Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft
File:                     wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft (raw, json)
Hash identifier:          rSgYp2IH3FBUUjzY4bXZQr8i1UdJjVBL+Lb6fZmKOJ4=
Subject key identifier:   4F:E7:59:D1:1F:7A:17:EB:02:D2:D1:9D:5F:FC:7C:98:F4:13:E2:5B
Authority key identifier: C2:22:C1:9E:BF:52:84:4D:4B:7C:DA:0E:F7:54:E6:D3:30:C4:B6:09
Certificate issuer:       /CN=A91CE821/serialNumber=C222C19EBF52844D4B7CDA0EF754E6D330C4B609
Certificate serial:       159B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wiLBnr9ShE1LfNoO91Tm0zDEtgk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft
Manifest number:          1AC7
Signing time:             Wed 22 Jul 2026 16:52:35 +0000
Manifest this update:     Wed 22 Jul 2026 16:52:35 +0000
Manifest next update:     Wed 29 Jul 2026 16:52:35 +0000
Files and hashes:         1: wiLBnr9ShE1LfNoO91Tm0zDEtgk.crl (hash: 4y9zyIasC89jBa1+S2zi7Th/Tk3+fyBaDO7OMQeEJ8w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.crl
                          rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wiLBnr9ShE1LfNoO91Tm0zDEtgk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:52:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5531 (0x159b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE821, serialNumber=C222C19EBF52844D4B7CDA0EF754E6D330C4B609
        Validity
            Not Before: Jul 22 16:52:35 2026 GMT
            Not After : Jul 29 16:52:35 2026 GMT
        Subject: CN=6a60f553-d4f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b5:95:e8:10:7a:6b:fd:1e:09:19:b3:14:03:
                    3c:60:9f:1c:e5:c5:a9:5c:f9:05:f3:b2:13:1f:f2:
                    5d:54:42:21:b9:c4:fc:3e:f1:35:64:6d:e3:ca:c9:
                    3a:04:a4:5b:98:1d:84:ec:c7:59:c7:bf:d4:7f:cb:
                    fa:84:8d:c1:8e:d3:71:05:bb:23:f1:f8:23:11:00:
                    35:8f:aa:a8:24:eb:f3:45:69:a2:b7:a0:80:be:e7:
                    4f:de:ca:b6:ca:59:ad:2e:af:b6:41:9d:4d:49:c3:
                    cb:7f:5f:f8:58:81:71:a0:3e:ee:f8:b7:2f:89:23:
                    17:84:eb:67:a8:97:10:97:ab:8f:a7:64:3d:f0:f2:
                    bd:d8:d3:5a:f3:68:d9:22:08:59:88:fa:69:31:29:
                    8f:34:3f:3d:70:0c:43:13:3f:f4:7d:5c:3e:02:b3:
                    57:04:26:75:f7:22:3a:f0:e6:8b:45:87:80:e1:a3:
                    e5:80:e0:5d:5c:7a:af:9c:5f:ee:b6:b4:d0:ec:5e:
                    9a:2e:be:31:d7:7e:3c:50:f2:b8:36:d4:26:4c:a5:
                    18:b7:1f:30:1b:a0:5e:83:6b:ab:c4:aa:ca:bf:f3:
                    39:00:46:8c:17:6e:2c:03:29:74:51:eb:19:11:44:
                    cf:51:3e:3f:c9:99:4a:28:ef:8e:ef:68:f5:e6:fb:
                    ca:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:E7:59:D1:1F:7A:17:EB:02:D2:D1:9D:5F:FC:7C:98:F4:13:E2:5B
