Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.mft
File:                     wUIqDEz_JI1Rc1jr33tOgCuswOc.mft (raw, json)
Hash identifier:          cY1EGSa+30C8hQMhlO345hh8JvGGeepoGWPe8+4cKG8=
Subject key identifier:   9B:EC:86:16:26:51:A8:D5:CD:2B:4D:0F:AF:E4:B5:84:A5:BA:83:57
Authority key identifier: C1:42:2A:0C:4C:FF:24:8D:51:73:58:EB:DF:7B:4E:80:2B:AC:C0:E7
Certificate issuer:       /CN=A91EB45A/serialNumber=C1422A0C4CFF248D517358EBDF7B4E802BACC0E7
Certificate serial:       3575
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUIqDEz_JI1Rc1jr33tOgCuswOc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.mft
Manifest number:          3568
Signing time:             Wed 22 Jul 2026 15:07:00 +0000
Manifest this update:     Wed 22 Jul 2026 15:07:00 +0000
Manifest next update:     Wed 29 Jul 2026 15:07:00 +0000
Files and hashes:         1: wUIqDEz_JI1Rc1jr33tOgCuswOc.crl (hash: 687OtGvIM2AWoB+6LpEsaIbZB5cpNW4NYafZsc07OUM=)
                          2: 17BB4C20F17E11EAA3CC597BC4F9AE02.roa (hash: 19iYpTQxec7phX7aSuAR7eVYx46KurWTZFsnfBvWqQo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.crl
                          rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUIqDEz_JI1Rc1jr33tOgCuswOc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 15:06:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13685 (0x3575)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB45A, serialNumber=C1422A0C4CFF248D517358EBDF7B4E802BACC0E7
        Validity
            Not Before: Jul 22 15:07:00 2026 GMT
            Not After : Jul 29 15:07:00 2026 GMT
        Subject: CN=6a60dc94-930a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:bc:b9:db:19:99:b1:c9:2a:72:91:7e:a1:b0:
                    e4:57:84:c7:70:bf:02:30:c2:48:95:ef:ca:18:0b:
                    a4:7d:e5:97:e3:5b:52:55:d4:59:4b:39:af:3f:60:
                    f6:1e:5a:42:4a:d9:92:b7:cd:0f:85:43:96:30:15:
                    cc:22:a5:63:0b:a7:db:37:af:2e:04:d0:5b:57:20:
                    d1:2c:ae:73:90:e4:b7:01:a3:23:fb:c5:2d:b9:a6:
                    23:a1:61:37:6d:3a:55:1b:0b:16:df:0d:d9:e9:4c:
                    8e:5c:c4:c7:41:ff:c0:ff:69:72:78:a2:dd:fe:c3:
                    1d:ad:a7:4c:6b:22:68:be:7d:9c:e8:73:14:11:00:
                    65:d3:4c:cc:ec:7e:e5:65:44:27:93:50:41:78:8f:
                    e4:de:fd:e3:77:b8:47:c5:93:a8:d3:80:a5:4d:0a:
                    06:9d:9e:76:ac:2b:4f:2f:92:4f:d6:29:b6:f3:e8:
                    76:a5:d4:c9:aa:ab:b4:37:e5:b3:54:f9:68:c1:46:
                    71:61:18:23:ca:3e:40:f9:dc:ec:0a:f0:5b:b3:69:
                    04:10:5e:5c:db:ab:83:6f:93:58:7b:7c:28:0c:5c:
                    e6:1b:06:c1:bb:ee:c1:a1:94:98:39:4e:dc:97:69:
                    25:0d:a2:0f:3e:6a:d6:f1:42:c8:93:12:14:f6:99:
                    50:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:EC:86:16:26:51:A8:D5:CD:2B:4D:0F:AF:E4:B5:84:A5:BA:83:57
            X509v3 Authority Key Identifier:
                keyid:C1:42:2A:0C:4C:FF:24:8D:51:73:58:EB:DF:7B:4E:80:2B:AC:C0:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUIqDEz_JI1Rc1jr33tOgCuswOc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:4e:52:27:06:f9:58:6f:bf:a5:06:66:ba:b5:54:2b:03:18:
         54:2c:8b:9e:60:0a:11:79:a8:09:57:75:88:af:5f:fd:fd:3e:
         9d:ac:b4:41:88:7b:e4:54:7e:70:98:d1:a1:c6:c5:77:13:aa:
         cd:2e:11:db:9f:66:ab:3e:3e:63:86:a8:38:98:ce:1a:e1:15:
         47:6b:6b:38:9b:fd:fa:3f:e2:0c:8e:12:92:92:fa:e4:c8:f3:
         48:e5:3b:94:7e:86:9f:91:0c:34:27:11:00:3b:d5:0a:83:e3:
         74:21:9c:e3:2a:8c:53:91:da:d9:5b:41:41:fe:82:01:24:35:
         2c:7e:e4:f2:a5:23:cb:71:2e:7f:1a:79:19:6d:7c:80:a4:69:
         99:f2:ef:99:70:5c:98:84:30:8a:0e:1b:72:77:ef:74:13:eb:
         f5:92:47:0a:c0:13:7f:d6:3c:b4:7e:be:25:fc:bf:a2:12:24:
         34:11:5d:db:58:17:23:77:d3:79:30:e4:ab:ef:aa:bf:b9:98:
         03:b6:90:4d:d0:7c:29:98:2f:72:c6:c3:37:6f:87:75:3d:4a:
         1c:1d:02:f1:2e:80:86:18:41:81:d8:a1:54:22:72:c8:b7:4f:
         f0:93:fc:35:bb:45:12:6d:f9:bf:92:a6:5d:a8:90:b6:76:23:
         f2:31:92:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:04:28 2026 by rpki-client