Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft
File:                     wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft (raw, json)
Hash identifier:          5SpU9+cJ1AczDI1KQEEnLRKOtAWd5Y6YTbUkQbAzDPs=
Subject key identifier:   01:EB:00:45:CF:95:DA:29:DB:A8:8A:A4:A1:24:37:93:2A:47:E2:F4
Authority key identifier: C2:4D:8E:A7:6B:CA:64:98:3F:53:2A:4C:DB:B2:CC:F1:9B:06:25:0D
Certificate issuer:       /CN=A91EF24F/serialNumber=C24D8EA76BCA64983F532A4CDBB2CCF19B06250D
Certificate serial:       088C
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/wk2Op2vKZJg_UypM27LM8ZsGJQ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft
Manifest number:          0883
Signing time:             Wed 22 Jul 2026 21:12:46 +0000
Manifest this update:     Wed 22 Jul 2026 21:12:46 +0000
Manifest next update:     Wed 29 Jul 2026 21:12:46 +0000
Files and hashes:         1: wk2Op2vKZJg_UypM27LM8ZsGJQ0.crl (hash: C0PQOwPk4NdvK3jdQtPuQwYYyXGdQoXUDX6cKBRGt+c=)
                          2: 47D255C8572811ECBE150619C4F9AE02.roa (hash: uWkp09s7yGSzXGuY3Dy3+U0rw2K9bYSVVtki+9GQvL0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.crl
                          rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/wk2Op2vKZJg_UypM27LM8ZsGJQ0.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:12:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2188 (0x88c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF24F, serialNumber=C24D8EA76BCA64983F532A4CDBB2CCF19B06250D
        Validity
            Not Before: Jul 22 21:12:46 2026 GMT
            Not After : Jul 29 21:12:46 2026 GMT
        Subject: CN=6a61324e-ed1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cc:ba:ab:d8:59:e8:12:d7:69:31:45:9f:11:
                    93:fc:5c:c0:27:8d:c2:23:64:ec:f9:e1:5c:6c:e5:
                    a7:77:96:39:95:df:7d:03:0d:7c:e5:62:78:dd:b9:
                    9f:02:31:87:da:dd:3e:46:b5:ba:a1:3f:b0:f9:25:
                    62:38:4d:34:88:75:8a:28:83:43:44:79:7d:b1:ec:
                    f4:23:7d:b6:69:d4:40:7c:f1:bd:cc:c6:84:cb:e8:
                    16:8b:88:83:42:84:75:87:33:c6:bc:12:34:85:03:
                    70:e1:c7:71:11:92:e6:5c:03:f6:8e:3d:a6:fb:62:
                    e0:d1:2b:2d:9e:15:0e:20:8c:5d:fa:75:ba:50:8e:
                    75:02:f7:d1:d0:f6:82:ba:bc:03:b2:28:83:a1:c8:
                    6d:5a:7d:2f:41:eb:a6:ae:11:2a:61:9c:02:d8:2c:
                    9c:1c:48:05:e9:46:2f:8d:0f:51:63:be:1c:ae:72:
                    84:40:f4:08:ef:42:7e:f3:60:ed:0e:4f:1f:bd:60:
                    f9:9a:62:07:b9:7b:52:7a:05:5b:da:cb:f8:dc:d9:
                    78:3a:1a:ab:9c:ba:da:1b:c4:d5:3c:85:91:40:c5:
                    4f:b2:90:d3:14:a8:42:3b:ae:ed:40:72:a3:ff:84:
                    23:4d:3c:b1:94:75:f9:6d:7e:bb:04:81:71:09:d7:
