Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft
File:                     WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft (raw, json)
Hash identifier:          S1DCToieAYakGS3CC6uAkHTnAFTUCiJTpieUcs/E2Qg=
Subject key identifier:   06:7D:BE:23:CD:6B:18:4F:F7:D3:1B:91:81:15:9A:87:B3:3F:26:57
Authority key identifier: 59:0F:A3:C6:70:00:E9:69:85:79:1E:63:55:AD:1F:6D:AD:5C:18:76
Certificate issuer:       /CN=A91275A6/serialNumber=590FA3C67000E96985791E6355AD1F6DAD5C1876
Certificate serial:       027A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ-jxnAA6WmFeR5jVa0fba1cGHY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft
Manifest number:          0274
Signing time:             Thu 21 May 2026 02:05:42 +0000
Manifest this update:     Thu 21 May 2026 02:05:41 +0000
Manifest next update:     Thu 28 May 2026 02:05:41 +0000
Files and hashes:         1: WQ-jxnAA6WmFeR5jVa0fba1cGHY.crl (hash: XWW4CWEfhtj9fNsrmltjw3EgGosCCkcTwrszy/Ded/c=)
                          2: 8FA08DC29C8511EDB3506E5AC4F9AE02.roa (hash: TaJdRiGSYLXxN+5sGdAd2EbJ36eAZlZPdEwMNT5EY+w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.crl
                          rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ-jxnAA6WmFeR5jVa0fba1cGHY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 02:05:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 634 (0x27a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91275A6, serialNumber=590FA3C67000E96985791E6355AD1F6DAD5C1876
        Validity
            Not Before: May 21 02:05:41 2026 GMT
            Not After : May 28 02:05:41 2026 GMT
        Subject: CN=6a0e6876-6578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:0e:f9:2b:eb:f4:f3:bd:20:0a:10:e9:e4:4a:
                    e0:a5:58:f6:ef:be:26:4a:26:7d:c2:f9:2e:c5:e7:
                    1e:d7:8f:5c:4e:aa:a1:e0:04:f0:4b:f7:f9:dd:47:
                    e0:bb:1c:4d:9f:97:62:87:26:5d:77:80:94:fa:e0:
                    2f:fc:58:f8:90:55:5c:11:c1:c6:97:1b:e9:bf:86:
                    bb:f2:dd:92:8a:62:09:2a:fe:b9:79:99:37:ed:48:
                    06:91:ad:e4:1a:47:47:0e:90:ba:37:b0:d2:29:76:
                    40:7c:8b:ff:d0:02:f9:e8:3d:6a:49:72:bb:b3:95:
                    27:01:95:52:a9:bd:39:1b:b7:78:35:75:a3:8a:09:
                    03:49:d3:08:f3:b7:a7:b7:35:7f:4d:cc:98:6b:ed:
                    51:99:53:4d:80:3f:36:3d:d8:d7:1d:ad:12:16:9b:
                    6a:79:a4:41:c9:2f:2f:a3:66:81:b8:b0:97:2f:a8:
                    ca:bb:4d:4b:8c:5b:b6:9c:c9:cf:75:6c:4b:6e:a5:
                    a7:9d:a2:13:62:3a:6b:ae:a4:67:6d:0f:80:59:60:
                    55:f2:9b:51:05:4d:8a:c7:6f:93:e6:23:2e:e4:94:
                    21:13:26:13:bd:ea:0d:2e:5e:7c:2b:b6:bf:72:68:
                    20:42:17:65:bd:43:a3:04:62:97:ed:da:7f:d8:e9:
                    5d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:7D:BE:23:CD:6B:18:4F:F7:D3:1B:91:81:15:9A:87:B3:3F:26:57
            X509v3 Authority Key Identifier:
                keyid:59:0F:A3:C6:70:00:E9:69:85:79:1E:63:55:AD:1F:6D:AD:5C:18:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ-jxnAA6WmFeR5jVa0fba1cGHY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:91:89:25:e6:16:eb:06:f1:0d:b9:77:7c:ff:c2:64:1d:76:
         7c:62:a9:b8:47:88:aa:4d:5f:df:69:08:91:07:d7:da:9f:5f:
         76:e5:1f:69:0d:62:94:81:a4:69:6b:ac:8d:ab:96:75:55:e1:
         0a:be:6a:2d:ba:07:f4:7d:88:75:87:37:ce:43:72:04:6f:87:
         f4:a1:89:ed:a9:34:91:b5:d4:19:12:f3:f6:4f:49:0f:aa:46:
         b3:4b:fd:47:24:0b:da:61:2f:69:7c:9b:ac:3a:e7:7d:fd:b2:
         2e:c5:b7:ec:ad:01:62:07:5e:a9:c4:75:ff:37:7e:41:3c:94:
         e9:73:d4:0c:63:6c:c3:f5:39:3c:03:b9:c3:fd:eb:8c:50:8e:
         b6:42:32:6f:ea:49:3a:d1:c0:15:d3:ff:ef:c8:ef:6a:7e:11:
         eb:9e:23:2e:63:86:04:db:ea:60:b4:fd:a9:e8:34:33:d7:b8:
         d3:3a:d9:47:bd:c3:2d:a6:e5:c9:18:3f:30:5e:77:db:d3:88:
         ff:d4:03:11:e8:c2:3e:74:99:a0:57:94:b4:b2:10:a6:a5:79:
         cc:3f:b3:f1:ed:3a:a0:35:e1:65:fa:b7:4e:e5:a8:97:e6:ef:
         8f:ef:6a:af:ae:b7:f6:de:d4:77:24:8c:27:fb:77:2b:96:83:
         8f:8b:78:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:17:44 2026 by rpki-client