    20:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:84:15:D2:75:A6:16:25:78:6D:23:D7:5D:00:89:27:38:46:E8:F5
            X509v3 Authority Key Identifier:
                keyid:C0:57:11:9C:A4:5D:D3:14:21:5C:61:E0:9B:F8:71:D4:8A:BB:5F:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:f1:a2:37:45:5f:38:88:75:4e:aa:13:87:8d:93:50:35:ae:
         7a:34:f4:5f:c8:d1:24:bc:e8:f6:b0:6e:c1:53:9c:1d:65:88:
         9d:a5:29:ae:3a:81:29:63:b1:03:b9:87:06:c3:94:b3:98:0a:
         7e:f9:eb:82:f5:c0:17:e1:65:46:85:17:ad:4c:57:11:1d:72:
         8c:12:39:12:e3:35:b9:fb:38:1c:c8:7a:b6:3f:d3:bb:99:47:
         55:e6:60:73:d3:76:f6:e7:02:af:86:91:59:8b:34:24:0a:72:
         75:11:d3:5b:c0:72:44:e2:0f:e2:40:f4:7b:ee:a0:25:99:ce:
         1e:54:73:2c:b6:f9:9c:05:73:43:9f:8e:f3:fc:88:d1:50:a6:
         e3:31:45:b5:c4:8b:97:7f:b2:e4:34:fa:d5:b5:af:b2:08:92:
         33:25:c3:09:ed:06:99:98:0e:00:d5:79:8c:96:d6:10:3d:4d:
         db:e0:ee:24:99:b0:80:19:c4:82:39:b8:23:2d:af:bb:6a:f3:
         e0:f7:24:dd:18:c8:79:5c:de:ef:73:c2:5f:1a:84:bb:0b:50:
         09:cc:8e:a4:a3:9a:52:20:d0:97:0a:6b:47:b3:9c:41:a1:c7:
         cb:a8:60:e1:c0:a1:c2:ae:e3:21:7b:8e:3a:98:85:a6:48:fa:
         02:d2:2c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:36:39 2026 by rpki-client