Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft
File:                     Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft (raw, json)
Hash identifier:          3b6DkQI1xYFJdR1CPVavk8tjAhUP5MPC16cDKO3PHFk=
Subject key identifier:   54:5F:92:94:C3:62:0B:10:3A:8D:33:5F:29:17:36:D5:4C:B5:48:51
Authority key identifier: 5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9
Certificate issuer:       /CN=A911F8BC/serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9
Certificate serial:       0681
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft
Manifest number:          066D
Signing time:             Thu 16 Jul 2026 23:04:16 +0000
Manifest this update:     Thu 16 Jul 2026 23:04:15 +0000
Manifest next update:     Thu 23 Jul 2026 23:04:15 +0000
Files and hashes:         1: Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl (hash: P6cXx6RMjMjgPIXFeHzaEAxEM8O7ad2cc0v8+TQot08=)
                          2: 99B4BAA6D3E411EBB67F2616C4F9AE02.roa (hash: AVEGvtOF0iwaeq96YQ9QUqPUhESEUdl2ZAme82upoYA=)
                          3: 5284A644D3DC11EB9FCD6135C4F9AE02.roa (hash: 8jTO1g3DnI3Mc9HbbuIXEWUONxgdq2EyXq0caoNDXcA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl
                          rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 23:04:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1665 (0x681)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F8BC, serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9
        Validity
            Not Before: Jul 16 23:04:15 2026 GMT
            Not After : Jul 23 23:04:15 2026 GMT
        Subject: CN=6a596370-4e85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:17:64:0a:87:45:04:69:be:ca:e5:c9:94:e8:
                    1d:c6:c8:1e:db:f8:4e:06:b8:7b:04:46:a3:2d:5b:
                    7d:02:a7:82:f7:dc:41:00:59:db:17:18:01:8c:81:
                    2d:ec:fa:71:7d:3b:bc:45:86:3d:58:50:a8:2b:5b:
                    17:81:09:40:53:f8:58:55:0f:81:ce:ab:a7:84:e1:
                    34:34:86:7f:14:29:dc:1f:ad:f8:8f:b7:d5:79:c2:
                    80:0a:a7:11:dd:50:a6:96:d9:c0:1f:38:fa:61:72:
                    e7:29:ad:13:51:a3:da:1b:cf:7c:dc:f1:41:bd:51:
                    15:17:f0:cd:62:ca:8f:5b:24:f8:6f:9c:a9:31:b3:
                    d6:19:2d:10:04:fd:c3:03:85:2c:27:a4:88:f6:48:
                    3e:56:4d:0e:b9:77:8f:44:8e:c0:84:a8:6e:89:73:
                    9c:0c:f2:27:3e:be:4f:48:34:04:4f:01:28:09:bc:
                    eb:40:be:06:d3:96:af:e1:b2:50:98:d8:84:12:30:
                    18:4d:b6:a3:d6:63:f6:8e:d5:82:1b:61:f9:ef:fc:
                    01:46:7e:74:5c:52:65:e1:e0:d3:d8:37:c9:6f:9a:
                    e2:46:ab:79:78:92:eb:4c:88:23:76:29:df:0c:ad:
                    ab:22:c5:32:f0:7e:ac:e5:ca:82:87:c0:bf:b6:21:
                    27:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:5F:92:94:C3:62:0B:10:3A:8D:33:5F:29:17:36:D5:4C:B5:48:51
            X509v3 Authority Key Identifier:
                keyid:5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:a7:6d:22:1e:7d:3c:d1:b9:14:04:a5:c6:fe:82:45:1f:df:
         e3:16:45:be:85:ac:2d:83:d6:e1:15:92:b1:ff:c8:c6:fb:09:
         93:64:31:f3:a7:2a:7d:1b:f2:29:d4:01:c4:a6:af:cf:22:d9:
         8e:31:c8:6b:c4:6c:80:d2:71:30:ea:4d:4e:d5:81:7c:d2:67:
         21:a3:04:6a:19:bd:d1:76:5b:52:37:68:32:f3:1f:6f:c6:80:
         47:a8:c7:01:40:a8:cb:72:7b:b3:9f:db:cc:12:1c:d8:2a:ec:
         d0:3d:69:de:05:40:2a:02:64:f8:23:22:0b:ef:9d:dc:07:b2:
         49:74:62:2f:dd:4d:e7:72:aa:31:99:c2:e5:75:c2:43:a2:4d:
         6e:f6:d3:d5:01:95:3f:2d:84:d9:31:0f:1a:fc:04:4f:4b:5f:
         1b:94:a5:52:4d:ec:65:1e:13:71:d4:cf:e2:85:4f:e2:0c:ee:
         56:58:f4:8d:b6:ed:da:a3:6a:25:a6:23:01:e9:74:64:d2:82:
         db:dd:cd:86:8e:f1:7d:51:e0:1c:50:15:a4:e0:0c:9c:2e:87:
         84:ae:dc:b3:24:21:b3:9e:86:6b:ac:b1:59:a7:5e:0d:38:ea:
         21:cd:b6:d6:b1:61:bf:16:eb:46:90:30:38:48:d4:56:c1:6f:
         61:32:38:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 09:26:27 2026 by rpki-client