Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft
File:                     wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft (raw, json)
Hash identifier:          UM5T8AZkyPPngfQWKC25OH7OvbpN6RVdzdbL51b6KNY=
Subject key identifier:   20:AD:79:BE:9C:DB:40:09:1A:8A:36:FE:FE:2B:3F:A9:ED:6B:FC:10
Authority key identifier: C2:FC:64:48:56:4E:C6:52:6B:91:B2:FE:23:B4:FD:58:34:2D:20:F4
Certificate issuer:       /CN=A91B7292/serialNumber=C2FC6448564EC6526B91B2FE23B4FD58342D20F4
Certificate serial:       01DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft
Manifest number:          01CA
Signing time:             Thu 23 Jul 2026 05:11:33 +0000
Manifest this update:     Thu 23 Jul 2026 05:11:32 +0000
Manifest next update:     Thu 30 Jul 2026 05:11:32 +0000
Files and hashes:         1: wvxkSFZOxlJrkbL-I7T9WDQtIPQ.crl (hash: pe5szatj5hSQNbt15918g8rXnIcwkdMnAW056p3dzh0=)
                          2: 998461D4D14E11EEBD6E0D11C4F9AE02.roa (hash: 4q0CRvK7cBuNbIl5NhxnFGQFPdtxllu37atqP2x76PI=)
                          3: 870862B2222011EFACCDE81BC4F9AE02.roa (hash: ciVFB0KvpDvAViK7hnqW2d1Z4F4bwONdYRVuRaAOg9A=)
                          4: F007DD9AD14B11EEAB2B5281C4F9AE02.roa (hash: j6i+PoG1Un0EKIeMtEcI0TXiM+UyCndPMRvE27Z8cSY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:11:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 476 (0x1dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7292, serialNumber=C2FC6448564EC6526B91B2FE23B4FD58342D20F4
        Validity
            Not Before: Jul 23 05:11:32 2026 GMT
            Not After : Jul 30 05:11:32 2026 GMT
        Subject: CN=6a61a284-80fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2e:1c:61:26:9c:b6:ff:50:7a:98:f8:8d:96:
                    8f:ec:43:a3:9f:ef:29:a6:21:e7:d1:86:10:de:34:
                    ad:9a:91:ce:81:e1:c7:99:62:82:d5:12:21:39:bf:
                    8b:d2:8a:82:3a:f5:fd:a8:67:73:b1:f8:48:65:6e:
                    ce:07:7d:e0:a9:d1:0f:47:45:95:28:f4:a9:e4:18:
                    3e:51:6e:95:e1:c2:1d:60:a8:09:87:e3:e8:8c:3c:
                    51:57:94:f1:c3:52:be:b7:39:88:6e:89:20:48:5f:
                    5f:93:98:6f:8b:30:0e:05:4c:cb:2d:39:b5:0c:be:
                    8e:26:ee:b1:e8:cf:67:3c:fe:90:84:f1:b8:ef:e6:
                    df:42:4e:09:be:97:9f:8b:78:4e:0a:e6:4d:ee:92:
                    4b:6b:4d:d4:53:b4:30:88:51:a7:48:99:ed:9c:c3:
                    c7:05:12:10:1f:78:b3:fc:3f:1b:8b:37:93:85:cc:
                    d3:78:52:f3:13:d5:95:d5:1b:56:f8:21:f3:f9:f1:
                    14:85:12:70:c2:84:a9:ec:2f:68:81:0c:23:ae:f0:
                    54:dc:d8:3e:17:94:18:17:70:10:e2:5f:26:c6:d8:
                    d8:35:db:6f:77:9d:40:79:2a:4f:f9:23:f1:e0:2e:
                    34:a6:78:a5:89:30:d2:9f:d4:fa:a8:88:4d:91:2f:
                    d3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:AD:79:BE:9C:DB:40:09:1A:8A:36:FE:FE:2B:3F:A9:ED:6B:FC:10
            X509v3 Authority Key Identifier:
                keyid:C2:FC:64:48:56:4E:C6:52:6B:91:B2:FE:23:B4:FD:58:34:2D:20:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:87:d8:50:6d:17:22:9e:a1:30:d6:c2:49:99:97:b1:5c:b1:
         86:7e:95:e5:05:a6:cb:26:1d:8d:05:a6:e9:1e:ba:02:6a:0f:
         4f:2d:42:e1:71:47:d3:b4:34:67:cc:ec:bc:1d:c1:30:81:8e:
         c4:74:67:43:77:63:d8:b0:b1:c7:bd:54:c9:26:53:22:3e:b9:
         2a:0b:f0:fe:56:0d:5c:84:8f:ca:56:75:73:c6:55:fb:8e:59:
         f3:8e:b3:78:39:01:5d:db:8f:4d:98:2f:57:b9:b6:dd:c8:14:
         9a:16:4d:79:f3:a0:d9:61:6b:ab:3b:0f:aa:a6:3a:df:b4:66:
         1f:12:9a:2c:ac:01:c4:bb:85:90:5c:50:53:55:9f:6f:10:01:
         6d:97:1a:86:13:3b:8e:11:a5:4d:b9:85:69:39:f4:55:f5:ee:
         ec:c7:1e:d8:dd:19:0c:c0:ba:26:60:72:01:0d:66:cf:24:88:
         13:33:04:4f:36:7f:a8:f6:67:93:f2:3b:c7:23:7b:0e:bf:4b:
         5e:73:30:01:05:68:f8:b6:d7:9c:76:b1:6d:cc:2c:7b:16:8e:
         d5:4c:94:55:88:68:63:a6:97:b1:58:d3:f4:61:3a:9c:24:59:
         c3:40:d3:6a:93:88:d6:a4:b9:bc:72:97:41:5d:dd:e9:73:a5:
         99:69:c5:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:56:51 2026 by rpki-client