                    06:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:EB:00:45:CF:95:DA:29:DB:A8:8A:A4:A1:24:37:93:2A:47:E2:F4
            X509v3 Authority Key Identifier:
                keyid:C2:4D:8E:A7:6B:CA:64:98:3F:53:2A:4C:DB:B2:CC:F1:9B:06:25:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/wk2Op2vKZJg_UypM27LM8ZsGJQ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:1c:85:69:5a:e1:19:83:db:53:d9:3b:7b:97:43:49:43:ee:
         85:3f:13:64:fa:2f:5b:31:52:76:b1:28:82:bf:0a:9e:cb:a5:
         f5:54:5e:70:e1:ad:fc:1c:5a:a4:7c:26:ce:c7:a9:58:cb:d8:
         ce:6b:63:24:9f:8b:20:ca:2e:46:a0:55:19:3d:3f:8b:5d:a8:
         1e:98:d1:84:dd:5b:1f:1f:1c:76:28:23:2d:5d:b4:a2:18:c6:
         72:b0:c0:a9:6f:56:83:61:1c:9c:f9:f9:56:3d:e8:3f:cc:25:
         dc:7e:f9:18:ce:ce:35:1d:69:8d:12:0c:ac:e1:4c:e3:04:16:
         d2:53:0b:09:25:e9:97:4f:19:4a:2b:95:7f:a7:4c:d0:02:a6:
         b9:c7:06:2c:33:39:dd:89:86:87:55:ba:17:c1:77:f6:51:74:
         74:c1:69:9a:0b:89:f8:08:56:d4:d5:15:a5:c2:da:ac:85:f6:
         5d:1a:a4:65:7a:80:50:41:73:39:b7:ca:a0:30:5a:c1:1f:e8:
         36:a7:ef:9d:fc:5e:b2:30:57:55:af:b7:e9:7a:38:2d:43:f2:
         53:25:aa:c9:70:48:b5:37:d2:cf:65:32:94:6e:78:ba:36:87:
         e5:a8:4f:59:95:3f:6f:48:74:6a:c5:ef:ed:d4:6b:9a:07:d3:
         f0:71:6f:e1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUYyNEYxMTAvBgNVBAUTKEMyNEQ4RUE3NkJDQTY0OTgzRjUzMkE0Q0RCQjJDQ0Yx
OUIwNjI1MEQwHhcNMjYwNzIyMjExMjQ2WhcNMjYwNzI5MjExMjQ2WjAYMRYwFAYD
VQQDEw02YTYxMzI0ZS1lZDFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAncy6q9hZ6BLXaTFFnxGT/FzAJ43CI2Ts+eFcbOWnd5Y5ld99Aw185WJ43bmf
AjGH2t0+RrW6oT+w+SViOE00iHWKKINDRHl9sez0I322adRAfPG9zMaEy+gWi4iD
QoR1hzPGvBI0hQNw4cdxEZLmXAP2jj2m+2Lg0SstnhUOIIxd+nW6UI51AvfR0PaC
urwDsiiDochtWn0vQeumrhEqYZwC2CycHEgF6UYvjQ9RY74crnKEQPQI70J+82Dt
Dk8fvWD5mmIHuXtSegVb2sv43Nl4OhqrnLraG8TVPIWRQMVPspDTFKhCO67tQHKj
/4QjTTyxlHX5bX67BIFxCdcGywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAHrAEXP
ldop26iKpKEkN5MqR+L0MB8GA1UdIwQYMBaAFMJNjqdrymSYP1MqTNuyzPGbBiUN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjI0Ri81RjQ2NzMyQTAy
RkExMUVCQTNBMEEyMzFDNEY5QUUwMi93azJPcDJ2S1pKZ19VeXBNMjdMTThac0dK
UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL3drMk9wMnZLWkpnX1V5cE0yN0xNOFpzR0pRMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RjI0Ri81RjQ2NzMyQTAyRkExMUVCQTNBMEEyMzFDNEY5QUUwMi93azJPcDJ2S1pK
Z19VeXBNMjdMTThac0dKUTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKByFaVrhGYPbU9k7e5dDSUPuhT8TZPovWzFSdrEogr8Knsul9VRecOGt/Bxa
pHwmzsepWMvYzmtjJJ+LIMouRqBVGT0/i12oHpjRhN1bHx8cdigjLV20ohjGcrDA
qW9Wg2EcnPn5Vj3oP8wl3H75GM7ONR1pjRIMrOFM4wQW0lMLCSXpl08ZSiuVf6dM
0AKmuccGLDM53YmGh1W6F8F39lF0dMFpmguJ+AhW1NUVpcLarIX2XRqkZXqAUEFz
ObfKoDBawR/oNqfvnfxesjBXVa+36Xo4LUPyUyWqyXBItTfSz2UylG54ujaH5ahP
WZU/b0h0asXv7dRrmgfT8HFv4Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:56:08 2026 by rpki-client