            X509v3 Authority Key Identifier:
                keyid:C2:22:C1:9E:BF:52:84:4D:4B:7C:DA:0E:F7:54:E6:D3:30:C4:B6:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wiLBnr9ShE1LfNoO91Tm0zDEtgk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:95:1e:1d:07:2f:1f:49:25:09:6e:df:8d:16:87:1b:36:94:
         80:d0:de:bb:11:3d:d6:08:ff:b7:50:1b:50:64:a8:09:3a:6b:
         32:b6:fd:3c:53:bc:f8:8e:79:ae:73:4f:51:c6:70:40:b8:2e:
         1f:72:2f:1d:5c:a4:f2:44:2b:23:fb:bf:f0:85:09:d6:32:6f:
         5a:5f:70:23:c5:4a:4f:6d:4b:7f:29:bb:dd:ee:f0:76:c4:75:
         af:d3:f7:92:0d:4c:0d:e9:61:b7:e2:64:d8:40:6e:48:77:eb:
         cd:f3:76:4f:3c:81:82:18:2c:e0:c0:bc:ea:31:a1:b8:6a:06:
         c8:24:07:77:77:0e:7e:e5:14:19:aa:0f:b6:99:da:9d:39:2a:
         3b:2b:10:00:89:fa:d7:04:ec:18:9a:1f:7a:2b:08:5f:1f:7d:
         b2:27:12:cb:f3:f6:da:87:56:1c:2b:9d:59:e5:ee:a9:63:a0:
         c7:3b:a4:c1:93:67:45:d0:05:34:b7:5c:db:dd:8e:f7:03:86:
         1c:c2:7e:dd:c8:b3:93:7b:0d:2d:fb:ee:f2:75:58:24:28:68:
         e8:8b:58:ae:58:85:1a:cd:ac:03:b2:f4:b2:92:f2:88:cb:d8:
         81:6d:55:30:fc:8f:d7:b1:b1:10:8d:ad:03:f8:97:15:32:f2:
         ce:65:8f:86
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0U4MjExMTAvBgNVBAUTKEMyMjJDMTlFQkY1Mjg0NEQ0QjdDREEwRUY3NTRFNkQz
MzBDNEI2MDkwHhcNMjYwNzIyMTY1MjM1WhcNMjYwNzI5MTY1MjM1WjAYMRYwFAYD
VQQDEw02YTYwZjU1My1kNGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA27WV6BB6a/0eCRmzFAM8YJ8c5cWpXPkF87ITH/JdVEIhucT8PvE1ZG3jysk6
BKRbmB2E7MdZx7/Uf8v6hI3BjtNxBbsj8fgjEQA1j6qoJOvzRWmit6CAvudP3sq2
ylmtLq+2QZ1NScPLf1/4WIFxoD7u+LcviSMXhOtnqJcQl6uPp2Q98PK92NNa82jZ
IghZiPppMSmPND89cAxDEz/0fVw+ArNXBCZ19yI68OaLRYeA4aPlgOBdXHqvnF/u
trTQ7F6aLr4x1348UPK4NtQmTKUYtx8wG6Beg2urxKrKv/M5AEaMF24sAyl0UesZ
EUTPUT4/yZlKKO+O72j15vvKLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE/nWdEf
ehfrAtLRnV/8fJj0E+JbMB8GA1UdIwQYMBaAFMIiwZ6/UoRNS3zaDvdU5tMwxLYJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTgyMS84MTFGQjU5MDYw
NTExMUU4OENEOEVDNDdDNEY5QUUwMi93aUxCbnI5U2hFMUxmTm9POTFUbTB6REV0
Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dpTEJucjlTaEUxTGZOb085MVRtMHpERXRnay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RTgyMS84MTFGQjU5MDYwNTExMUU4OENEOEVDNDdDNEY5QUUwMi93aUxCbnI5U2hF
MUxmTm9POTFUbTB6REV0Z2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhpUeHQcvH0klCW7fjRaHGzaUgNDeuxE91gj/t1AbUGSoCTprMrb9PFO8+I55
rnNPUcZwQLguH3IvHVyk8kQrI/u/8IUJ1jJvWl9wI8VKT21Lfym73e7wdsR1r9P3
kg1MDelht+Jk2EBuSHfrzfN2TzyBghgs4MC86jGhuGoGyCQHd3cOfuUUGaoPtpna
nTkqOysQAIn61wTsGJofeisIXx99sicSy/P22odWHCudWeXuqWOgxzukwZNnRdAF
NLdc292O9wOGHMJ+3cizk3sNLfvu8nVYJCho6ItYrliFGs2sA7L0spLyiMvYgW1V
MPyP17GxEI2tA/iXFTLyzmWPhg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:12:02 2026 by rpki-client