Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.mft
File:                     4WPw_lTxea9MbAlwmP774tQ4Wxk.mft (raw, json)
Hash identifier:          9nAJsiLuVpG908aQxFSDtOv8Gzm+LvO3KhNUKGO1yNc=
Subject key identifier:   FE:DD:C0:9A:3E:49:7F:62:CD:24:01:CB:32:4D:4F:5A:0C:85:06:54
Authority key identifier: E1:63:F0:FE:54:F1:79:AF:4C:6C:09:70:98:FE:FB:E2:D4:38:5B:19
Certificate issuer:       /CN=A91F54CD/serialNumber=E163F0FE54F179AF4C6C097098FEFBE2D4385B19
Certificate serial:       0107
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WPw_lTxea9MbAlwmP774tQ4Wxk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.mft
Manifest number:          0103
Signing time:             Thu 23 Jul 2026 07:54:17 +0000
Manifest this update:     Thu 23 Jul 2026 07:54:17 +0000
Manifest next update:     Thu 30 Jul 2026 07:54:17 +0000
Files and hashes:         1: 4WPw_lTxea9MbAlwmP774tQ4Wxk.crl (hash: FktrDoO87Or0xEkcSXL7FNexFQqeBffFmdeNroWvamw=)
                          2: 2CA96408FD8811EF9404CD48C4F9AE02.roa (hash: 1TDI2R5MKcilPYMjg8q2DIOpJANk9e/u2LmbUXePKOw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.crl
                          rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WPw_lTxea9MbAlwmP774tQ4Wxk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:54:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 263 (0x107)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F54CD, serialNumber=E163F0FE54F179AF4C6C097098FEFBE2D4385B19
        Validity
            Not Before: Jul 23 07:54:17 2026 GMT
            Not After : Jul 30 07:54:17 2026 GMT
        Subject: CN=6a61c8a9-79ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:64:59:bf:98:4d:cf:f1:a1:1d:3f:10:9d:a3:
                    5e:41:b7:de:63:ed:7c:f0:81:75:87:71:58:53:d3:
                    82:53:76:8c:cb:06:72:ab:63:6f:2c:5a:ba:f4:c5:
                    a3:68:96:c3:68:47:2a:4f:7f:bb:b7:7f:79:d4:6a:
                    46:81:61:a4:81:f4:80:db:99:70:a0:4f:ce:70:ac:
                    d7:59:be:cc:b6:38:d9:fd:62:c8:96:4e:5c:29:af:
                    71:d5:ed:fe:d3:68:bf:53:30:30:08:79:38:dd:e4:
                    61:9f:1d:a3:d4:a6:f7:ab:57:bd:fc:d7:45:5e:7f:
                    67:94:0d:b2:94:92:da:98:50:3a:5a:fd:24:34:62:
                    79:42:54:a4:41:dc:78:68:c7:08:ce:1d:bf:a3:85:
                    cd:54:f6:43:32:dd:1b:a6:b5:dc:fa:7c:69:20:fa:
                    c7:6d:82:70:76:53:ae:40:e0:33:86:fe:41:77:d8:
                    cd:c8:a7:61:cb:8c:d7:31:7c:17:56:ba:e6:90:17:
                    87:5f:f5:39:c9:b1:f2:63:08:04:8d:6f:39:72:f2:
                    a5:48:3e:d4:5a:d9:30:75:9a:29:bd:16:23:43:60:
                    40:df:10:35:8f:6c:3b:75:dd:dc:cd:35:c3:b3:a3:
                    c7:69:aa:af:9a:8d:62:6e:cb:68:39:f7:08:3b:1a:
                    c8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:DD:C0:9A:3E:49:7F:62:CD:24:01:CB:32:4D:4F:5A:0C:85:06:54
            X509v3 Authority Key Identifier:
                keyid:E1:63:F0:FE:54:F1:79:AF:4C:6C:09:70:98:FE:FB:E2:D4:38:5B:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WPw_lTxea9MbAlwmP774tQ4Wxk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:a4:25:b3:63:8c:41:a0:3f:db:93:6a:53:6d:04:25:49:0f:
         d0:24:93:eb:7a:c8:a3:79:4a:f7:77:99:54:c1:96:4d:c6:51:
         77:cb:e3:01:14:0b:9b:8a:7a:6e:b8:fe:db:e6:6a:c5:97:59:
         cf:bd:41:07:c8:8c:39:c5:a7:1a:1f:1e:27:b0:39:b0:97:fb:
         ef:6e:3e:27:c6:d2:3b:4b:f2:a5:18:1a:c5:8d:c6:ba:40:b9:
         4e:b5:58:4d:d1:a4:6c:7a:cb:f5:9f:d2:b0:04:db:cc:e8:69:
         bf:fd:00:3b:3a:ac:ba:d0:04:8c:bb:42:b1:69:65:6b:2a:25:
         a6:ae:7c:ff:3c:49:68:a4:f4:d8:84:50:71:bf:e8:d6:91:bd:
         1b:35:bf:88:76:6d:e4:85:c5:9a:fc:ce:07:9b:5d:00:7f:ba:
         0c:30:72:f3:7a:54:fa:a0:5c:58:6a:cc:e2:5b:b8:61:93:46:
         33:a1:26:ac:9f:be:60:6f:b8:c3:40:80:0d:e1:4b:3e:20:8c:
         07:06:56:fd:15:be:fe:be:de:5b:05:88:79:13:4d:4a:bd:85:
         a8:c2:1c:bd:38:73:80:95:fb:1c:70:a6:42:0b:5a:a2:bb:3f:
         96:de:02:aa:95:22:0b:19:76:ac:73:8e:4c:2b:ee:54:9c:f7:
         fa:a1:a1:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:36:39 2026 by rpki-client